Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e31342e302f32332d3233203d3e203532393737.roa
File:                     3230302e35332e31342e302f32332d3233203d3e203532393737.roa (raw, json)
Hash identifier:          7j+UMLRv6WHtj9bcPMbZdWayib4gDmG+pLbPWBeepxg=
Subject key identifier:   3D:70:B1:37:91:02:AD:B2:72:F1:16:0E:60:17:BE:9B:26:3D:36:8B
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       1F17A7AA4A0ABA14C0A46CE16718CAA9E7737FFC
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e31342e302f32332d3233203d3e203532393737.roa
Signing time:             Tue 21 Nov 2023 06:00:00 +0000
ROA not before:           Tue 21 Nov 2023 05:55:00 +0000
ROA not after:            Tue 19 Nov 2024 06:00:00 +0000
asID:                     52977
IP address blocks:        200.53.14.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:17:a7:aa:4a:0a:ba:14:c0:a4:6c:e1:67:18:ca:a9:e7:73:7f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Nov 21 05:55:00 2023 GMT
            Not After : Nov 19 06:00:00 2024 GMT
        Subject: CN=3D70B1379102ADB272F1160E6017BE9B263D368B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3c:33:65:1f:82:ca:ce:eb:26:2f:33:d9:a5:
                    e8:d4:69:e5:45:4b:3b:54:b7:9b:c4:5e:6d:93:63:
                    d1:5a:1f:6a:40:40:ea:4d:e3:55:26:15:0c:73:4c:
                    ec:a7:68:bc:12:2c:27:cf:9f:69:bf:1a:a6:79:9b:
                    70:f3:90:fc:bd:07:6d:d0:a1:77:04:b4:99:ce:c7:
                    9e:2e:3a:cf:78:c1:3a:7a:cd:ec:eb:ae:22:18:3d:
                    01:29:6c:1e:3c:9c:11:98:64:2d:c1:e6:d4:70:b1:
                    b1:00:44:bb:17:77:31:d6:34:ba:a9:b7:43:98:85:
                    84:6c:f6:aa:cd:16:e2:91:ac:2d:72:1d:4c:54:8e:
                    de:31:e7:a6:6f:1f:e7:b2:c4:8b:f3:c1:42:d2:38:
                    c8:f8:39:0c:38:75:fb:8d:6d:13:75:d2:49:45:f9:
                    01:44:ac:aa:e0:e3:f9:3f:85:57:0c:d2:90:e1:d9:
                    49:45:71:eb:97:aa:ba:8a:75:08:3d:a4:73:e5:dd:
                    77:c7:41:26:7e:ea:4b:e2:18:eb:28:bb:22:43:4f:
                    3a:48:20:93:36:1c:66:3f:2b:08:f4:12:4f:d4:ec:
                    d1:ed:0e:a4:74:ab:8a:e0:fc:ee:3f:89:f4:05:06:
                    79:23:95:c1:9f:6d:b6:8c:1d:65:ed:b4:45:03:24:
                    c4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:70:B1:37:91:02:AD:B2:72:F1:16:0E:60:17:BE:9B:26:3D:36:8B
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e31342e302f32332d3233203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:20:b6:5c:a4:7c:38:3e:11:66:ad:61:92:4e:d8:f0:40:f9:
         d4:1c:0e:6f:8a:c1:a7:7c:65:e3:7e:f2:e9:b9:a9:4d:84:3d:
         5d:88:41:6f:ee:17:cd:57:5d:69:4b:20:1f:f1:35:7b:3c:65:
         33:66:ea:9e:f3:46:d4:9c:39:0b:5d:43:72:c9:b7:3d:36:c4:
         19:7e:61:63:b7:f3:c1:bb:19:45:7f:4e:8c:80:5f:3d:77:3b:
         b2:c1:04:37:d4:7f:a1:42:e6:ae:4e:b6:6a:b5:6f:20:b1:93:
         22:18:08:a5:78:18:39:c1:16:ce:4d:a9:6a:38:76:02:35:bc:
         52:4a:cf:22:9a:78:09:07:a0:61:7b:be:ac:58:32:b1:36:85:
         38:d8:18:9e:fa:a5:47:74:60:9c:07:40:a8:8b:58:cd:3e:35:
         49:2c:88:cb:64:7b:d4:7d:cc:3c:12:5f:45:51:d9:0a:57:ef:
         99:00:4e:c2:ac:11:82:26:08:63:45:a4:3b:e0:14:26:b6:0d:
         7f:b5:b2:24:2e:cc:b7:5b:b2:f5:c9:43:cc:d0:f0:be:75:84:
         cf:8b:7e:10:e4:5f:2f:da:9f:b8:5e:49:3e:a6:a3:99:b4:da:
         23:2a:18:e1:3d:00:84:cb:eb:d0:9f:d7:09:c0:60:46:38:27:
         3c:b7:6c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org