Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37322e302f32332d3233203d3e203532393737.roa
File:                     3137372e33392e37322e302f32332d3233203d3e203532393737.roa (raw, json)
Hash identifier:          dqikxUX+OAHI/exh5P10h6pIDE8hyH8/pxfl+Cif5JQ=
Subject key identifier:   3B:43:7A:97:14:61:BC:5A:91:81:CB:59:E2:9C:B6:A1:FC:DE:E8:37
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       42F7EEB5EA0640C8E8499A22DBA7D80BB6296F2B
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37322e302f32332d3233203d3e203532393737.roa
Signing time:             Tue 21 Nov 2023 06:00:01 +0000
ROA not before:           Tue 21 Nov 2023 05:55:01 +0000
ROA not after:            Tue 19 Nov 2024 06:00:01 +0000
asID:                     52977
IP address blocks:        177.39.72.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f7:ee:b5:ea:06:40:c8:e8:49:9a:22:db:a7:d8:0b:b6:29:6f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Nov 21 05:55:01 2023 GMT
            Not After : Nov 19 06:00:01 2024 GMT
        Subject: CN=3B437A971461BC5A9181CB59E29CB6A1FCDEE837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ad:ac:b1:40:33:91:38:7b:96:99:62:6f:e0:
                    75:78:4a:d1:3d:fb:da:82:a9:38:3f:e9:1f:af:c1:
                    09:41:e0:48:15:05:0e:b3:8c:5a:c0:9b:39:a1:1c:
                    82:a3:3f:09:24:dc:54:3c:00:3e:ac:c6:a1:d0:36:
                    2b:f0:5c:56:d5:97:d3:cf:5a:48:75:e1:20:c8:63:
                    14:66:8d:d3:46:ae:43:d6:8f:94:f8:97:de:f8:29:
                    0d:88:5c:02:eb:ad:dc:83:fa:38:74:69:35:c8:de:
                    62:b4:e6:cf:30:a0:bd:01:fe:2a:d2:c3:3d:e9:06:
                    1a:b9:13:ec:43:38:1f:56:84:8a:a0:63:0e:43:7b:
                    a4:23:7a:4a:d2:82:8b:3c:b8:ad:69:f2:85:5f:7d:
                    f5:e6:f3:f4:b7:d6:11:43:36:55:33:53:6c:ce:2d:
                    8c:dc:c1:ec:03:fa:55:dc:e1:87:2f:ef:04:0f:1e:
                    46:f5:f6:57:3e:9d:9e:1c:ee:d8:26:82:ff:56:0e:
                    f4:4f:b8:2c:7a:1e:cc:4a:04:63:60:c7:9a:41:a2:
                    40:70:06:cd:13:1f:9e:ee:c4:43:ee:07:25:2e:c6:
                    ca:d7:73:16:a2:e0:14:7a:58:4c:6f:85:30:b6:3c:
                    7c:e7:af:4c:c7:a7:d6:d2:10:09:a1:2c:16:e9:c6:
                    15:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:43:7A:97:14:61:BC:5A:91:81:CB:59:E2:9C:B6:A1:FC:DE:E8:37
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37322e302f32332d3233203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:22:1d:31:84:08:3f:5c:bf:c2:fc:88:be:c7:29:5e:d3:64:
         40:0e:90:7c:47:3e:dc:28:e5:bb:8a:73:fd:72:c0:d7:9e:1c:
         db:02:e2:cf:02:aa:db:fe:4a:ce:55:e2:b4:60:bc:b0:e4:6e:
         6b:f7:f7:f9:07:18:ec:36:94:4d:1d:39:9f:0b:0d:06:16:7a:
         14:f8:fd:c5:75:37:09:67:f2:1c:74:d5:e4:cb:4e:e4:0c:1a:
         12:7c:94:8c:72:91:30:0c:2e:9c:ed:d9:96:d1:ff:fc:f1:b4:
         97:0a:80:bd:82:d9:96:5f:03:57:12:83:79:17:6d:92:ad:5e:
         2d:c6:dc:c8:72:86:ba:8e:c2:ae:e5:29:59:50:69:d1:20:3e:
         9e:9e:b2:e9:6e:3d:cf:d4:32:d8:01:a0:a1:40:30:08:aa:6c:
         bf:a9:16:a2:31:c7:5e:c3:f0:a9:f1:89:3d:ec:ba:1e:f1:24:
         a1:ad:31:8f:08:35:1d:5c:cb:4a:76:4f:56:28:40:b6:3c:3c:
         01:b7:4d:44:88:02:02:63:f4:1a:54:6e:88:ce:1b:98:c3:67:
         02:51:e2:fb:94:e6:b9:49:35:68:77:02:8c:73:d4:67:a3:7f:
         a6:33:e9:78:fc:46:a0:19:51:28:68:99:82:3a:55:9d:f5:0b:
         b7:4d:00:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:28 2024 by rpki-client on console-ams.rpki-client.org