Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e382e302f32332d3233203d3e203532393737.roa
File:                     3230302e35332e382e302f32332d3233203d3e203532393737.roa (raw, json)
Hash identifier:          5I7uFzgMemqr4g3t2qrtiodqtbh6UQDwgCu2rSGDcKw=
Subject key identifier:   49:61:60:10:2B:67:5A:D3:36:35:2B:81:D8:3D:6B:A1:23:60:79:62
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       0F6D37603D0F4600E490E22764CAAE345BD92257
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e382e302f32332d3233203d3e203532393737.roa
Signing time:             Tue 21 Nov 2023 06:00:03 +0000
ROA not before:           Tue 21 Nov 2023 05:55:03 +0000
ROA not after:            Tue 19 Nov 2024 06:00:03 +0000
asID:                     52977
IP address blocks:        200.53.8.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:6d:37:60:3d:0f:46:00:e4:90:e2:27:64:ca:ae:34:5b:d9:22:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Nov 21 05:55:03 2023 GMT
            Not After : Nov 19 06:00:03 2024 GMT
        Subject: CN=496160102B675AD336352B81D83D6BA123607962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:90:e3:16:17:60:7a:6c:0e:cd:f3:cc:e9:2b:
                    44:00:a0:38:20:cc:4e:f0:cc:ce:15:33:89:41:07:
                    f4:b1:38:84:c0:ef:d1:44:e4:0b:54:bd:55:f3:75:
                    42:30:e4:01:96:dc:6a:23:27:ae:d7:03:e9:dd:d8:
                    6c:ca:1b:6c:da:14:f4:c4:e8:4f:fb:90:a5:54:fc:
                    59:20:9a:94:38:d6:67:a5:ae:a0:2d:cc:e5:d7:c2:
                    4f:cc:0f:1e:cd:8b:f1:bf:cc:33:a0:b5:34:d1:70:
                    96:48:5a:c1:09:43:b5:49:bf:7d:f4:be:81:ce:36:
                    c2:ac:a4:e8:b4:6b:b1:c1:cc:d1:82:28:b8:8e:31:
                    75:30:6f:59:7c:9f:fc:6e:ba:d5:9e:55:70:a9:f2:
                    e8:2b:a4:87:de:de:11:4d:34:c5:d5:67:f4:1b:ff:
                    3f:2a:ac:27:cf:05:6d:91:bb:57:9c:89:b8:ca:f2:
                    a3:d5:a2:dd:1c:f3:78:97:96:05:e8:5a:b5:c0:e5:
                    93:eb:53:14:4f:33:cf:7f:f2:11:37:b5:02:65:b1:
                    51:d8:de:d3:fb:d6:fd:09:91:ae:d7:10:21:f2:3a:
                    d6:67:db:9b:e3:11:1b:fa:85:0a:2f:36:9d:ed:67:
                    29:5a:f4:6d:b1:98:36:39:70:dd:12:42:a7:f0:b7:
                    0e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:61:60:10:2B:67:5A:D3:36:35:2B:81:D8:3D:6B:A1:23:60:79:62
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e382e302f32332d3233203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:0d:a6:a9:26:5e:9c:77:6f:40:f2:65:ac:ba:53:36:72:5b:
         d3:a2:95:44:d9:91:56:7d:cc:5d:e5:b3:a8:ba:89:0f:9d:db:
         8f:63:d8:d0:c5:41:4f:3a:90:8e:7e:ae:8a:2b:5d:6b:f1:32:
         80:01:f4:45:22:85:1b:58:6e:0a:5e:48:55:5c:bc:96:4b:45:
         39:21:ea:f5:25:11:99:c7:ba:4c:7a:d3:64:e0:78:ca:f1:4f:
         8c:d2:d5:ef:6e:8e:ce:11:91:f9:96:df:05:59:20:b1:9a:52:
         07:59:12:78:4c:b2:ef:c7:f1:a2:f2:0a:19:80:1a:80:c0:ad:
         bf:61:08:af:2f:a4:cd:9f:12:59:f5:11:d3:1e:5d:7c:35:05:
         05:d5:25:41:ea:05:5d:52:52:66:ed:b3:81:e1:a9:55:9f:ab:
         a8:bd:12:43:02:5f:ce:3b:84:31:48:3e:e3:c4:c8:5f:e0:13:
         67:29:14:ff:78:8c:9e:b3:9d:4c:b2:0e:dc:66:61:46:b6:8a:
         fe:e1:21:ab:d2:ec:8e:90:88:eb:09:2c:88:57:f8:3b:37:0f:
         b2:87:c6:61:fc:9e:3c:e5:6e:2e:c9:ed:a2:f2:02:84:5d:d9:
         fc:89:17:2e:84:44:8a:12:b1:22:aa:2d:0e:b9:03:86:da:0e:
         ac:17:b5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org