Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3136312e33382e34302e302f32332d3234203d3e203137323232.roa
File:                     3136312e33382e34302e302f32332d3234203d3e203137323232.roa (raw, json)
Hash identifier:          xFr6o0KnNGLLxskHSQNROyVmfuYSLR9ldrB0MZbOXNE=
Subject key identifier:   43:DB:4F:B3:62:7B:2C:FF:E1:26:83:15:21:B6:53:82:C4:8A:B3:1E
Certificate issuer:       /CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
Certificate serial:       79DC8770212F09E532FA1C44340DD3AE981F2196
Authority key identifier: 43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3136312e33382e34302e302f32332d3234203d3e203137323232.roa
Signing time:             Mon 25 Mar 2024 22:55:40 +0000
ROA not before:           Mon 25 Mar 2024 22:50:40 +0000
ROA not after:            Mon 24 Mar 2025 22:55:40 +0000
asID:                     17222
IP address blocks:        161.38.40.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:dc:87:70:21:2f:09:e5:32:fa:1c:44:34:0d:d3:ae:98:1f:21:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
        Validity
            Not Before: Mar 25 22:50:40 2024 GMT
            Not After : Mar 24 22:55:40 2025 GMT
        Subject: CN=43DB4FB3627B2CFFE126831521B65382C48AB31E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0e:ca:45:c2:84:66:db:2b:0d:62:b8:2a:e4:
                    00:da:aa:74:b2:9b:72:6b:4f:ad:71:46:e7:83:11:
                    79:4a:20:5c:05:b2:18:ad:03:78:dd:e5:0c:b8:f9:
                    a7:bc:fd:4e:c1:0d:db:73:ca:e0:04:6e:b2:96:af:
                    12:fa:0b:6b:35:3b:ce:da:96:59:be:a8:a4:91:d8:
                    2b:04:bb:7c:85:e6:eb:42:db:e7:b9:dc:74:9f:cd:
                    42:58:e1:bd:77:2a:8f:f2:75:86:c4:23:f5:46:66:
                    3e:97:1a:80:f8:c2:c6:5e:ca:b4:7a:da:18:41:89:
                    be:09:72:a5:f3:25:85:a3:be:bd:44:75:37:44:b3:
                    05:0c:9a:50:3d:00:38:81:8f:8c:4c:3b:41:44:28:
                    aa:bc:b4:be:1a:91:c3:4d:84:fa:28:95:96:04:70:
                    85:c1:3f:9a:ab:47:33:08:17:c7:9f:df:b2:53:4f:
                    a6:e6:08:64:d5:7d:43:5f:4d:e2:ab:ec:a1:2a:be:
                    c0:e0:cd:a5:b5:78:e9:85:a4:07:5f:75:8e:a1:e1:
                    1e:96:b6:14:85:03:0a:c2:67:16:6c:7d:c6:57:c5:
                    ee:36:63:47:35:fd:fb:91:64:a2:96:76:08:2a:eb:
                    08:a6:b8:24:e7:78:24:03:a3:b9:e9:7a:ba:98:07:
                    f1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DB:4F:B3:62:7B:2C:FF:E1:26:83:15:21:B6:53:82:C4:8A:B3:1E
            X509v3 Authority Key Identifier:
                keyid:43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3136312e33382e34302e302f32332d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:d5:9a:e7:7b:1f:b3:6a:41:14:58:f5:a7:09:a2:20:14:80:
         3e:79:d2:b6:c5:25:16:c1:03:c4:2d:31:cd:aa:e3:18:da:c8:
         2c:f5:09:73:dd:44:4a:44:1f:47:6e:63:cf:84:5c:51:59:39:
         be:49:0a:87:e5:be:a9:11:e8:b9:0f:8f:9f:cb:81:e8:21:d8:
         df:ce:0b:83:a2:57:c7:2a:f6:63:26:33:09:4e:f4:86:8d:67:
         07:22:64:f4:5b:2e:73:3f:5b:14:3b:8a:45:e3:19:01:57:a8:
         cc:20:90:b9:ad:df:9f:44:ee:eb:a5:8f:ea:c6:e5:ca:ae:a2:
         80:66:3e:ef:70:4e:9c:04:53:60:60:97:01:5f:c0:1e:b7:08:
         50:b1:d2:c1:40:15:fd:85:7c:be:1b:a3:39:89:b2:d8:73:74:
         c7:79:6c:f7:31:eb:09:d5:c7:bc:78:c1:88:54:7f:bd:14:34:
         17:d2:13:ad:6f:63:c0:d4:e9:5c:76:d8:3d:88:5c:29:8e:a0:
         58:55:2d:c9:8f:0c:20:70:ea:c2:34:4c:5f:d6:9b:6b:68:b6:
         a7:cf:05:80:00:cb:b1:f5:b9:54:89:21:54:3b:04:27:0e:e1:
         d6:c9:b3:b0:70:3f:91:db:bd:7a:44:a0:88:9c:aa:d6:84:c5:
         35:a3:f3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:44 2024 by rpki-client on console-ams.rpki-client.org