Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e31342e302f32342d3234203d3e203532393737.roa
File:                     3230302e35332e31342e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          khPmUuAFVro3izHw814xVSiZDhr/qsjmUIWGGkttdrA=
Subject key identifier:   0F:0A:2C:EC:8C:62:DA:D9:AC:48:56:2B:4B:63:E2:99:6C:81:21:E9
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       2111BC04789DC0632308E9E63E52814597FDC4F6
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e31342e302f32342d3234203d3e203532393737.roa
Signing time:             Mon 15 Jan 2024 06:42:21 +0000
ROA not before:           Mon 15 Jan 2024 06:37:21 +0000
ROA not after:            Mon 13 Jan 2025 06:42:21 +0000
asID:                     52977
IP address blocks:        200.53.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:11:bc:04:78:9d:c0:63:23:08:e9:e6:3e:52:81:45:97:fd:c4:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Jan 15 06:37:21 2024 GMT
            Not After : Jan 13 06:42:21 2025 GMT
        Subject: CN=0F0A2CEC8C62DAD9AC48562B4B63E2996C8121E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7b:4a:e8:8c:e1:8a:29:1e:f4:a3:3e:bd:89:
                    c2:fa:0b:d1:16:96:93:81:9e:33:4b:89:cf:5f:50:
                    dc:cf:3b:26:02:c6:0d:25:85:82:0d:2d:2b:95:7e:
                    e6:ee:58:fc:e3:2a:2f:eb:bb:9a:7e:31:80:aa:01:
                    73:89:eb:21:86:b9:39:b4:76:76:9b:2d:8c:23:32:
                    e6:71:0c:da:7e:ac:25:bf:10:c5:23:99:e2:57:86:
                    fd:d9:78:49:9b:22:28:ac:3b:ee:43:7e:14:7b:9d:
                    0e:62:f7:80:3a:08:13:e3:f7:de:72:d7:68:e4:69:
                    96:22:2a:34:8b:b5:0d:1a:9d:67:11:11:e6:28:b8:
                    a0:fe:41:5a:27:e4:a2:bf:02:a8:72:9e:1f:57:cd:
                    df:b7:0b:7a:19:e8:18:d2:67:65:14:82:d1:3d:09:
                    e9:cb:60:79:ae:c1:06:6f:21:c5:b8:fc:cd:3b:92:
                    a2:92:cf:de:f7:0e:ba:0d:8b:98:38:73:41:6b:73:
                    3a:51:c3:35:a2:cd:40:14:34:1e:66:ef:c7:ee:9f:
                    ae:57:c8:13:09:b3:46:e0:e7:01:84:4d:d6:c6:3f:
                    57:21:74:1a:88:0d:d2:09:f5:cd:05:9f:b2:a2:7f:
                    ca:d2:53:05:23:c6:25:71:a9:ed:0c:08:c7:57:e9:
                    a9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0A:2C:EC:8C:62:DA:D9:AC:48:56:2B:4B:63:E2:99:6C:81:21:E9
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e31342e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:3c:c0:04:fc:bb:a4:1d:3e:55:26:d1:70:9a:74:ea:55:23:
         28:83:c5:f1:f3:37:a7:7f:9f:28:7e:ed:d4:51:36:fe:c7:4a:
         75:0b:f5:54:32:a7:87:41:42:24:4c:39:97:09:47:38:46:c6:
         44:57:ed:09:e3:ea:14:4b:cf:35:9e:9f:7e:6a:a4:24:21:86:
         f7:c6:b2:d8:23:4e:44:71:be:b3:be:95:58:90:c0:d2:eb:ca:
         de:24:5d:a8:3e:a5:5b:50:a3:10:bb:59:8d:ba:b1:f5:9b:4a:
         14:87:d1:44:c3:cf:5b:74:34:fa:db:01:e1:19:f1:89:6e:62:
         8b:83:e2:25:38:5a:96:34:36:95:d6:37:a2:8f:fb:c9:5b:6b:
         32:b3:fe:d0:8f:f5:d8:70:9d:60:a9:1f:ae:25:f0:11:75:84:
         eb:4a:4f:98:ff:95:fb:e8:b0:cb:eb:9a:4a:e0:02:91:cd:78:
         6e:ab:c6:fc:cb:cb:6c:97:ff:58:c1:26:02:b1:e3:87:a3:48:
         a3:bc:3b:2b:20:1b:c9:92:82:08:95:77:c1:c2:d9:3b:21:b2:
         41:77:5f:13:ed:76:4f:9b:29:f5:09:66:22:5a:ae:01:4f:e8:
         21:f6:d3:86:06:c0:04:4e:0d:12:bb:9c:b2:b8:8c:63:c4:21:
         a1:83:5d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org