Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137302e3233312e372e302f32342d3234203d3e203532393737.roa
File:                     3137302e3233312e372e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          8EXAlK9dxSaQZvwHQa6cOvVofATxT+b7AYoANf1I5sM=
Subject key identifier:   A4:7F:09:00:0F:E0:92:DF:93:29:10:AB:EA:BC:43:E1:F5:5D:9C:B5
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       272CB03EDC79AA108C5C2A94517882C77E0A566C
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137302e3233312e372e302f32342d3234203d3e203532393737.roa
Signing time:             Mon 15 Jan 2024 06:39:58 +0000
ROA not before:           Mon 15 Jan 2024 06:34:58 +0000
ROA not after:            Mon 13 Jan 2025 06:39:58 +0000
asID:                     52977
IP address blocks:        170.231.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:2c:b0:3e:dc:79:aa:10:8c:5c:2a:94:51:78:82:c7:7e:0a:56:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Jan 15 06:34:58 2024 GMT
            Not After : Jan 13 06:39:58 2025 GMT
        Subject: CN=A47F09000FE092DF932910ABEABC43E1F55D9CB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1c:36:75:7a:17:e8:71:ce:80:40:fc:8f:d0:
                    c1:da:e7:0b:95:8c:d1:b2:6c:bc:ed:82:df:0e:57:
                    90:1d:ce:0b:45:46:87:99:73:2d:1c:f0:b2:7b:78:
                    7e:6d:26:15:39:e3:4a:75:98:b4:bd:3e:e3:f8:16:
                    0e:1f:e9:cd:a1:71:b3:39:87:78:ba:10:b4:25:d0:
                    bb:87:af:b7:e0:84:b9:fc:dc:ee:95:86:06:a3:1d:
                    ae:82:f6:05:72:ed:4d:56:56:18:15:bf:c7:07:1f:
                    5e:7b:53:22:09:3f:a8:68:cf:62:a9:07:79:47:01:
                    9f:9b:fa:1d:81:88:4c:27:04:12:4f:10:19:f1:5e:
                    48:3c:69:ec:d3:e0:a8:bb:1f:b0:47:6b:39:db:40:
                    7d:6f:2f:78:25:9b:bb:ff:17:14:21:79:6c:91:ea:
                    54:e5:32:77:b9:95:41:07:1e:1e:0d:e3:bd:78:df:
                    02:f4:d0:30:00:75:4c:95:ea:a3:0c:dd:f3:30:7d:
                    ea:10:32:3f:91:0c:6d:32:6a:10:d0:72:df:78:cb:
                    39:d9:f3:d0:4c:3d:ef:61:6d:44:f0:32:8c:df:3c:
                    5a:61:55:4c:0d:ff:11:64:67:67:4d:8d:b5:e8:43:
                    53:1e:52:7c:ef:52:f5:ac:a6:e5:17:5e:ea:f3:44:
                    9b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7F:09:00:0F:E0:92:DF:93:29:10:AB:EA:BC:43:E1:F5:5D:9C:B5
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137302e3233312e372e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:71:a7:a8:7a:62:e8:71:c7:30:bc:f1:52:b2:31:f5:2e:f1:
         63:37:19:1c:91:3b:50:46:08:60:86:68:0b:2d:b0:d9:cb:15:
         45:11:41:a1:60:24:e6:55:45:76:e3:df:3f:0f:7b:71:31:c4:
         b3:3a:dc:08:16:7b:f7:29:9e:8e:7a:f8:55:76:cc:65:48:5a:
         5b:4c:68:88:ff:53:07:b3:c9:91:90:ba:d9:7e:5a:68:cb:6d:
         4e:7f:4c:c7:47:5d:f9:60:cc:3c:f6:c4:b5:58:45:04:66:d7:
         99:f6:47:45:81:f3:03:19:6f:39:fe:79:e2:c7:ed:37:50:38:
         42:b7:52:7b:27:1f:8e:90:db:1b:80:8f:f0:ab:12:23:cc:cb:
         d4:25:f6:38:76:64:25:8a:0d:ff:97:5b:8a:3e:e2:0c:40:d4:
         a0:3e:ea:c5:1b:dc:b8:64:dd:59:6e:3b:69:df:59:0e:fc:50:
         5e:31:52:0f:de:42:a9:bf:f6:b7:71:13:00:43:a7:67:73:31:
         88:24:5e:15:9c:98:5b:b1:0e:e1:1f:b9:b0:57:01:4e:65:29:
         8b:bb:3e:28:fe:71:d7:64:c0:f4:4f:47:af:e2:63:ff:89:4d:
         98:03:fc:a1:89:c4:b0:f1:e2:79:ee:ad:aa:6f:f3:3d:93:d2:
         4f:56:48:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:28 2024 by rpki-client on console-ams.rpki-client.org