Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37322e302f32322d3232203d3e203532393737.roa
File:                     3137372e33392e37322e302f32322d3232203d3e203532393737.roa (raw, json)
Hash identifier:          xNmGrQYbpFMOsUa7/fC0B/aEnKGHjmH2ZxAAteeYiXY=
Subject key identifier:   F1:51:B0:82:DE:93:61:EE:42:C1:14:95:F8:C5:13:B5:D3:E9:36:55
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       2C066522EB21A1C51472D54AB5F327441AA3DA4F
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37322e302f32322d3232203d3e203532393737.roa
Signing time:             Tue 21 Nov 2023 06:00:02 +0000
ROA not before:           Tue 21 Nov 2023 05:55:02 +0000
ROA not after:            Tue 19 Nov 2024 06:00:02 +0000
asID:                     52977
IP address blocks:        177.39.72.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:06:65:22:eb:21:a1:c5:14:72:d5:4a:b5:f3:27:44:1a:a3:da:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Nov 21 05:55:02 2023 GMT
            Not After : Nov 19 06:00:02 2024 GMT
        Subject: CN=F151B082DE9361EE42C11495F8C513B5D3E93655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3e:1c:8d:cf:41:31:c4:d0:82:6d:cd:bc:10:
                    11:cd:56:3d:19:06:9c:5e:8a:2f:45:a7:4e:94:fc:
                    b5:f8:c6:9f:06:f7:d1:e0:a6:f8:20:5e:96:72:00:
                    ae:5e:fe:60:6f:f1:f0:b8:58:cd:99:04:92:b5:63:
                    74:40:89:8d:a0:6a:14:bf:58:31:9a:ba:d9:45:49:
                    a4:d0:e9:b5:f8:ab:0f:ef:9d:48:aa:dd:9f:8a:94:
                    32:75:4f:58:04:97:ae:8f:17:60:be:aa:e6:2b:4d:
                    e2:60:14:51:b7:d1:92:b4:35:d2:35:0d:61:15:08:
                    f7:2b:e2:ea:b1:b9:55:e2:66:9b:9a:22:6b:42:17:
                    74:e2:dd:3c:d8:45:25:f0:36:69:cc:7a:1c:66:80:
                    24:b6:1f:c2:38:ad:ec:26:81:58:0b:8f:c5:1d:c1:
                    6d:48:c3:4b:ca:29:dd:2e:aa:26:03:67:65:e5:fc:
                    43:f0:ea:7a:23:93:90:fb:29:a1:2f:bb:b0:0f:fb:
                    91:ed:78:e2:0c:0e:7a:48:19:68:97:5e:fd:02:46:
                    99:44:a3:b7:7c:66:d4:2d:31:23:cd:3f:a3:22:6b:
                    bc:5d:ba:fd:2f:5f:0e:c0:5a:38:85:a1:24:f8:7c:
                    5d:00:c2:7e:f9:78:5c:d5:74:d5:0f:99:fc:25:28:
                    a2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:51:B0:82:DE:93:61:EE:42:C1:14:95:F8:C5:13:B5:D3:E9:36:55
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37322e302f32322d3232203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:44:f3:0d:fc:a8:67:b7:1e:2e:29:f5:3d:13:cd:57:4d:da:
         f4:ba:59:1a:30:47:a2:5e:99:80:c4:ab:60:e8:91:b7:d7:b7:
         88:2f:11:52:3e:0b:47:d1:d7:e9:7f:ce:1d:22:95:dd:96:7e:
         f6:34:bb:fa:40:be:bc:76:24:ad:9e:db:68:67:0b:1d:c4:b4:
         3a:1e:4a:99:df:0a:22:fc:bb:0d:17:f4:af:8c:53:f9:4f:a2:
         e5:aa:a9:73:b0:c3:a4:70:72:ad:1e:f8:77:4a:2c:ab:bf:e0:
         ec:5f:20:27:99:c2:8b:01:71:a7:71:d2:45:27:5d:12:c7:28:
         a9:74:02:72:99:35:60:a9:9e:a4:51:a7:38:47:a3:a4:15:68:
         f0:b5:f1:51:e0:45:4f:8e:24:37:49:ae:a5:8e:5f:b6:a0:6d:
         99:d5:3f:50:f8:0a:3b:5a:2b:72:fc:47:9b:d7:bb:fc:90:cc:
         b6:6f:dd:ea:b5:07:10:0f:62:d5:7a:b1:97:6f:9c:a0:00:e0:
         fa:d3:91:c3:fe:af:fd:09:c4:1e:1a:bf:08:45:78:73:16:f1:
         4c:2f:e9:77:f6:99:79:84:40:e5:50:d5:05:f1:6a:cb:5b:30:
         29:1a:f4:c5:81:5c:3c:02:b3:69:0c:3d:97:bf:d4:40:2c:c8:
         a2:f7:3d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:54 2024 by rpki-client on console-fra.rpki-client.org