Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3134332e3235352e39392e302f32342d3234203d3e203532393737.roa
File:                     3134332e3235352e39392e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          sttaSwVG6yOzCp5AaUAOt07NH8E7nx99GHSALXBtPy0=
Subject key identifier:   EE:0B:97:D5:E1:2A:24:2A:C8:32:BF:AA:74:00:9F:D5:3F:1E:DB:C2
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       0A37440AB922E0D5ED9EB457629D50373E8A879A
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3134332e3235352e39392e302f32342d3234203d3e203532393737.roa
Signing time:             Tue 21 Nov 2023 06:00:04 +0000
ROA not before:           Tue 21 Nov 2023 05:55:04 +0000
ROA not after:            Tue 19 Nov 2024 06:00:04 +0000
asID:                     52977
IP address blocks:        143.255.99.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:37:44:0a:b9:22:e0:d5:ed:9e:b4:57:62:9d:50:37:3e:8a:87:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Nov 21 05:55:04 2023 GMT
            Not After : Nov 19 06:00:04 2024 GMT
        Subject: CN=EE0B97D5E12A242AC832BFAA74009FD53F1EDBC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cf:7f:d7:cf:ef:65:94:f7:2b:01:23:1e:bd:
                    cc:de:9a:63:6b:43:45:da:94:c1:b3:9e:30:91:76:
                    42:30:94:2d:64:3b:73:a2:73:33:bb:e5:1c:c0:d7:
                    00:1e:ba:ce:9d:ea:b8:c2:8d:78:81:2f:15:a2:1d:
                    fe:d8:90:3a:cf:82:96:d8:b1:18:7e:38:d4:d6:11:
                    5f:71:40:bd:c9:01:fc:1e:0d:22:29:80:82:fd:d9:
                    06:87:b1:4e:a6:fb:a0:ab:54:60:19:85:20:14:e4:
                    9d:91:0c:23:55:ed:74:df:05:34:0b:66:62:32:62:
                    66:16:87:6e:ba:c7:40:6d:19:6e:06:c2:e7:19:38:
                    81:42:c8:02:aa:eb:ab:2d:2f:46:1e:2d:6b:b4:0c:
                    75:79:f8:73:72:26:42:2d:28:65:68:20:b0:e9:b6:
                    c5:84:8b:85:f3:c9:12:34:22:a0:75:e2:df:15:b2:
                    7e:41:ed:80:3d:0b:c7:27:df:b9:56:28:58:84:cd:
                    50:2b:30:22:15:e8:ab:e7:ea:e4:87:60:c7:a2:a4:
                    3d:3a:02:56:5f:d4:b6:4d:55:41:4b:1b:df:2b:db:
                    62:ab:15:8e:ab:8d:60:01:8d:15:ec:0b:76:66:97:
                    61:f4:e6:82:b0:9b:ed:f2:7f:f4:52:18:50:48:76:
                    fd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0B:97:D5:E1:2A:24:2A:C8:32:BF:AA:74:00:9F:D5:3F:1E:DB:C2
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3134332e3235352e39392e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:b5:a8:c1:40:67:0b:f1:44:dd:50:f4:83:c1:3a:1b:84:2a:
         94:22:8e:7b:f8:91:cd:67:f3:ef:29:ed:98:eb:39:50:ff:9e:
         7b:ce:f8:7d:08:27:07:82:3d:e2:a4:d6:cf:7f:0c:52:b7:13:
         a0:f3:4f:eb:87:14:3d:3a:86:83:28:aa:c0:3a:56:92:ab:17:
         62:7d:e0:00:8b:8e:a9:7c:91:a3:7d:b8:c9:6b:1a:d7:1f:0b:
         32:9c:06:4e:72:36:4c:d0:20:cc:e5:4b:44:7c:2b:59:0c:ad:
         3f:2e:4c:74:80:6f:d2:d9:99:ef:7e:8d:67:ff:b8:73:5c:a6:
         d9:42:2d:00:f2:c6:d3:47:b1:ce:54:a6:68:f5:21:18:1b:7b:
         0e:78:bb:a1:e0:75:1c:52:fc:2e:2f:0c:39:cb:97:11:cb:ae:
         eb:a1:8a:ad:b8:1f:6c:1a:24:e9:ea:d7:af:24:3a:2d:89:f1:
         93:6f:42:0d:14:e4:84:51:a8:f1:1f:ca:86:d4:43:5b:c1:a2:
         a1:c3:54:f2:84:b8:75:74:8b:4a:1f:58:f6:4a:e7:ee:e5:e4:
         fa:85:2a:aa:49:a1:b7:e6:87:94:e6:b8:33:24:59:94:24:1f:
         9b:15:54:0d:66:57:17:ec:56:52:07:2d:e0:b0:d8:84:c1:d5:
         3e:2b:d0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:21 2025 by rpki-client