Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e392e302f32342d3234203d3e203532393737.roa
File:                     3230302e35332e392e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          wdpNDTCu9cQyD/RCCpQJNgfHH+T8YOFsl5+2FsWDOnY=
Subject key identifier:   9E:BC:17:24:B9:46:D4:F6:3E:51:98:E7:CC:05:42:3B:6B:35:86:D1
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       2A9AD5E88796969B9C3E4E6B29493669FFFA9067
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e392e302f32342d3234203d3e203532393737.roa
Signing time:             Tue 21 Nov 2023 05:00:00 +0000
ROA not before:           Tue 21 Nov 2023 04:55:00 +0000
ROA not after:            Tue 19 Nov 2024 05:00:00 +0000
asID:                     52977
IP address blocks:        200.53.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:9a:d5:e8:87:96:96:9b:9c:3e:4e:6b:29:49:36:69:ff:fa:90:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Nov 21 04:55:00 2023 GMT
            Not After : Nov 19 05:00:00 2024 GMT
        Subject: CN=9EBC1724B946D4F63E5198E7CC05423B6B3586D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ef:02:e7:bd:63:81:0a:71:46:42:43:f1:74:
                    9b:65:b8:22:74:1f:1e:3b:8b:df:ea:6e:4c:ae:8b:
                    5e:14:fd:d0:61:6f:e6:34:c8:e7:19:45:99:b6:53:
                    8a:54:77:84:1e:35:db:71:c4:f0:ac:1e:18:60:32:
                    52:34:1a:3a:87:e1:8a:34:4c:db:59:c6:55:5c:6c:
                    a8:9b:29:76:b1:40:03:b7:c2:ee:e1:06:6d:51:b2:
                    88:4e:d7:8b:2b:51:c8:39:47:76:68:10:8f:de:c9:
                    58:ee:66:42:9b:7a:a7:0b:29:be:4c:bc:76:ec:95:
                    04:c8:f1:2b:4e:f0:2f:ec:f2:26:b0:96:51:93:56:
                    8d:e9:b0:b5:64:12:db:bb:a5:36:65:56:28:a5:0b:
                    ea:20:3f:bc:46:54:02:6d:db:6f:8e:91:d0:35:08:
                    13:11:ec:8f:d6:0a:04:8d:36:3b:0c:d3:83:a7:da:
                    ae:69:4f:b0:d1:72:a1:02:8a:8a:e3:17:bb:1a:9d:
                    9b:f6:3f:fb:c5:81:59:54:86:19:0b:f8:8c:8f:3a:
                    15:24:5e:02:b5:9f:60:6d:bb:7e:c6:1f:eb:48:53:
                    84:15:8e:e9:3b:3e:db:fb:d3:55:e5:35:6f:b7:31:
                    3d:cc:c3:a7:3d:4b:12:7c:0f:11:85:03:da:63:07:
                    e7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BC:17:24:B9:46:D4:F6:3E:51:98:E7:CC:05:42:3B:6B:35:86:D1
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3230302e35332e392e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:cc:ac:10:4a:88:4a:ff:45:2e:31:18:40:b3:02:09:cc:97:
         9f:33:57:55:d8:8e:fb:33:6b:5d:c9:3d:4e:54:52:03:96:90:
