Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e382e302f32322d3232203d3e203532393737.roa
File:                     3230302e35332e382e302f32322d3232203d3e203532393737.roa (raw, json)
Hash identifier:          sPgfz/el8JUi7M+rzFR1WceK3krq/FEWEpTdtWzBnw4=
Subject key identifier:   9F:EB:6C:D4:04:B7:1D:9D:88:D9:B8:6D:3A:A7:79:B8:2F:05:D2:1C
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       66E013425AF948B8B1B9F2752E99CAD1FE6FC13F
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e382e302f32322d3232203d3e203532393737.roa
Signing time:             Thu 11 Jan 2024 23:59:47 +0000
ROA not before:           Thu 11 Jan 2024 23:54:47 +0000
ROA not after:            Thu 09 Jan 2025 23:59:47 +0000
asID:                     52977
IP address blocks:        200.53.8.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e0:13:42:5a:f9:48:b8:b1:b9:f2:75:2e:99:ca:d1:fe:6f:c1:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Jan 11 23:54:47 2024 GMT
            Not After : Jan  9 23:59:47 2025 GMT
        Subject: CN=9FEB6CD404B71D9D88D9B86D3AA779B82F05D21C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:22:8f:b4:f0:8c:f5:86:9b:a7:a5:f1:69:de:
                    56:79:c1:7d:2b:94:b4:d4:8c:3b:77:9c:2a:dc:e5:
                    1d:1f:3d:60:85:d4:d6:a7:3e:e1:c6:dc:85:7a:e2:
                    16:2a:80:33:d0:15:a3:e6:e5:3b:4a:6d:f7:fb:f7:
                    1a:94:4b:b4:95:31:c8:97:31:f9:7f:3a:f0:de:b6:
                    aa:f5:17:ff:c3:61:f3:23:7e:46:93:d7:04:52:0c:
                    53:51:50:fa:0b:d5:25:ee:ea:c6:25:39:52:d3:cc:
                    5c:eb:04:1e:40:16:34:28:6d:ca:f8:16:14:00:bb:
                    5a:28:73:22:cc:b5:48:39:2f:43:24:ed:54:30:d8:
                    9b:9c:a9:a8:fc:39:2e:89:6e:95:85:96:ba:c2:63:
                    64:68:b5:86:6f:26:4a:fd:51:95:32:bc:43:c4:f4:
                    1b:60:f3:e7:94:5b:ef:ff:d1:c2:51:7b:e3:38:6d:
                    b4:19:fc:f2:a4:82:71:48:0f:48:38:fc:04:d2:42:
                    d6:9d:67:ba:1d:96:3d:d8:4c:42:0e:2f:b8:71:cd:
                    64:fe:e3:ec:36:94:9f:f5:1b:1b:fc:85:fc:07:25:
                    cc:87:2b:25:c3:2a:7d:fb:c3:37:06:8e:37:4f:b4:
                    cb:79:3c:03:2f:4e:e0:71:c7:0b:0a:2d:b4:e1:b5:
                    10:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EB:6C:D4:04:B7:1D:9D:88:D9:B8:6D:3A:A7:79:B8:2F:05:D2:1C
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e382e302f32322d3232203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:81:99:08:04:69:5a:a7:30:44:e6:38:a6:4c:3d:5b:21:1b:
         68:f9:5c:49:99:42:72:ad:7c:76:0f:5b:75:97:cd:09:df:2f:
         39:ad:65:6d:40:f9:0d:47:8a:16:68:d6:39:d4:ea:de:36:cd:
         0d:4d:22:cb:32:51:98:12:92:79:ca:cb:73:66:c0:14:89:46:
         a9:40:82:00:87:d9:01:f5:42:60:5b:ff:b9:44:1a:29:7b:a7:
         4a:56:1b:d0:c7:cb:ba:00:3b:b5:f0:e6:04:65:91:2f:1a:2f:
         49:16:fe:4c:fc:88:19:cb:02:e9:ad:03:bf:6a:56:53:9a:b3:
         b3:99:b5:a3:4c:ba:10:3d:b3:e2:c7:da:e8:0d:af:b3:be:32:
         15:ce:4c:ad:b0:82:69:8f:ae:b5:48:93:a6:f0:fb:04:60:8f:
         64:ef:ac:a8:ca:a5:4c:7f:a5:9c:80:54:f7:6c:a1:6a:2f:65:
         79:ce:43:77:a4:35:01:3b:69:2b:90:2a:b4:7c:c7:98:c1:54:
         7c:cd:96:49:d0:4f:b3:54:b5:30:ad:6e:53:4f:27:10:b9:86:
         6d:14:a0:72:86:c2:52:96:96:6e:99:58:7f:3c:b9:6c:c4:53:
         58:31:d5:98:ff:83:f2:b7:e4:8a:be:b6:41:41:0b:3b:64:21:
         32:0c:d6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org