Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3134332e3235352e39372e302f32342d3234203d3e203532393737.roa
File:                     3134332e3235352e39372e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          i4FXC+vPT/keIsX7dOXPc86IDSCdXyBC8WPPIzVDdXg=
Subject key identifier:   06:C8:37:7C:15:34:D3:89:A8:9F:69:10:E9:9D:74:B1:0C:5D:C2:5E
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       4422A0BEC6DF3DEDB9F5E875FC36E36C65DECA27
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3134332e3235352e39372e302f32342d3234203d3e203532393737.roa
Signing time:             Tue 21 Nov 2023 06:00:03 +0000
ROA not before:           Tue 21 Nov 2023 05:55:03 +0000
ROA not after:            Tue 19 Nov 2024 06:00:03 +0000
asID:                     52977
IP address blocks:        143.255.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:22:a0:be:c6:df:3d:ed:b9:f5:e8:75:fc:36:e3:6c:65:de:ca:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Nov 21 05:55:03 2023 GMT
            Not After : Nov 19 06:00:03 2024 GMT
        Subject: CN=06C8377C1534D389A89F6910E99D74B10C5DC25E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:45:71:88:39:36:56:e3:49:41:cc:d3:ac:92:
                    19:6a:3f:c4:f0:ba:b2:ef:26:c2:d2:10:21:e1:5e:
                    90:49:92:de:20:8b:4d:6c:a7:f1:48:2e:6c:e2:47:
                    1c:4f:8c:de:30:6c:32:b5:93:bf:9b:3a:1e:84:2b:
                    42:f7:c0:00:cd:b0:a3:45:7b:7d:c9:4c:88:14:cc:
                    8f:88:6c:87:22:33:9a:8e:d5:dd:20:37:83:f3:22:
                    e5:4d:e5:7d:ac:cf:a0:e1:67:47:48:29:52:3e:c5:
                    54:5b:f0:98:c4:bf:fd:22:11:61:32:d8:2a:f8:07:
                    d1:71:e5:d5:fe:2c:0c:c8:f8:e1:5b:e9:2f:ad:e9:
                    ff:09:13:d6:7d:29:23:41:a6:96:a1:94:a5:ee:f4:
                    37:c1:0e:82:a3:68:92:8a:62:00:64:79:77:85:0b:
                    e2:4d:9e:02:51:06:d8:db:62:a3:ef:7a:83:98:e6:
                    ca:8d:8c:8d:2c:1d:a5:c9:f7:6a:66:4c:ac:00:9a:
                    d1:1a:75:21:ef:da:d8:87:3c:c6:67:9d:22:e2:45:
                    37:07:32:cb:a3:09:cd:f3:29:48:5d:23:13:6e:b5:
                    78:b9:17:8b:89:79:63:92:4b:0e:55:5e:ac:07:89:
                    aa:c8:54:98:bd:9f:10:3a:6e:a3:cb:cb:24:f9:5e:
                    7d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C8:37:7C:15:34:D3:89:A8:9F:69:10:E9:9D:74:B1:0C:5D:C2:5E
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3134332e3235352e39372e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:2c:e7:79:d2:dc:31:f1:77:42:ab:52:fb:60:4d:b5:c4:2b:
         91:55:d4:d3:af:4d:39:ec:05:c4:d2:91:dd:9f:8e:b4:b8:3a:
         30:9b:fa:08:cf:34:52:4b:e7:94:20:46:68:d8:9d:b6:2d:17:
         c5:44:05:df:d2:2e:24:0e:71:59:9f:09:10:b5:ea:67:75:b9:
         13:a5:e7:d9:a8:ae:54:1c:d6:c5:50:f5:2f:85:8c:ef:3c:96:
         70:8b:4a:bd:73:d1:19:2d:ec:14:1b:9e:39:32:43:e1:a5:fe:
         5f:08:f0:41:1c:1c:ab:c8:4a:2d:f6:6e:55:33:e0:78:27:fd:
         68:32:3c:1e:72:fb:6f:49:6d:bc:72:c3:14:f8:b6:7a:3f:d1:
         01:b5:57:23:ee:03:c7:ba:54:0d:49:c4:bf:82:27:6d:cb:8f:
         19:5d:22:74:54:a3:40:71:3e:ec:4b:e2:02:60:4b:a4:fc:a4:
         4b:d6:ae:41:c4:ad:ac:56:75:cf:f1:c7:9c:a3:2a:c2:10:1e:
         90:d5:20:a5:c3:40:29:67:e7:a6:dd:1e:13:e2:67:bb:94:d3:
         72:0d:cf:9f:10:11:5b:fd:41:64:b3:d1:86:e8:03:af:31:54:
         22:ed:ac:b5:1a:67:0f:41:25:2c:7d:82:95:a1:11:56:af:3f:
         5f:89:b7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org