Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e36302e302f32332d3233203d3e20323633333437.roa
File:                     3139312e33372e36302e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          DSpOf3x9jB6GLlpTe8fxtgGlHwGxByEV6wfIOHznZiY=
Subject key identifier:   BA:92:4D:C1:33:A4:6C:65:F4:E6:02:64:2A:C4:68:8F:36:3E:86:83
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       15DB7B665BCCC914463D8E952AA86050B1B84D26
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e36302e302f32332d3233203d3e20323633333437.roa
Signing time:             Fri 18 Aug 2023 11:00:41 +0000
ROA not before:           Fri 18 Aug 2023 10:55:41 +0000
ROA not after:            Fri 16 Aug 2024 11:00:41 +0000
asID:                     263347
IP address blocks:        191.37.60.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:db:7b:66:5b:cc:c9:14:46:3d:8e:95:2a:a8:60:50:b1:b8:4d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Aug 18 10:55:41 2023 GMT
            Not After : Aug 16 11:00:41 2024 GMT
        Subject: CN=BA924DC133A46C65F4E602642AC4688F363E8683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3f:0a:a5:8f:f9:7f:8d:27:75:cc:0c:81:70:
                    4b:89:b2:dd:61:b1:84:34:e1:b8:8d:95:0b:df:2b:
                    9d:c9:cc:ac:cd:ad:56:c8:18:5a:16:c6:39:d6:ea:
                    62:06:06:da:a0:01:3f:49:00:5d:ae:95:77:d6:4d:
                    f2:e7:dc:39:2a:f2:09:24:b4:4c:80:a1:7c:b6:3b:
                    e1:d2:fe:90:06:84:cf:7d:b3:34:c3:26:c8:87:ed:
                    2d:c2:48:03:24:c3:e3:4a:fe:a0:22:5d:db:4c:78:
                    68:c0:ec:3e:05:5f:f7:47:81:89:0e:43:2a:10:16:
                    f2:7b:86:13:29:61:b3:df:34:bd:70:ee:7e:5a:3a:
                    55:6a:7f:f7:32:ff:33:c8:05:a9:ff:78:4b:cc:d8:
                    f1:f4:7f:ec:9a:95:c2:98:92:3e:49:b9:9d:a0:70:
                    57:27:31:36:df:49:ff:47:d4:7a:05:60:34:b4:03:
                    19:fe:be:3c:d9:1f:f7:91:ef:90:4c:fc:be:ce:f7:
                    78:db:c2:27:75:2c:42:4b:6d:96:ff:5c:a9:68:1b:
                    92:30:5c:ad:94:d8:7e:87:87:5f:4c:40:7e:8b:2c:
                    73:28:22:ab:3a:1e:17:07:4b:01:f4:ad:9f:7e:a3:
                    2f:7d:c3:dc:6e:44:5d:82:31:5d:9f:df:16:74:a5:
                    cc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:92:4D:C1:33:A4:6C:65:F4:E6:02:64:2A:C4:68:8F:36:3E:86:83
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/3139312e33372e36302e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:41:20:29:80:de:8d:cb:56:c1:0e:c3:08:24:47:42:09:51:
         3d:21:ca:7d:dd:e6:4a:6a:1c:4d:23:6c:cd:0a:41:65:24:0a:
         7d:7d:83:13:6e:6c:00:7f:b2:d1:64:13:b6:7c:97:66:16:ad:
         21:a1:7d:94:0b:15:00:96:d5:a4:bc:72:fe:86:b6:7f:61:aa:
         76:0b:38:5d:17:7d:72:1c:ce:1a:72:8d:77:7f:59:15:44:05:
         10:89:09:3c:5d:42:9f:59:a2:1a:b9:c5:63:06:ba:57:6d:7a:
         4a:fc:74:8a:1f:35:a2:0e:8b:34:a5:67:ea:b4:4a:54:d3:44:
         18:a3:ed:9d:65:e5:0f:a2:bf:b9:41:09:2e:63:8f:ad:11:d0:
         7a:ff:a6:f7:b6:3c:3e:e5:53:13:42:6d:8b:f2:89:55:f6:a6:
         84:7a:88:78:e7:e0:16:96:5f:c5:52:e3:71:e7:2b:3e:e0:fa:
         05:82:3f:48:0d:05:fd:cd:e1:e6:93:f4:7d:6c:a1:40:de:a7:
         63:ac:1d:0e:a6:00:9e:a9:69:8e:9b:a8:5d:de:2f:80:94:97:
         f3:5b:6f:84:3c:2c:23:3d:22:3d:1c:2e:5d:70:bb:4e:35:27:
         f8:41:4a:7c:06:8d:b3:46:b6:1f:58:84:7f:fa:c0:d2:7c:7d:
         dc:00:68:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org