Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e35372e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e35372e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          hz6ofs/nPBi2w8RvPvZLYOnEaEyxg+67oWmjsdkgFpE=
Subject key identifier:   17:FF:07:4C:BF:BC:D6:A9:F1:30:4A:D4:BC:0D:52:8A:7D:26:34:29
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       3E301498ED9067C70F180A48F3B7BA001C9FB73A
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e35372e302f32342d3234203d3e20323633333437.roa
Signing time:             Tue 20 Jun 2023 17:33:09 +0000
ROA not before:           Tue 20 Jun 2023 17:28:08 +0000
ROA not after:            Tue 18 Jun 2024 17:33:08 +0000
asID:                     263347
IP address blocks:        191.37.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:30:14:98:ed:90:67:c7:0f:18:0a:48:f3:b7:ba:00:1c:9f:b7:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Jun 20 17:28:08 2023 GMT
            Not After : Jun 18 17:33:08 2024 GMT
        Subject: CN=17FF074CBFBCD6A9F1304AD4BC0D528A7D263429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7b:a2:a0:26:e0:88:c4:63:bf:54:d3:7d:ca:
                    d1:84:81:b9:e4:a1:d8:fc:1f:f1:4f:58:c5:b1:9b:
                    00:84:50:76:75:18:2d:8f:14:1b:10:5c:ab:e6:93:
                    b0:d9:b8:88:d6:0d:c8:8f:0e:70:a0:a3:d7:6f:16:
                    48:9b:72:b6:cf:84:f8:4d:52:99:25:08:70:f4:9e:
                    49:dd:18:c8:b1:ad:dc:fe:b6:f6:55:ab:08:2f:ec:
                    de:6f:75:32:31:db:54:72:91:09:60:54:dd:66:75:
                    46:2f:e9:06:16:b6:68:7e:cc:8b:fa:ac:8e:0c:52:
                    9c:40:d2:e4:62:18:4e:bb:e3:cb:b8:92:8c:28:c7:
                    15:85:49:df:ff:66:13:22:06:ef:63:cd:90:f7:de:
                    a2:f9:67:32:66:54:11:56:c4:93:36:4e:4b:f7:d7:
                    ae:c5:81:21:60:38:9c:26:d3:95:2a:d0:50:19:a3:
                    19:a7:25:45:1a:42:ec:42:f9:db:35:88:ef:a1:b7:
                    e8:0d:34:90:2c:85:f2:30:83:aa:18:ed:63:c5:a9:
                    12:99:c3:b9:5b:a4:b5:fb:fe:21:58:9b:e2:50:1f:
                    7c:99:af:69:ac:d9:99:25:d4:e2:41:c3:76:27:7d:
                    75:df:f7:77:d7:62:6d:00:76:6d:37:4f:17:67:93:
                    1e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FF:07:4C:BF:BC:D6:A9:F1:30:4A:D4:BC:0D:52:8A:7D:26:34:29
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e35372e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:94:68:c2:6a:b0:0f:5b:ae:07:d6:41:89:65:b3:ed:29:ec:
         ea:de:c5:61:c8:10:15:7c:ec:f0:66:de:27:e3:fc:35:b4:5c:
         a8:5d:a5:4d:b7:ea:03:c7:6c:8b:8d:65:a2:c2:f7:9d:b6:12:
         dc:ec:3f:2b:e0:4a:fa:d2:27:cc:7b:ae:46:7e:5d:89:64:b6:
         c2:54:e5:22:39:10:84:01:e3:90:d2:81:b1:ee:eb:24:76:69:
         1d:32:b4:25:be:e0:13:cd:3b:91:3b:cd:03:35:36:a5:ca:27:
         ad:53:0f:7c:bf:df:90:55:2a:95:8e:d8:28:16:20:ec:98:b5:
         50:0e:b6:95:21:ec:d5:f2:90:50:71:1a:67:a2:34:86:36:ea:
         f9:fa:79:63:c4:1f:7c:5b:2b:88:e1:46:fc:d8:f3:77:8f:0b:
         54:5f:68:fb:54:a4:81:9b:ba:4a:d8:0f:fc:7c:0d:e2:81:31:
         f7:63:ba:44:d0:d8:87:5f:e5:ee:e3:da:58:60:5c:65:a6:1e:
         1e:cc:cb:76:ea:de:50:b6:16:bb:63:b6:b0:34:e3:15:3b:60:
         dd:e9:01:65:23:10:83:f0:e7:1f:bc:0b:a5:89:5b:d0:b9:28:
         35:84:2c:29:75:e3:3f:f3:d7:bf:6c:0a:95:46:72:fd:e6:a8:
         1f:a9:93:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org