Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137302e3233312e352e302f32342d3234203d3e203532393737.roa
File:                     3137302e3233312e352e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          NuOXXMtA9r433RlzYr7y5XsX4v+0LmV1ymf43ru9osA=
Subject key identifier:   02:64:DB:9E:1F:78:DB:12:F1:2F:40:F7:75:D6:25:51:0F:38:04:87
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       182A8FCC9DCF3BCABA868D3C3EFC319DC3C99737
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137302e3233312e352e302f32342d3234203d3e203532393737.roa
Signing time:             Mon 15 Jan 2024 06:39:58 +0000
ROA not before:           Mon 15 Jan 2024 06:34:58 +0000
ROA not after:            Mon 13 Jan 2025 06:39:58 +0000
asID:                     52977
IP address blocks:        170.231.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:2a:8f:cc:9d:cf:3b:ca:ba:86:8d:3c:3e:fc:31:9d:c3:c9:97:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Jan 15 06:34:58 2024 GMT
            Not After : Jan 13 06:39:58 2025 GMT
        Subject: CN=0264DB9E1F78DB12F12F40F775D625510F380487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:77:f0:8c:f1:14:4a:31:18:78:54:a2:d8:0a:
                    cf:f0:86:85:39:93:5a:f9:2c:4d:38:40:12:6a:8a:
                    3b:f3:56:ec:0b:9c:12:f0:7c:fb:51:fe:6e:9f:e9:
                    3c:41:72:77:25:7d:64:ac:bc:e4:2a:ff:5c:ad:9e:
                    0f:6c:20:a7:9c:41:2f:42:72:82:49:4e:ff:74:55:
                    29:e4:cc:5c:90:c2:06:28:06:88:26:9b:70:84:97:
                    5c:ec:33:5d:47:6d:d1:20:c7:0e:37:c4:dd:0c:89:
                    35:5c:a6:3e:f5:62:fa:7f:15:a3:81:06:af:54:44:
                    dc:38:1e:08:4d:7c:f9:34:98:db:b4:2b:6a:6c:24:
                    31:9a:3d:30:2f:18:28:d4:e8:db:5a:6b:b3:58:d1:
                    4f:5e:7c:d4:c1:23:05:08:fe:5a:45:9c:dd:13:cf:
                    65:c3:8c:06:ac:9f:1f:2f:e3:78:89:28:77:5c:8a:
                    55:ab:62:14:71:12:5a:36:35:df:3b:44:e9:81:1d:
                    f8:a7:f9:be:0c:31:fa:b1:8d:fe:df:66:a3:d1:c2:
                    ce:62:d0:42:c0:f6:14:dd:28:84:45:a6:8a:9c:65:
                    b2:91:a8:cc:5a:1e:07:37:38:f7:41:fe:a3:88:bd:
                    68:fa:c7:fe:94:ad:d6:a5:a4:4e:2b:6a:1a:5b:bb:
                    bc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:64:DB:9E:1F:78:DB:12:F1:2F:40:F7:75:D6:25:51:0F:38:04:87
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137302e3233312e352e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:47:d4:29:c4:3c:66:d5:8e:50:15:88:4d:96:04:3c:37:7f:
         97:cc:0d:a9:10:1b:eb:24:b5:10:9a:8c:6d:48:77:d0:64:d7:
