Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e35382e302f32332d3233203d3e20323633333437.roa
File:                     3139312e33372e35382e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          O7Sob3xyRS4K4zE7tSpHPSBOwNpLc35s67ePpXUA7fI=
Subject key identifier:   E7:0D:03:B2:70:EE:60:B4:FC:A2:1D:11:C3:C2:48:7E:9B:21:03:1C
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       5AB99CAB59CC9A1828D81439075CAD6143A3C5BE
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e35382e302f32332d3233203d3e20323633333437.roa
Signing time:             Fri 18 Aug 2023 11:00:24 +0000
ROA not before:           Fri 18 Aug 2023 10:55:24 +0000
ROA not after:            Fri 16 Aug 2024 11:00:24 +0000
asID:                     263347
IP address blocks:        191.37.58.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b9:9c:ab:59:cc:9a:18:28:d8:14:39:07:5c:ad:61:43:a3:c5:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Aug 18 10:55:24 2023 GMT
            Not After : Aug 16 11:00:24 2024 GMT
        Subject: CN=E70D03B270EE60B4FCA21D11C3C2487E9B21031C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f8:2c:f8:9c:30:73:a4:64:96:6c:86:37:19:
                    65:3c:49:fa:15:9b:4e:3b:1e:3d:59:9d:39:2d:ab:
                    37:5f:f0:cb:6d:96:ea:71:6e:9a:10:3c:41:ca:de:
                    3b:4b:53:9c:84:73:8c:b3:dd:4b:f6:5b:20:b7:5f:
                    95:9f:75:53:3b:dd:8e:be:1b:62:d2:63:db:53:1d:
                    85:20:62:f2:f9:c8:3f:e5:48:ad:d5:07:94:39:90:
                    0f:5c:4e:8e:28:e6:28:2f:5a:e6:c0:4b:b6:3d:ef:
                    36:da:b6:f4:d8:1b:c0:84:a3:5f:66:5b:40:cd:f6:
                    a7:3e:f6:80:d1:08:62:9d:bf:86:e9:5f:40:39:47:
                    c7:22:b6:3e:46:c2:ba:d5:66:87:8d:a8:a2:e2:0a:
                    76:75:eb:4c:ab:ae:19:a0:bf:a9:a1:64:a9:ea:2c:
                    c8:75:b8:36:13:6f:c6:09:eb:48:ae:cb:5f:ab:2c:
                    da:27:26:03:63:1b:92:a5:a5:6b:f8:44:ef:f1:bf:
                    a4:22:23:84:6c:83:ed:2a:25:5a:7c:3c:8e:cc:7e:
                    2e:e1:e5:84:6e:85:96:b4:2a:83:85:6d:bc:d1:31:
                    e4:a5:a7:62:7c:9b:9d:90:d3:a1:02:fa:8c:cb:38:
                    11:ed:c1:81:be:e7:ba:d9:18:9f:a7:b1:da:d7:dd:
                    a8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0D:03:B2:70:EE:60:B4:FC:A2:1D:11:C3:C2:48:7E:9B:21:03:1C
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e35382e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:36:2a:8b:19:07:2f:e8:99:29:45:58:04:ac:df:8c:83:97:
         4e:aa:6d:b9:d0:a2:8a:5a:f1:42:05:0a:f5:d7:12:bf:3e:5a:
         42:ca:8a:31:87:3d:1d:aa:96:19:d2:d3:c5:65:ec:3b:72:24:
         5d:2f:dc:0b:ca:db:9b:ab:51:1f:b6:16:7f:86:33:cb:93:3b:
         39:90:7c:19:05:c5:23:a6:d8:f6:e9:69:33:23:00:b2:32:1e:
         8e:eb:ac:96:2c:6b:12:7d:6d:cc:2c:9a:29:bf:db:e8:ae:41:
         76:f3:13:33:79:81:ca:cb:9a:be:63:78:22:ed:91:e5:2a:d2:
         f9:40:65:f3:1c:81:f2:22:5f:02:91:ba:2b:b3:dc:aa:93:73:
         d7:62:6b:9b:a1:1a:8c:b5:bb:62:46:98:6f:5b:35:7e:d4:1b:
         4c:f7:13:cb:55:3e:99:86:d2:7d:50:b3:9b:6a:94:1b:58:b0:
         6b:44:84:ca:56:8b:67:6b:da:d1:ad:ab:29:cd:29:d5:21:13:
         ae:83:ac:e3:ea:39:f1:5a:8a:57:e0:d1:23:98:8e:33:2e:95:
         d7:1c:38:0e:8b:b8:03:33:34:b3:3d:fc:e6:0e:49:9f:a7:74:
         bf:7a:c5:e0:d8:52:f1:25:90:b4:9d:e8:40:15:0d:fa:54:9d:
         8a:65:15:29
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWrmcq1nMmhgo2BQ5B1ytYUOjxb4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUzODRDODc5Mjg1OEQ0MUMzRkI4NDNBQ0NGMzExNzM4
MjE0MUEwMDAeFw0yMzA4MTgxMDU1MjRaFw0yNDA4MTYxMTAwMjRaMDMxMTAvBgNV
BAMTKEU3MEQwM0IyNzBFRTYwQjRGQ0EyMUQxMUMzQzI0ODdFOUIyMTAzMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz+Cz4nDBzpGSWbIY3GWU8SfoV
m047Hj1ZnTktqzdf8MttlupxbpoQPEHK3jtLU5yEc4yz3Uv2WyC3X5WfdVM73Y6+
G2LSY9tTHYUgYvL5yD/lSK3VB5Q5kA9cTo4o5igvWubAS7Y97zbatvTYG8CEo19m
W0DN9qc+9oDRCGKdv4bpX0A5R8citj5GwrrVZoeNqKLiCnZ160yrrhmgv6mhZKnq
LMh1uDYTb8YJ60iuy1+rLNonJgNjG5KlpWv4RO/xv6QiI4Rsg+0qJVp8PI7Mfi7h
5YRuhZa0KoOFbbzRMeSlp2J8m52Q06EC+ozLOBHtwYG+57rZGJ+nsdrX3ajzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5w0DsnDuYLT8oh0Rw8JIfpshAxwwHwYDVR0j
BBgwFoAUNThMh5KFjUHD+4Q6zPMRc4IUGgAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVeWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5
ZEMvMC8zNTM4NEM4NzkyODU4RDQxQzNGQjg0M0FDQ0YzMTE3MzgyMTQxQTAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM1Mzg0Qzg3OTI4NThENDFD
M0ZCODQzQUNDRjMxMTczODIxNDFBMDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzAv
MzEzOTMxMmUzMzM3MmUzNTM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMz
MzMzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBvyU6MA0GCSqGSIb3DQEBCwUAA4IBAQAMNiqLGQcv
6JkpRVgErN+Mg5dOqm250KKKWvFCBQr11xK/PlpCyooxhz0dqpYZ0tPFZew7ciRd
L9wLytubq1EfthZ/hjPLkzs5kHwZBcUjptj26WkzIwCyMh6O66yWLGsSfW3MLJop
v9vorkF28xMzeYHKy5q+Y3gi7ZHlKtL5QGXzHIHyIl8Ckbors9yqk3PXYmuboRqM
tbtiRphvWzV+1BtM9xPLVT6ZhtJ9ULObapQbWLBrRITKVotna9rRraspzSnVIROu
g6zj6jnxWopX4NEjmI4zLpXXHDgOi7gDMzSzPfzmDkmfp3S/esXg2FLxJZC0nehA
FQ36VJ2KZRUp
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org