Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3134332e3235352e39382e302f32342d3234203d3e203532393737.roa
File:                     3134332e3235352e39382e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          lKbsJ40GNjMsgdGc0GL/qbyamf8T9JwgkN/GTUZkwXQ=
Subject key identifier:   8A:20:72:46:BC:93:9F:9B:AB:C0:03:F9:93:5F:F3:2B:4E:51:22:70
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       2C86C6CA2E2A9CC705B0E25220EF86DB74933226
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3134332e3235352e39382e302f32342d3234203d3e203532393737.roa
Signing time:             Tue 21 Nov 2023 06:00:05 +0000
ROA not before:           Tue 21 Nov 2023 05:55:05 +0000
ROA not after:            Tue 19 Nov 2024 06:00:05 +0000
asID:                     52977
IP address blocks:        143.255.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:86:c6:ca:2e:2a:9c:c7:05:b0:e2:52:20:ef:86:db:74:93:32:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Nov 21 05:55:05 2023 GMT
            Not After : Nov 19 06:00:05 2024 GMT
        Subject: CN=8A207246BC939F9BABC003F9935FF32B4E512270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:72:de:c2:24:66:17:8d:72:ea:a4:28:b8:31:
                    0b:e2:61:14:4c:9f:46:2c:91:e6:b4:eb:90:e3:7c:
                    73:ba:58:82:38:90:a0:3e:76:2a:a8:3d:2c:2c:e0:
                    66:43:ca:a3:b1:18:93:ec:7e:cd:79:57:e8:27:7a:
                    41:73:cf:6b:47:74:98:76:2e:10:2c:59:d1:99:e6:
                    53:88:e6:99:80:ae:4b:83:34:07:19:33:26:d8:b7:
                    b6:ce:11:ac:7e:a2:ea:e8:b1:25:a8:17:44:b2:87:
                    74:e1:44:00:cc:0b:3d:fd:6c:a1:16:9d:43:6b:21:
                    a5:a8:4f:37:0c:13:8b:79:fd:2a:15:eb:ce:df:f3:
                    8d:74:27:d3:a6:af:26:7f:f4:44:72:b2:0c:cd:6e:
                    b6:57:77:0f:18:b4:8c:0c:71:9a:23:8f:9f:5a:c7:
                    2e:7e:81:d8:e4:df:b9:20:f0:ee:0a:61:c0:1c:75:
                    47:cd:90:60:5b:74:a1:3c:3c:b8:a3:7c:9e:b4:b0:
                    0f:72:4e:9b:79:fc:d0:cd:9f:bf:b0:87:18:8f:ef:
                    16:38:04:9b:62:d1:33:ce:02:9c:22:cb:9f:d5:87:
                    ca:ff:24:28:42:67:d8:53:33:a5:d5:65:11:fb:33:
                    6a:af:b0:b7:ff:27:58:8d:46:0e:7f:8e:15:6e:29:
                    a7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:20:72:46:BC:93:9F:9B:AB:C0:03:F9:93:5F:F3:2B:4E:51:22:70
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3134332e3235352e39382e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:ae:ad:7f:e9:e7:86:c3:6c:55:84:5e:24:d0:07:a5:00:a9:
         92:d6:31:a1:f8:9e:53:4a:48:c9:b6:f3:71:93:70:d8:fc:f7:
         56:ee:08:26:ac:42:c9:d6:cf:9e:03:eb:3d:9d:2b:f5:20:70:
         98:20:40:be:f5:4a:e2:d3:41:14:c7:ed:78:ae:29:49:e3:ec:
         3d:0f:e6:0b:26:f4:39:6b:96:41:c5:30:55:c8:b7:0e:cd:ca:
         d4:26:2a:13:bf:ba:15:ba:f9:fa:fc:13:5e:d8:c1:bf:89:90:
         69:30:f3:a1:26:49:4d:46:7d:70:9d:0e:c7:f6:a2:79:da:4f:
         5d:b8:9e:1a:36:3a:ad:81:8a:d7:bf:f8:6e:29:45:d5:de:66:
         02:96:01:8a:f4:70:ef:63:c3:6d:a1:bc:3b:df:7c:fe:59:f9:
         f4:5c:16:9d:fd:41:9e:d9:65:87:3b:bb:fd:64:70:e5:50:d9:
         4f:22:c2:9d:39:46:9f:3d:3d:4e:15:60:bd:f0:1a:5e:78:c1:
         58:0f:e2:22:03:da:45:37:d5:68:ca:3d:d7:da:1d:f2:7b:c7:
         c6:3f:f9:79:1f:1c:e0:f0:b6:8f:49:31:f5:81:b4:e5:dd:ce:
         4d:48:59:c9:96:4a:c0:be:b9:49:ff:67:a6:41:ee:db:54:c8:
         c3:ae:24:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:28 2024 by rpki-client on console-ams.rpki-client.org