Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137302e3233312e342e302f32342d3234203d3e203532393737.roa
File:                     3137302e3233312e342e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          nrV/N+lpeS4H55d7/PPGiZQmlUVeIIMPuDxoww2drDI=
Subject key identifier:   FA:6E:8F:D1:B3:F0:CF:03:75:4E:DF:BD:A9:07:68:9D:4A:81:7E:CF
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       2970260422F0DA4B5E38E80E42C85E18C997F90C
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137302e3233312e342e302f32342d3234203d3e203532393737.roa
Signing time:             Mon 15 Jan 2024 06:39:58 +0000
ROA not before:           Mon 15 Jan 2024 06:34:58 +0000
ROA not after:            Mon 13 Jan 2025 06:39:58 +0000
asID:                     52977
IP address blocks:        170.231.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:70:26:04:22:f0:da:4b:5e:38:e8:0e:42:c8:5e:18:c9:97:f9:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Jan 15 06:34:58 2024 GMT
            Not After : Jan 13 06:39:58 2025 GMT
        Subject: CN=FA6E8FD1B3F0CF03754EDFBDA907689D4A817ECF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a7:3a:6a:a2:37:aa:a7:a2:3f:ca:7a:d4:33:
                    9b:24:04:99:0e:31:e2:6c:57:24:c6:a3:b5:17:a5:
                    7d:3c:2f:38:40:63:6f:3b:52:86:d1:61:20:f2:84:
                    63:ba:0e:b9:7c:66:27:31:ff:39:f1:32:d6:d4:bf:
                    e2:6b:c7:6b:d0:95:b7:c2:65:4d:95:2d:dd:6a:c2:
                    5e:b5:69:ed:b2:e3:93:39:66:de:b6:f0:16:67:c3:
                    c6:5f:21:ba:5d:a7:7a:e7:19:a3:19:29:c1:1a:a6:
                    df:8b:06:4e:6a:49:6f:8c:ba:62:23:a4:12:aa:0f:
                    27:7f:5b:4a:4e:a9:5f:f6:72:a5:55:7e:3c:31:df:
                    42:cd:ff:a4:71:a7:0d:da:8b:9f:ca:9d:26:53:00:
                    b9:e7:2b:01:10:8b:1f:c0:30:77:2e:c0:d2:22:70:
                    ba:1c:cd:36:1e:98:29:82:2a:d3:7d:22:88:8c:66:
                    02:9e:5d:97:3b:de:30:78:af:cf:1a:ce:80:3f:ce:
                    d3:44:ca:fd:56:f0:d2:b0:5c:42:1c:2b:e1:d2:b9:
                    51:03:6f:b6:21:c6:45:a0:52:e6:df:d3:18:79:13:
                    af:b0:3b:a0:02:da:0f:1c:63:d7:b1:27:85:14:4b:
                    ad:1f:a1:3a:24:85:de:48:00:7a:0e:1c:41:92:e5:
                    7b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6E:8F:D1:B3:F0:CF:03:75:4E:DF:BD:A9:07:68:9D:4A:81:7E:CF
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137302e3233312e342e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:df:9a:6a:fe:83:68:e4:cd:6e:e6:78:d9:a4:7a:ce:ac:ef:
         49:4b:3f:a9:9b:26:9a:44:6b:c8:4a:c7:fe:5a:00:26:4a:3b:
         64:dd:40:83:16:0e:ed:82:97:62:f2:d8:14:06:9d:f9:c3:d0:
         e8:f3:4c:53:fd:e5:71:b6:8c:b7:11:38:a1:c1:48:02:40:08:
         81:8e:95:db:e6:3e:a3:f8:34:8e:5f:49:84:f9:14:d1:92:4d:
         42:d0:7e:25:fd:cf:4b:2c:5e:2c:cc:32:4b:be:54:52:59:f9:
         90:0f:a8:e5:97:7d:5f:15:2a:a5:ad:93:c2:31:26:2f:79:7b:
         ad:6a:3d:39:7c:36:45:90:00:ce:0f:64:e4:ce:69:67:9d:17:
         76:61:02:d4:77:a4:20:f3:62:5e:8a:b7:af:ca:fe:b3:2f:7b:
         68:d4:3e:24:35:d4:65:80:2b:ac:b0:2c:48:f9:3a:05:cc:44:
         f6:9e:4f:d9:eb:14:ed:ce:7e:ce:b3:a6:ec:bb:db:32:b9:c1:
         88:59:5d:34:df:e7:ae:33:72:c9:66:2f:a5:32:9a:62:32:7a:
         e8:79:1f:6c:58:f2:58:6a:f1:04:72:b4:5d:05:32:0f:79:0f:
         c8:d1:0d:4f:8a:7f:c2:35:06:45:bc:05:72:db:2e:29:b0:e8:
         90:f5:b5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:28 2024 by rpki-client on console-ams.rpki-client.org