Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e382e302f32342d3234203d3e203532393737.roa
File:                     3230302e35332e382e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          mYkxHLk8BFJ17zhaGOYOSyAJ213I8ouaXWwPMDt12Ek=
Subject key identifier:   4B:AA:D8:8A:C5:5F:A8:0B:0F:68:98:2C:C4:F3:F0:00:80:3D:2D:CB
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       2621E3ADA56A07EEE7343D5EB8B717168BD56C4C
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e382e302f32342d3234203d3e203532393737.roa
Signing time:             Mon 15 Jan 2024 06:41:51 +0000
ROA not before:           Mon 15 Jan 2024 06:36:51 +0000
ROA not after:            Mon 13 Jan 2025 06:41:51 +0000
asID:                     52977
IP address blocks:        200.53.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:21:e3:ad:a5:6a:07:ee:e7:34:3d:5e:b8:b7:17:16:8b:d5:6c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Jan 15 06:36:51 2024 GMT
            Not After : Jan 13 06:41:51 2025 GMT
        Subject: CN=4BAAD88AC55FA80B0F68982CC4F3F000803D2DCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a7:e3:97:4b:d8:d3:b6:16:88:89:f3:96:c2:
                    c4:a0:80:6c:99:cf:2b:4b:8d:72:94:14:6d:79:ce:
                    40:4f:4f:57:9c:b5:2c:12:fe:1c:3a:4d:cb:06:e2:
                    55:6c:9f:ec:38:be:44:46:9c:99:1a:2f:24:b2:c0:
                    39:37:c9:59:b9:07:e0:76:8a:0b:c9:cf:63:78:87:
                    99:e8:77:cc:2b:1b:df:86:6c:66:4c:2e:d0:27:76:
                    9b:63:ab:36:c4:89:52:b5:90:0d:7b:0c:d0:89:d2:
                    9f:2e:eb:0a:49:d2:83:7a:60:cb:48:b5:10:7c:b5:
                    ce:51:84:9a:6a:97:68:c8:43:89:db:b0:8e:1d:90:
                    1d:7f:26:15:75:96:4f:9b:10:d9:c2:59:3d:c6:fe:
                    65:0f:8a:48:4d:c7:ad:d3:ec:8f:96:ce:ad:8a:9f:
                    95:e8:27:91:c3:54:7d:aa:85:2a:45:0f:11:51:bf:
                    b9:0b:ae:62:0e:d8:c0:9e:da:20:7f:cc:c4:85:e5:
                    da:ce:b3:2e:87:f3:b7:6d:40:f2:b1:6f:53:6e:17:
                    3d:bb:ad:c0:e6:29:1d:92:3c:3d:e7:fa:73:f4:15:
                    4b:1e:35:32:cf:57:2e:05:07:73:d3:14:44:3c:83:
                    59:5c:af:4a:e5:f9:76:81:07:49:0c:3c:3f:b8:75:
                    8b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AA:D8:8A:C5:5F:A8:0B:0F:68:98:2C:C4:F3:F0:00:80:3D:2D:CB
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e382e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:94:e2:c7:9a:ba:eb:3d:61:00:87:15:09:c7:d7:2a:d0:8a:
         e9:a1:12:57:29:a7:7e:f1:63:e5:a5:ca:e9:52:e3:39:91:75:
         0b:bb:6d:2d:e6:3f:0a:bc:6c:3b:82:29:a9:f4:68:dc:ff:98:
         b1:1d:bd:a4:b3:be:1a:8b:ba:0f:6a:7a:52:b1:89:2e:4a:ed:
         0e:0c:d4:d1:61:77:3f:6e:0b:7c:00:67:7d:3c:c5:26:19:02:
         58:6a:bd:89:1f:2e:07:96:15:ce:28:c5:f0:db:dd:72:c9:b7:
         0b:c5:19:36:e7:6d:cc:a7:f0:e8:59:f8:6b:6d:80:c6:48:4f:
         07:cf:5f:23:c3:19:b7:b3:5a:8f:bf:48:b4:1e:69:a5:eb:d5:
         1d:cc:f5:30:92:2d:27:9c:fb:14:18:bf:38:b8:45:fa:12:e4:
         9a:32:25:38:38:1e:43:f2:27:17:c0:a7:89:a2:2e:38:26:16:
         44:8c:56:6f:2f:e5:9a:e0:49:2f:47:e8:34:19:8e:78:66:9e:
         06:97:e9:54:4a:53:f7:ac:02:34:b6:85:bb:27:8d:86:c7:ec:
         1c:85:f1:d8:de:7f:4b:10:18:11:47:aa:e8:4f:12:26:cd:92:
         ab:0c:60:6d:6b:96:04:73:f0:e3:92:6c:03:d3:f8:fa:f6:25:
         90:22:b6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org