Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3134332e3235352e39362e302f32342d3234203d3e203532393737.roa
File:                     3134332e3235352e39362e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          nTowNXacLRofbQza/xpIfpWX8yKi/qZaFIcrkJAlSvE=
Subject key identifier:   7D:0D:D5:3E:1A:B6:1A:A9:4A:75:BD:16:26:A0:13:16:1A:01:82:C7
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       2A9EBB59692FE33ADD0FC692FD566FCE9F86F5B6
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3134332e3235352e39362e302f32342d3234203d3e203532393737.roa
Signing time:             Tue 21 Nov 2023 06:00:03 +0000
ROA not before:           Tue 21 Nov 2023 05:55:03 +0000
ROA not after:            Tue 19 Nov 2024 06:00:03 +0000
asID:                     52977
IP address blocks:        143.255.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:9e:bb:59:69:2f:e3:3a:dd:0f:c6:92:fd:56:6f:ce:9f:86:f5:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Nov 21 05:55:03 2023 GMT
            Not After : Nov 19 06:00:03 2024 GMT
        Subject: CN=7D0DD53E1AB61AA94A75BD1626A013161A0182C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:d5:bc:b1:37:69:5e:21:85:9f:ee:bc:a6:
                    49:2e:e1:58:62:2a:e5:ff:25:d0:0a:46:2c:68:e6:
                    7d:62:d5:86:a4:8a:8a:1a:2c:fe:61:e4:45:6a:a6:
                    76:1d:ae:cb:70:54:b7:1e:7e:d8:a4:c9:79:69:3e:
                    11:50:0f:25:f3:f6:61:d3:b4:9a:f4:e3:1f:e7:4d:
                    10:e9:7d:44:89:0c:fc:9d:1b:63:74:12:91:7e:ec:
                    cd:fa:56:11:56:13:16:c2:bb:a6:50:4a:b5:b5:0c:
                    c2:9f:4d:d1:4f:82:8a:80:59:3c:60:b3:94:7a:a7:
                    ef:6f:2c:d9:b8:5c:7c:e4:17:9e:5b:c3:c3:17:db:
                    f9:30:63:ed:9c:12:9c:f0:92:d7:86:6d:d9:96:d3:
                    d9:28:7f:f8:ec:63:e2:7f:3d:dc:a7:db:7d:16:de:
                    97:42:83:5c:1a:8f:0b:44:65:b4:8a:86:34:69:13:
                    b8:33:3e:32:66:0e:b0:cd:46:e1:94:11:6c:92:48:
                    2c:50:cc:1e:c7:e8:4c:93:22:4a:18:40:29:09:b6:
                    e4:51:8b:0b:85:c5:6e:28:de:b7:46:26:23:0d:64:
                    78:76:9a:62:27:cc:a2:de:79:13:9a:05:73:dd:72:
                    5e:8c:03:94:d1:cb:35:b7:c2:e8:32:8d:31:a4:49:
                    90:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0D:D5:3E:1A:B6:1A:A9:4A:75:BD:16:26:A0:13:16:1A:01:82:C7
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3134332e3235352e39362e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:b4:52:43:2b:20:a8:6b:7f:57:99:ce:f2:ae:a1:08:53:67:
         65:dd:08:65:b5:50:a0:16:70:e4:11:1e:de:27:20:09:63:05:
         79:f2:16:3b:29:a9:b6:0c:9f:36:81:39:e1:de:7b:ac:be:1c:
         3e:67:1a:fe:08:9b:69:d3:5b:97:ea:24:88:e6:49:fd:fa:d0:
         f8:e6:e0:a4:13:5d:02:e5:d7:01:9b:99:3c:7f:38:52:7b:5c:
         78:7a:a3:37:3c:a2:a1:ed:8c:35:62:fa:77:ae:59:9a:23:95:
         3e:56:fa:a6:15:80:1c:fa:5e:dc:93:b4:dd:b3:05:f2:71:b8:
         d3:b5:e6:d7:a0:b9:13:57:a5:be:e3:44:79:36:ce:88:66:0e:
         ed:37:73:37:b3:08:97:da:27:72:55:98:14:f1:72:75:2e:e3:
         b5:76:da:15:a4:d7:0c:cc:f6:86:d0:7f:6c:3a:fc:41:6f:c7:
         79:c4:a6:63:1c:84:da:7b:19:5c:2b:62:98:50:80:7e:b5:5e:
         e6:ab:6e:88:44:ed:85:47:1c:87:8c:b1:1e:92:f1:92:aa:85:
         75:08:22:41:6b:32:c4:fa:4c:c2:23:84:46:e3:3b:fd:00:93:
         a8:28:94:7b:cd:cc:cb:2c:95:86:b3:d8:47:9d:e9:f2:98:72:
         e9:a6:da:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:13 2024 by rpki-client on console-ams.rpki-client.org