Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e31352e302f32342d3234203d3e203532393737.roa
File:                     3230302e35332e31352e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          5v3AQJXislryV3N0HZ+IwBKoyhdiPsu1gwUyCJAQLFo=
Subject key identifier:   94:6B:94:A9:8B:76:59:AA:AE:F8:A5:A2:BE:9D:BA:FE:F3:E9:E8:81
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       10754B0EEA8DEBA379B106E862CF3E2EA77C2FFC
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e31352e302f32342d3234203d3e203532393737.roa
Signing time:             Tue 21 Nov 2023 06:00:05 +0000
ROA not before:           Tue 21 Nov 2023 05:55:05 +0000
ROA not after:            Tue 19 Nov 2024 06:00:05 +0000
asID:                     52977
IP address blocks:        200.53.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:75:4b:0e:ea:8d:eb:a3:79:b1:06:e8:62:cf:3e:2e:a7:7c:2f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Nov 21 05:55:05 2023 GMT
            Not After : Nov 19 06:00:05 2024 GMT
        Subject: CN=946B94A98B7659AAAEF8A5A2BE9DBAFEF3E9E881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f0:53:5a:94:36:d6:2b:bb:b5:c4:bc:c8:d6:
                    e1:bd:dd:3f:ec:d5:e4:68:6b:db:31:da:c9:5f:a4:
                    0a:df:94:15:b6:01:eb:a0:00:54:95:3b:d6:3f:56:
                    08:bf:4e:ff:ba:a9:8b:2c:fe:b8:c5:a3:d2:d6:ef:
                    56:f3:2f:9e:06:25:8e:43:24:34:84:04:f2:42:31:
                    0a:3e:a6:df:f5:f0:f3:ba:2e:eb:57:8d:51:6a:a9:
                    9d:1f:0f:6f:a2:2d:11:4b:a8:e8:5b:40:2d:b5:26:
                    d7:a6:20:7c:03:5a:87:79:62:29:a1:47:b1:02:3b:
                    34:50:56:9f:f5:45:56:66:0f:01:01:42:2a:f5:38:
                    3d:1d:11:fd:1e:19:b2:70:f5:0c:4b:c7:a0:de:c0:
                    30:46:21:f8:84:2b:61:14:6d:1c:bc:75:65:08:e0:
                    66:5d:bb:59:35:72:b4:35:8e:4d:f0:ae:6e:47:8c:
                    70:28:bf:5a:a6:d9:9a:ef:39:b4:a3:e5:07:71:f6:
                    fc:5a:37:2a:35:b6:8b:bc:db:15:de:11:7c:6e:6d:
                    9d:c0:8e:ac:e3:9e:c1:07:81:c0:2f:e5:95:1b:73:
                    ec:01:de:a5:5c:c9:19:c4:53:a4:c0:46:87:42:0a:
                    9b:9b:51:00:42:ed:9c:2d:cf:8a:ce:cb:58:18:be:
                    de:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6B:94:A9:8B:76:59:AA:AE:F8:A5:A2:BE:9D:BA:FE:F3:E9:E8:81
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e31352e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:eb:b8:f4:3d:39:35:eb:b9:e3:e0:15:b7:2e:20:e2:8b:32:
         18:ba:91:fc:03:fa:76:41:07:65:0b:43:a9:83:0f:02:7e:fe:
         c9:9e:20:e5:72:84:fd:5b:80:58:f4:97:d3:f1:fa:52:96:6c:
         b3:d3:92:da:00:98:a3:6a:b1:28:52:21:e0:63:73:45:b7:9c:
         52:66:9e:70:61:2c:5c:cc:37:26:e5:e2:80:2f:de:b3:24:0b:
         99:cb:5d:84:ed:9c:cc:56:bc:92:ad:9a:1c:13:b7:c3:34:c0:
         c2:de:a7:a5:a3:47:90:99:48:1b:6c:b6:f9:c9:65:ec:2b:5c:
         3d:e0:e1:a2:f8:45:a5:a5:99:19:fc:e1:08:eb:4e:bd:1b:8b:
         3a:f8:77:24:ac:f8:03:f1:6a:20:a1:74:8d:81:59:30:d4:cd:
         b1:fa:ff:63:da:6a:05:2e:93:cc:da:75:39:5f:82:3c:8c:1d:
         fe:65:a9:4e:69:91:cc:aa:dc:cb:ac:76:86:7c:4d:74:c7:c7:
         cb:a1:70:75:5b:37:ee:47:4a:bd:b8:ba:71:19:a3:cc:af:62:
         c8:80:cc:7d:e2:64:73:8d:d1:c2:eb:a2:58:06:22:7c:b0:80:
         b1:d1:a4:74:81:e1:f9:32:95:c5:f7:67:6a:8a:8d:38:bb:2f:
         8a:8d:79:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org