         81:9f:49:6d:fb:7d:62:71:c1:3a:41:58:80:6a:5d:50:36:1d:
         4c:34:50:58:71:10:1e:5b:2a:c5:f5:8e:ea:7b:5e:3b:a5:54:
         b9:d2:c6:ec:07:b0:af:82:cd:41:92:8a:a1:bc:bc:d1:ad:50:
         2c:24:2a:8f:02:89:e0:de:79:c5:9c:29:6f:79:a7:9e:46:b3:
         db:21:12:eb:93:24:c7:bb:66:63:0a:a9:00:f9:00:45:8e:0d:
         4f:db:45:14:80:5d:68:8d:e9:84:64:b0:66:d6:88:69:af:f1:
         46:7a:a9:87:e3:93:68:67:9e:55:bc:18:08:e9:da:a1:e6:ae:
         51:d7:22:b9:56:7c:c9:7d:67:93:46:ea:0d:3d:f9:53:af:bb:
         c5:48:18:58:fa:78:92:fe:0c:28:0b:3e:e9:d1:31:dc:a5:bd:
         60:07:24:aa:f7:c9:42:3b:c9:c4:90:ec:be:9a:9f:2e:39:f6:
         4d:2d:93:fb:fb:4d:a1:38:5b:66:05:cd:3c:25:a4:4a:65:97:
         7a:1c:69:ab:f5:a9:b0:5d:a2:50:9e:b4:7e:4b:22:e7:ce:22:
         91:35:2b:fd
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUKprV6IeWlpucPk5rKUk2af/6kGcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNCRTZEQTI3QzU3ODNDQzdBQkI0M0Q2M0UwODcxNTdD
NzIyMEUzNTAeFw0yMzExMjEwNDU1MDBaFw0yNDExMTkwNTAwMDBaMDMxMTAvBgNV
BAMTKDlFQkMxNzI0Qjk0NkQ0RjYzRTUxOThFN0NDMDU0MjNCNkIzNTg2RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV7wLnvWOBCnFGQkPxdJtluCJ0
Hx47i9/qbkyui14U/dBhb+Y0yOcZRZm2U4pUd4QeNdtxxPCsHhhgMlI0GjqH4Yo0
TNtZxlVcbKibKXaxQAO3wu7hBm1RsohO14srUcg5R3ZoEI/eyVjuZkKbeqcLKb5M
vHbslQTI8StO8C/s8iawllGTVo3psLVkEtu7pTZlViilC+ogP7xGVAJt22+OkdA1
CBMR7I/WCgSNNjsM04On2q5pT7DRcqECiorjF7sanZv2P/vFgVlUhhkL+IyPOhUk
XgK1n2Btu37GH+tIU4QVjuk7Ptv701XlNW+3MT3Mw6c9SxJ8DxGFA9pjB+dZAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUnrwXJLlG1PY+UZjnzAVCO2s1htEwHwYDVR0j
BBgwFoAUQ75tonxXg8x6u0PWPghxV8ciDjUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTl6dGV3SmRGQjJ1WkNIWWlwZ244Ylp0RjZFN2NDWjhEdTFzeEN0aEYy
cHAvMC80M0JFNkRBMjdDNTc4M0NDN0FCQjQzRDYzRTA4NzE1N0M3MjIwRTM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQzQkU2REEyN0M1NzgzQ0M3
QUJCNDNENjNFMDg3MTU3QzcyMjBFMzUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5enRld0pkRkIydVpDSFlpcGduOGJadEY2RTdjQ1o4RHUxc3hDdGhGMnBwLzAv
MzIzMDMwMmUzNTMzMmUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzIzOTM3
Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADINQkwDQYJKoZIhvcNAQELBQADggEBAFvMrBBKiEr/RS4x
GECzAgnMl58zV1XYjvsza13JPU5UUgOWkIGfSW37fWJxwTpBWIBqXVA2HUw0UFhx
EB5bKsX1jup7XjulVLnSxuwHsK+CzUGSiqG8vNGtUCwkKo8CieDeecWcKW95p55G
s9shEuuTJMe7ZmMKqQD5AEWODU/bRRSAXWiN6YRksGbWiGmv8UZ6qYfjk2hnnlW8
GAjp2qHmrlHXIrlWfMl9Z5NG6g09+VOvu8VIGFj6eJL+DCgLPunRMdylvWAHJKr3
yUI7ycSQ7L6any459k0tk/v7TaE4W2YFzTwlpEpll3ocaav1qbBdolCetH5LIufO
IpE1K/0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org