         69:db:93:f5:04:06:b1:de:49:78:86:83:dc:54:61:df:5f:5a:
         56:d3:fb:a0:36:25:d7:ca:95:5e:66:b0:34:8d:12:48:7f:e8:
         5c:94:39:e2:09:6b:0b:1f:2f:73:5c:ef:a6:ad:d2:98:cf:94:
         f6:84:3a:5f:e2:73:75:08:fb:d5:b6:a9:9c:2b:cc:0b:ef:4e:
         dd:58:d4:96:67:94:d2:77:1c:2f:43:63:0e:c2:84:ca:70:cd:
         dd:35:90:7c:cf:23:4f:32:c8:da:3e:e4:82:82:01:5d:2f:77:
         dc:b9:8b:db:1f:02:9a:90:9b:01:bd:06:e1:12:74:e5:2a:0b:
         3f:bd:c5:b4:4a:f2:c6:3d:ab:37:96:20:03:4d:d5:66:97:8a:
         e8:6d:a1:b0:0e:b2:78:83:69:be:d2:87:dd:84:67:18:2d:9e:
         7f:54:81:49:ef:a4:e7:69:01:60:5c:44:13:cd:e1:8c:f5:f2:
         4d:40:e5:cf:96:a4:02:8d:b4:f2:77:eb:f2:8d:fd:93:f9:5b:
         ad:55:d8:61:41:f0:93:31:d6:e7:ad:f3:e6:de:b6:99:b7:f7:
         d0:1d:53:6e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUGCqPzJ3PO8q6ho08PvwxncPJlzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNCRTZEQTI3QzU3ODNDQzdBQkI0M0Q2M0UwODcxNTdD
NzIyMEUzNTAeFw0yNDAxMTUwNjM0NThaFw0yNTAxMTMwNjM5NThaMDMxMTAvBgNV
BAMTKDAyNjREQjlFMUY3OERCMTJGMTJGNDBGNzc1RDYyNTUxMEYzODA0ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3d/CM8RRKMRh4VKLYCs/whoU5
k1r5LE04QBJqijvzVuwLnBLwfPtR/m6f6TxBcnclfWSsvOQq/1ytng9sIKecQS9C
coJJTv90VSnkzFyQwgYoBogmm3CEl1zsM11HbdEgxw43xN0MiTVcpj71Yvp/FaOB
Bq9URNw4HghNfPk0mNu0K2psJDGaPTAvGCjU6Ntaa7NY0U9efNTBIwUI/lpFnN0T
z2XDjAasnx8v43iJKHdcilWrYhRxElo2Nd87ROmBHfin+b4MMfqxjf7fZqPRws5i
0ELA9hTdKIRFpoqcZbKRqMxaHgc3OPdB/qOIvWj6x/6UrdalpE4rahpbu7zfAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUAmTbnh942xLxL0D3ddYlUQ84BIcwHwYDVR0j
BBgwFoAUQ75tonxXg8x6u0PWPghxV8ciDjUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTl6dGV3SmRGQjJ1WkNIWWlwZ244Ylp0RjZFN2NDWjhEdTFzeEN0aEYy
cHAvMC80M0JFNkRBMjdDNTc4M0NDN0FCQjQzRDYzRTA4NzE1N0M3MjIwRTM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQzQkU2REEyN0M1NzgzQ0M3
QUJCNDNENjNFMDg3MTU3QzcyMjBFMzUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5enRld0pkRkIydVpDSFlpcGduOGJadEY2RTdjQ1o4RHUxc3hDdGhGMnBwLzAv
MzEzNzMwMmUzMjMzMzEyZTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM5
MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAKrnBTANBgkqhkiG9w0BAQsFAAOCAQEArUfUKcQ8ZtWO
UBWITZYEPDd/l8wNqRAb6yS1EJqMbUh30GTXaduT9QQGsd5JeIaD3FRh319aVtP7
oDYl18qVXmawNI0SSH/oXJQ54glrCx8vc1zvpq3SmM+U9oQ6X+JzdQj71bapnCvM
C+9O3VjUlmeU0nccL0NjDsKEynDN3TWQfM8jTzLI2j7kgoIBXS933LmL2x8CmpCb
Ab0G4RJ05SoLP73FtEryxj2rN5YgA03VZpeK6G2hsA6yeINpvtKH3YRnGC2ef1SB
Se+k52kBYFxEE83hjPXyTUDlz5akAo208nfr8o39k/lbrVXYYUHwkzHW563z5t62
mbf30B1Tbg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org