Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37332e302f32342d3234203d3e203532393737.roa
File:                     3137372e33392e37332e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          5rOER8EBzo1x98xsdW5Dvc6EUI47RuPSdvMfHD+809I=
Subject key identifier:   09:D2:11:C1:45:02:9F:77:F6:47:F5:E7:54:BE:5B:1E:15:D9:8D:9F
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       7A6195CC0A6B2471719C1102BA9CDE28C9BDF81F
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37332e302f32342d3234203d3e203532393737.roa
Signing time:             Mon 15 Jan 2024 06:41:03 +0000
ROA not before:           Mon 15 Jan 2024 06:36:03 +0000
ROA not after:            Mon 13 Jan 2025 06:41:03 +0000
asID:                     52977
IP address blocks:        177.39.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:61:95:cc:0a:6b:24:71:71:9c:11:02:ba:9c:de:28:c9:bd:f8:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Jan 15 06:36:03 2024 GMT
            Not After : Jan 13 06:41:03 2025 GMT
        Subject: CN=09D211C145029F77F647F5E754BE5B1E15D98D9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a1:3c:51:0e:db:d6:71:92:ff:34:b5:4e:65:
                    0f:f9:9d:12:2c:a0:b4:00:6f:ef:ab:31:5f:01:47:
                    90:a6:c8:72:94:98:9c:8c:e2:24:37:a5:c4:af:58:
                    b8:64:48:3f:c9:e9:f2:4e:2e:2b:08:45:86:1a:90:
                    12:9f:40:21:c8:a2:87:73:34:d5:58:e4:15:7e:56:
                    dc:83:6e:9b:05:9b:05:e7:4e:4b:58:6a:96:aa:ef:
                    f2:db:57:26:fb:f6:1c:36:7a:1d:41:7b:d5:3a:8f:
                    8a:08:ef:e1:63:3a:54:7c:31:64:3b:e4:c5:06:07:
                    28:51:92:33:23:f8:d4:45:1f:ce:93:82:3b:d6:cd:
                    cf:cb:81:f8:48:00:ec:c2:61:d5:ae:b7:98:65:48:
                    11:05:2e:12:39:d6:67:8b:a9:0f:b2:52:26:e3:90:
                    22:2d:d5:d8:25:02:e7:27:d9:fa:eb:a2:87:46:33:
                    c3:17:66:d4:c6:2e:9c:18:36:bf:c6:5d:df:a9:d9:
                    0f:f1:08:b2:93:1c:58:dc:6e:4e:77:9f:45:dc:00:
                    7e:63:0d:62:31:06:68:4e:46:bd:d9:15:26:c2:73:
                    0f:1a:84:83:7c:51:a2:98:ea:f1:04:87:fc:18:99:
                    68:61:5c:6c:1a:c1:59:58:ab:1e:ed:ce:cb:d5:2a:
                    01:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D2:11:C1:45:02:9F:77:F6:47:F5:E7:54:BE:5B:1E:15:D9:8D:9F
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37332e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:75:d7:18:56:0a:e8:f0:d2:1c:ea:86:38:94:fb:df:21:21:
         c9:d9:6a:80:0c:42:ef:06:91:ed:c0:8e:5d:29:a0:6f:6a:a4:
         9f:10:cc:74:fd:46:d3:71:b2:24:10:b0:d0:b8:94:7b:ec:42:
         b9:37:55:34:7e:32:6f:4d:f9:b7:56:79:6b:03:89:bd:4d:c2:
         d4:f2:83:f3:6d:6c:55:69:dc:19:6b:16:83:6b:40:ea:0a:70:
         ca:2f:e6:f9:6b:25:16:0b:63:15:e5:c4:9a:85:40:16:bf:f1:
         36:82:b4:3b:ed:40:db:58:f9:b4:f1:0f:d0:57:86:88:7e:cc:
         89:26:f0:26:86:92:b1:9d:d3:57:b1:d2:58:df:4b:cb:88:fb:
         a7:37:b6:07:f7:57:ee:5c:f8:3d:31:cd:de:d1:52:33:b0:4e:
         34:de:96:0c:af:35:a5:cd:26:f4:01:0a:fe:e7:95:53:db:1c:
         bb:7b:a1:c5:b3:e7:03:e9:c8:4c:c0:c5:67:0e:b7:5e:61:e1:
         a1:9d:96:16:49:30:6a:96:4d:24:06:33:db:fe:dc:86:48:29:
         f7:90:f8:73:82:87:d9:f6:4c:87:3e:38:7e:9e:bf:97:0b:68:
         c1:db:50:38:53:7b:1c:bc:08:81:00:7c:1d:85:4c:3d:ce:98:
         90:1d:a7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:28 2024 by rpki-client on console-ams.rpki-client.org