Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37342e302f32332d3233203d3e203532393737.roa
File:                     3137372e33392e37342e302f32332d3233203d3e203532393737.roa (raw, json)
Hash identifier:          uK/HfzRz17umwk8O299cBeS2H+GMqGLaMGH6txUlDIY=
Subject key identifier:   BC:18:F6:7B:D8:A9:EB:84:33:B3:71:4E:88:12:67:AE:80:97:8F:4F
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       19EA118BA9A2813C095C58BEB7B0E03E9A1DE3D1
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37342e302f32332d3233203d3e203532393737.roa
Signing time:             Tue 21 Nov 2023 06:00:01 +0000
ROA not before:           Tue 21 Nov 2023 05:55:01 +0000
ROA not after:            Tue 19 Nov 2024 06:00:01 +0000
asID:                     52977
IP address blocks:        177.39.74.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ea:11:8b:a9:a2:81:3c:09:5c:58:be:b7:b0:e0:3e:9a:1d:e3:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Nov 21 05:55:01 2023 GMT
            Not After : Nov 19 06:00:01 2024 GMT
        Subject: CN=BC18F67BD8A9EB8433B3714E881267AE80978F4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ae:01:01:28:ec:85:63:c9:67:05:37:03:33:
                    06:31:0c:25:54:09:fc:ca:82:a1:2c:1b:5c:b5:18:
                    f9:06:73:22:f7:b0:42:aa:8a:e4:2c:60:c3:3c:8e:
                    9b:59:b3:79:bc:f1:22:b6:ae:79:44:92:d2:d9:ef:
                    b1:e4:1b:d7:a6:10:c4:c3:93:dc:7e:b7:0b:84:dc:
                    f0:b1:b2:ae:97:b1:3d:29:78:31:71:dc:19:6a:57:
                    c1:f3:cc:cc:36:36:9c:5c:c4:ea:74:86:82:85:a8:
                    ab:cb:18:9c:fa:63:f1:71:c2:87:70:22:41:93:7d:
                    c9:30:1c:60:3b:68:f4:43:17:16:79:de:7d:0a:f2:
                    05:e6:7a:b9:7a:85:d7:d6:68:50:46:c6:ef:09:8c:
                    54:c9:ce:0d:fc:a9:52:5b:47:6c:7d:83:0e:9a:24:
                    bc:4d:0b:55:5f:c6:57:c9:dd:3e:d4:18:f9:d6:13:
                    17:68:0a:6e:59:ea:f4:5a:5c:fc:9f:77:d4:33:85:
                    53:00:24:08:72:99:a7:c0:17:e6:f0:60:a7:ef:15:
                    37:2a:af:17:ad:b7:97:92:1b:79:9c:e3:41:fb:ad:
                    35:29:5f:98:b0:7b:a2:3d:13:d9:8a:a6:75:20:ce:
                    9b:67:d5:53:c0:c0:43:86:9d:a3:2c:eb:62:b8:42:
                    a9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:18:F6:7B:D8:A9:EB:84:33:B3:71:4E:88:12:67:AE:80:97:8F:4F
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37342e302f32332d3233203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:9d:f7:ef:b2:e5:c7:4b:cf:18:e0:f4:bb:d5:00:8a:9a:1e:
         d6:7d:94:c5:e0:70:26:23:89:0d:a5:0f:cc:1b:a2:9e:a0:ee:
         6f:ae:b5:e7:7a:3b:ac:5f:0f:ac:44:a1:cb:01:3b:51:d0:31:
         6e:36:7e:12:e5:7f:2d:ac:40:8b:fe:fa:b8:e8:e3:9b:6a:d2:
         f2:78:0d:9b:5b:08:59:e5:0a:26:cd:76:76:43:08:f1:ce:54:
         1e:69:0d:af:cf:b5:4e:62:72:57:a1:8f:56:34:24:d6:a5:78:
         1d:fa:af:47:7f:d2:23:d2:eb:45:35:5d:cd:9d:76:49:96:ef:
         0e:0c:42:28:cf:dc:0b:a2:00:85:57:d1:08:41:1e:24:14:a0:
         fa:97:e2:e1:48:06:36:fc:5d:af:09:95:9f:ae:cd:d6:1f:58:
         0c:ce:3b:17:5d:07:61:8e:75:5c:5a:0f:23:da:4a:9b:59:c8:
         39:22:93:4d:1b:75:ee:1b:9b:12:42:8e:d9:a6:b3:b9:70:e4:
         ca:4d:5d:cd:83:fe:43:8d:67:80:6e:83:4a:aa:0b:cc:35:01:
         12:b3:b4:a8:bc:89:b0:c0:73:f2:eb:4b:74:51:55:fb:31:ac:
         42:e6:2e:d9:be:ea:7a:d2:8f:cc:03:e7:31:01:4e:7b:88:a2:
         e1:39:31:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:13 2024 by rpki-client on console-ams.rpki-client.org