Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37322e302f32342d3234203d3e203532393737.roa
File:                     3137372e33392e37322e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          33aToCNwAq/bcJyLMgcvAl/OavLfle6jMK1yKJKI3TY=
Subject key identifier:   89:79:82:25:7F:65:DC:F9:54:20:39:CE:A7:CD:DE:0A:CA:53:8B:95
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       58152DE8C2203CE680E38AFF55A2B59F42007CB8
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37322e302f32342d3234203d3e203532393737.roa
Signing time:             Fri 12 Jan 2024 00:14:50 +0000
ROA not before:           Fri 12 Jan 2024 00:09:50 +0000
ROA not after:            Fri 10 Jan 2025 00:14:50 +0000
asID:                     52977
IP address blocks:        177.39.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:15:2d:e8:c2:20:3c:e6:80:e3:8a:ff:55:a2:b5:9f:42:00:7c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Jan 12 00:09:50 2024 GMT
            Not After : Jan 10 00:14:50 2025 GMT
        Subject: CN=897982257F65DCF9542039CEA7CDDE0ACA538B95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a9:62:df:26:03:5b:4d:7e:64:a0:bc:0e:78:
                    b3:60:29:74:14:57:2e:f7:f5:fc:13:a8:b7:2d:8b:
                    3b:8d:70:b2:e5:23:e4:dd:64:f1:e5:1e:11:d3:6a:
                    26:cd:23:99:b5:35:92:83:47:98:9a:7f:1e:d4:ff:
                    0a:63:12:58:d5:d5:3d:1e:52:be:60:8c:fa:db:af:
                    89:87:df:b4:71:ca:76:f2:9a:19:6d:92:5d:5a:34:
                    85:58:69:f4:3d:70:63:ce:af:4d:19:6e:67:2f:99:
                    f9:39:95:c4:3f:47:9a:ea:b5:b7:71:08:55:c6:54:
                    d7:01:57:2f:62:21:45:2c:e6:45:95:dc:42:49:43:
                    a9:72:4e:f5:07:11:d8:d5:26:a9:96:eb:1d:ba:45:
                    41:58:bd:40:87:e4:b0:d8:a0:c5:e6:f9:a7:14:53:
                    bc:6a:14:5b:5e:11:bc:9f:c6:3d:3c:6e:ba:ae:d7:
                    43:53:9d:85:b8:7b:aa:89:4d:2a:ef:62:16:3c:76:
                    84:65:14:9c:3c:31:10:52:b9:cc:70:04:da:22:7f:
                    7b:18:f0:87:1c:63:4e:e4:af:74:04:03:30:1d:4f:
                    df:78:ff:8c:8a:7c:b8:ce:38:ec:93:a5:cb:81:79:
                    b7:d1:3b:c6:a2:bd:86:a6:68:53:ff:a7:1d:47:11:
                    01:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:79:82:25:7F:65:DC:F9:54:20:39:CE:A7:CD:DE:0A:CA:53:8B:95
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37322e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:ff:6d:64:4e:08:31:3e:3b:d8:b9:50:2b:0b:78:95:7d:e0:
         2d:63:9d:e5:91:d2:a6:91:55:c7:53:24:39:eb:bb:65:b4:fa:
         db:82:7f:77:35:91:37:07:e5:07:ca:cd:90:08:c5:ee:62:d6:
         39:f3:15:f8:f9:bc:07:da:eb:b8:fe:a6:62:e0:18:95:b9:42:
         28:45:b5:05:02:2a:e1:38:06:97:97:e1:f1:59:25:10:07:df:
         c5:a8:2f:63:53:3a:41:ca:b9:5d:4d:b9:14:c4:43:19:d0:ec:
         10:53:9e:92:97:cb:08:34:87:0b:2d:59:c3:07:70:6c:50:ff:
         ee:a1:df:07:b2:40:c6:4b:f2:7b:c3:2a:1e:42:50:94:15:a6:
         47:56:a8:a1:d7:c6:d1:b0:71:e2:9b:d4:67:c5:a3:d4:d9:3d:
         58:d9:ad:62:7c:fd:c4:bf:02:10:a7:64:ae:f6:7c:c6:4a:85:
         a7:48:a8:19:56:cb:a2:b9:1f:d3:c5:52:67:e0:4c:d0:39:3f:
         ea:3c:f1:fc:40:f4:ca:a0:71:52:ba:c2:9f:d6:19:be:b1:91:
         10:d2:bf:54:b4:15:97:4b:4a:cc:77:9c:cb:dd:6a:49:d3:65:
         96:6d:36:b9:44:58:89:a8:b3:5e:38:c3:ab:19:69:0a:ff:ad:
         fc:82:2b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org