Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3134332e3235352e39382e302f32332d3233203d3e203532393737.roa
File:                     3134332e3235352e39382e302f32332d3233203d3e203532393737.roa (raw, json)
Hash identifier:          Rsh30SBT1q24D4h2SSHwhj7mYcvwcUR89+YK1KjYKSw=
Subject key identifier:   1B:55:62:08:13:7D:AD:EB:16:D5:76:06:CE:27:CA:23:B7:E6:73:2B
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       4EB89952EE4DE0154775F0A773ADC39890D7EEC7
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3134332e3235352e39382e302f32332d3233203d3e203532393737.roa
Signing time:             Tue 21 Nov 2023 06:00:02 +0000
ROA not before:           Tue 21 Nov 2023 05:55:02 +0000
ROA not after:            Tue 19 Nov 2024 06:00:02 +0000
asID:                     52977
IP address blocks:        143.255.98.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b8:99:52:ee:4d:e0:15:47:75:f0:a7:73:ad:c3:98:90:d7:ee:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Nov 21 05:55:02 2023 GMT
            Not After : Nov 19 06:00:02 2024 GMT
        Subject: CN=1B556208137DADEB16D57606CE27CA23B7E6732B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d9:eb:a9:fe:fc:21:76:df:19:b3:5c:2c:76:
                    48:15:d2:cd:82:1c:3e:68:30:0f:5d:81:b5:9d:1b:
                    d0:4f:b0:6c:fe:41:fd:47:5c:f8:0b:59:fb:a5:0f:
                    0d:1e:9c:31:65:01:c2:21:66:00:ee:0a:15:b5:cd:
                    8f:28:d2:d2:aa:3e:99:ba:a9:2d:24:c5:3c:60:8a:
                    e8:2e:09:e1:e3:ac:42:1a:61:c1:29:64:2c:bd:ec:
                    7c:47:29:11:e8:5f:a6:18:bf:14:f6:3a:d4:a1:88:
                    e5:ea:7b:94:cc:ba:f6:1b:d8:35:18:f9:c7:af:ea:
                    27:1e:82:bc:d0:a0:af:8a:5a:ca:22:0f:bb:18:32:
                    b7:0f:68:89:18:3f:52:b0:2c:0a:33:de:f5:17:18:
                    eb:88:e7:de:cf:8a:d2:1f:90:1f:2b:41:08:25:2c:
                    08:52:e6:74:5f:97:03:68:ac:a5:ef:f0:01:0c:30:
                    00:99:cc:fa:1f:45:c6:29:9a:d9:65:16:bc:ca:8a:
                    6b:3c:83:27:1c:aa:41:fc:4a:1e:78:05:e0:f8:25:
                    98:4b:64:e7:9c:2e:a1:bf:00:1a:38:46:03:19:96:
                    3e:b7:ac:50:e1:1f:53:f0:83:30:a7:c9:0f:70:f6:
                    d8:18:4e:f5:ea:45:3f:a3:57:a2:40:d0:6e:e0:fd:
                    18:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:55:62:08:13:7D:AD:EB:16:D5:76:06:CE:27:CA:23:B7:E6:73:2B
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3134332e3235352e39382e302f32332d3233203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:6a:f6:83:30:c9:d8:57:72:8e:95:67:ac:d4:7a:da:13:81:
         d8:d9:2b:65:18:37:0b:c9:10:ab:54:b2:ee:20:e1:16:59:48:
         bd:8a:e1:c1:96:01:38:ac:cd:1b:21:9e:0c:31:e3:f3:9b:a4:
         92:6f:31:2a:3a:26:6a:c2:47:2d:88:e3:da:eb:a1:96:f3:f2:
         f9:dc:c6:78:cd:ea:72:24:42:60:d2:ac:a3:f7:ee:42:86:12:
         8a:59:f7:b3:ff:27:72:77:9c:e8:24:8a:ab:13:7a:ff:d7:be:
         bd:a4:81:48:f9:8e:8f:6a:9a:16:ae:d4:a2:6d:02:75:a1:de:
         05:92:93:f5:94:11:df:24:8d:52:1a:20:3d:bf:57:21:50:b5:
         e6:7c:c3:70:e2:92:c8:30:08:b9:b6:3b:00:dd:29:e9:99:c6:
         a6:6d:30:bf:a0:31:32:59:4b:11:7f:ff:0a:e0:62:79:20:81:
         f4:dd:d0:ee:71:0b:97:70:66:8b:43:3e:51:e8:38:01:89:3c:
         2c:b7:f0:1c:96:8b:02:3e:c4:af:9d:6a:ac:43:f6:61:0f:b2:
         6d:70:54:40:bb:01:49:52:ec:39:1d:e7:bb:cd:22:93:cc:f0:
         9c:4e:bc:55:56:21:4b:7f:ff:6d:18:4b:ba:9f:04:94:e5:bc:
         2f:20:d9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:54 2024 by rpki-client on console-fra.rpki-client.org