Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37342e302f32342d3234203d3e203532393737.roa
File:                     3137372e33392e37342e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          9KS1MVCKhWsHhfn0cWSdFJn35ZuNQPeQyOroMVCI+1k=
Subject key identifier:   3D:7C:44:7F:51:80:5A:BA:A0:EF:81:DE:61:3C:66:8B:8E:70:B2:3F
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       48F827F1DC0D7EE50135E010119CD34FE8C458D2
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37342e302f32342d3234203d3e203532393737.roa
Signing time:             Tue 21 Nov 2023 06:00:02 +0000
ROA not before:           Tue 21 Nov 2023 05:55:02 +0000
ROA not after:            Tue 19 Nov 2024 06:00:02 +0000
asID:                     52977
IP address blocks:        177.39.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f8:27:f1:dc:0d:7e:e5:01:35:e0:10:11:9c:d3:4f:e8:c4:58:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Nov 21 05:55:02 2023 GMT
            Not After : Nov 19 06:00:02 2024 GMT
        Subject: CN=3D7C447F51805ABAA0EF81DE613C668B8E70B23F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a8:ec:59:ee:3b:3f:f7:46:c4:41:95:ff:01:
                    fa:5c:48:c9:de:42:16:89:b1:38:e8:91:50:38:8c:
                    ad:db:e1:a3:df:b4:ac:e8:fe:51:78:df:a2:cf:c4:
                    01:ea:b0:c8:29:29:d0:6e:48:15:15:09:87:04:e5:
                    f8:d1:26:a1:6f:99:ed:a5:bb:67:eb:ca:74:fb:bb:
                    ca:21:ed:b2:e0:a5:08:06:90:8f:06:53:58:1c:c5:
                    2e:4a:49:17:ce:70:c8:39:71:d6:f7:e3:9f:e7:70:
                    7f:cb:02:50:c6:c5:10:47:7d:2f:c1:c1:54:4f:bf:
                    d0:c6:28:63:3c:fb:dd:95:b3:f9:f4:66:f6:6a:bf:
                    86:3b:b5:90:74:59:cb:45:6a:25:4a:a0:5d:ea:a2:
                    24:1f:7c:d5:b3:87:6e:ce:0f:77:68:52:85:30:83:
                    59:ef:0d:39:de:9a:d6:df:8a:4b:68:5e:e7:6c:aa:
                    49:cd:df:03:7f:41:de:3e:7b:95:03:6a:73:1f:0e:
                    c6:74:0f:dc:8c:d3:87:5d:10:0b:f1:26:a5:53:30:
                    a7:ea:f8:1e:b6:d6:7e:fc:82:17:49:01:0d:09:7b:
                    2c:55:ee:8f:67:3c:8f:34:71:ee:c2:9e:88:29:3b:
                    b5:40:08:4c:9c:77:b7:82:fa:7b:03:50:97:e9:73:
                    f2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7C:44:7F:51:80:5A:BA:A0:EF:81:DE:61:3C:66:8B:8E:70:B2:3F
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37342e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:72:6a:5d:0b:0b:78:c5:2c:e9:da:f4:ad:28:fc:e8:9d:8d:
         ed:b2:65:29:29:5a:57:ec:85:d8:ac:92:21:00:73:2c:39:3b:
         1e:d1:c7:28:c8:b6:51:09:58:15:79:aa:0c:63:5e:0e:65:b9:
         a5:4b:20:41:7e:34:98:c7:0f:c8:2c:53:05:15:1c:87:65:ff:
         da:89:7e:85:0d:b5:a1:5c:16:99:e6:8d:9d:08:29:68:ac:f7:
         77:8b:89:a4:50:cd:46:16:2b:37:7b:8c:32:3e:12:b1:d3:2a:
         ca:7a:26:37:81:4a:d8:c4:96:b1:47:cf:23:7f:5b:4b:73:20:
         aa:a8:da:3f:2f:07:96:04:8f:2f:c5:ea:d2:31:13:c1:54:f3:
         49:64:3b:19:5d:f8:8e:27:19:f6:f0:c6:4f:48:e6:87:4f:8a:
         ff:d4:17:f0:32:81:6f:83:27:e9:b6:91:44:1f:0e:af:45:7e:
         9f:95:95:26:12:0d:0b:91:f2:19:6a:fd:ce:5b:d6:79:6f:52:
         be:67:36:81:eb:80:4c:d0:e4:a5:58:d3:9e:f2:05:a0:dc:57:
         c7:de:8c:47:4c:79:08:98:88:78:c2:2b:e4:a5:09:30:9a:87:
         3d:f6:14:58:51:9a:11:4d:8a:08:7f:58:e4:d6:de:72:a6:19:
         fa:a1:c7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org