Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e31322e302f32332d3233203d3e203532393737.roa
File:                     3230302e35332e31322e302f32332d3233203d3e203532393737.roa (raw, json)
Hash identifier:          uFgS3v+Id2pE8pE6CuHp3ERxq09V3hPtDhmmtBMgHNs=
Subject key identifier:   B1:BA:A9:F6:6E:F8:57:72:44:51:1D:2D:E3:07:71:58:D7:C3:E7:56
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       5A413009F0A6D6AB11CD7AA0DF45A0305D59784D
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e31322e302f32332d3233203d3e203532393737.roa
Signing time:             Tue 21 Nov 2023 06:00:03 +0000
ROA not before:           Tue 21 Nov 2023 05:55:03 +0000
ROA not after:            Tue 19 Nov 2024 06:00:03 +0000
asID:                     52977
IP address blocks:        200.53.12.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:41:30:09:f0:a6:d6:ab:11:cd:7a:a0:df:45:a0:30:5d:59:78:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Nov 21 05:55:03 2023 GMT
            Not After : Nov 19 06:00:03 2024 GMT
        Subject: CN=B1BAA9F66EF8577244511D2DE3077158D7C3E756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:25:f5:b8:e6:c7:e3:4f:43:53:c6:36:48:10:
                    07:3f:10:a2:5b:68:ff:ee:5b:ac:5d:34:44:bd:7b:
                    e2:ca:0e:b9:12:82:1d:41:99:27:ee:16:42:ea:d5:
                    ed:b8:0b:71:15:e5:e5:97:5d:50:00:1e:a4:ed:53:
                    ad:a2:b5:64:b8:20:8b:53:e9:41:97:87:c8:16:35:
                    fc:d6:0b:f4:7c:b7:a5:b2:2a:74:3f:ec:56:85:55:
                    f7:a4:f2:87:83:0b:26:dc:71:89:41:eb:54:23:32:
                    ef:19:aa:eb:f3:98:bf:44:d7:0b:81:47:6e:73:57:
                    be:d9:1c:57:4e:5a:67:02:b5:46:e8:f6:8e:73:d5:
                    67:f3:d8:93:96:6f:bd:5a:ef:1f:f3:a6:f3:5f:c7:
                    af:47:37:60:5a:28:42:83:bd:eb:eb:c3:ac:a1:61:
                    17:2a:b5:05:d8:5f:9d:e4:1a:55:92:0e:79:fa:c1:
                    df:b2:d0:c1:3f:63:38:81:b7:a5:83:7c:71:da:4c:
                    23:72:e8:f1:72:fc:7a:5e:e2:cf:87:10:9d:c8:5a:
                    99:9c:5f:41:6c:57:41:47:37:e0:13:17:64:50:f8:
                    a4:71:f0:21:fe:bb:1a:b3:1d:88:27:44:8b:b9:d0:
                    f6:00:f0:8e:9d:41:1b:68:6b:3e:6f:84:99:1f:55:
                    e1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BA:A9:F6:6E:F8:57:72:44:51:1D:2D:E3:07:71:58:D7:C3:E7:56
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e31322e302f32332d3233203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:0f:48:9f:e1:79:2e:25:55:4a:26:67:5b:2c:89:c8:05:5a:
         d0:e1:65:67:93:0b:ba:bb:9d:0f:d7:fb:29:23:9b:e4:6e:e4:
         4e:93:62:22:e8:92:34:6c:2d:ab:8c:57:23:63:41:75:5e:9d:
         92:c0:12:58:ea:9c:14:f9:eb:b8:c8:41:5d:b9:ea:82:69:c0:
         c4:51:92:7a:5c:2a:78:5f:8e:3a:bd:bc:86:b0:f7:cd:7c:3b:
         69:1b:f5:d1:4c:ca:09:51:8c:bd:1c:8c:ec:b5:5f:96:66:3e:
         23:a1:16:38:e9:89:a6:8d:56:d3:cd:33:e6:f9:77:ed:f7:24:
         29:8f:28:a4:60:9a:63:96:29:28:4b:87:aa:c3:e0:78:b1:8a:
         81:63:cc:8e:6f:dc:0d:02:de:b3:e9:bb:12:52:fd:80:25:48:
         cb:4c:3d:62:dc:d8:5d:e0:29:df:9d:5a:c4:41:4f:b0:6f:31:
         a4:97:36:72:69:b8:75:26:99:04:48:18:7a:9e:82:06:3c:0d:
         84:3d:2a:4b:ac:73:ce:28:75:e3:13:cf:ff:8b:c3:7b:7b:b6:
         27:ca:64:b2:73:44:e7:35:f2:39:37:57:32:4d:43:e4:bd:88:
         53:37:4c:fe:75:2d:8e:89:93:26:c4:f0:aa:9a:3d:72:d0:eb:
         06:6f:fa:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:13 2024 by rpki-client on console-ams.rpki-client.org