Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37352e302f32342d3234203d3e203532393737.roa
File:                     3137372e33392e37352e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          FpQ0bZTqNpJlldI4/4W12kdzvslTsJ6wb5wFmvuk0xw=
Subject key identifier:   2C:20:3A:70:E4:6B:CA:C0:D3:20:92:BC:AA:1B:A5:00:D2:7D:59:27
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       1746D6C4781D5DDC431C9BC55CCDD4D3EBBE70DA
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37352e302f32342d3234203d3e203532393737.roa
Signing time:             Tue 21 Nov 2023 06:00:00 +0000
ROA not before:           Tue 21 Nov 2023 05:55:00 +0000
ROA not after:            Tue 19 Nov 2024 06:00:00 +0000
asID:                     52977
IP address blocks:        177.39.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:46:d6:c4:78:1d:5d:dc:43:1c:9b:c5:5c:cd:d4:d3:eb:be:70:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Nov 21 05:55:00 2023 GMT
            Not After : Nov 19 06:00:00 2024 GMT
        Subject: CN=2C203A70E46BCAC0D32092BCAA1BA500D27D5927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:44:9c:14:6f:dc:4b:62:ff:d1:db:43:cd:03:
                    27:59:5a:dc:77:f7:e2:c5:65:84:2e:06:9b:e6:24:
                    5e:55:a6:bf:82:be:86:c0:e7:80:d9:f6:1d:88:07:
                    a5:7e:73:c6:06:4a:80:4a:0f:6c:c4:a3:ac:98:d0:
                    11:29:8a:57:64:5c:35:86:9a:38:9c:68:71:82:39:
                    2c:48:9c:3e:1e:34:cd:74:61:52:ef:5d:02:14:73:
                    08:dd:a6:b3:0b:40:0e:1b:fd:e3:36:aa:cb:4e:ba:
                    fb:19:bb:59:d1:0f:60:2d:e9:fd:0a:f5:30:5c:cf:
                    6a:0f:c0:86:06:cf:19:80:63:19:5f:69:f8:89:6a:
                    58:32:22:ec:ee:67:85:1e:88:13:63:9f:34:1d:fc:
                    8e:1d:d3:f7:68:28:6c:d5:d6:c3:57:6b:bc:c9:09:
                    54:a4:0d:41:77:50:0b:19:3b:7c:b2:e4:f7:83:de:
                    19:e5:78:4f:29:a2:30:68:7c:82:e3:b6:fd:ab:07:
                    0f:c6:9c:b6:7f:bb:ed:8e:7e:9f:fc:9c:d2:4d:4c:
                    ee:80:0d:ec:a4:a5:e0:cd:57:fc:78:06:ff:10:9d:
                    40:46:37:f6:60:b5:95:6a:77:05:70:a7:10:32:31:
                    f0:f9:0c:61:c4:dc:9b:f9:96:2a:fb:41:3e:4b:2d:
                    0d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:20:3A:70:E4:6B:CA:C0:D3:20:92:BC:AA:1B:A5:00:D2:7D:59:27
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37352e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:e1:01:f7:be:66:10:4b:a0:2c:89:26:59:53:a8:be:fd:18:
         a5:4f:cb:ff:58:63:47:ea:1f:6b:c6:05:f7:a1:b8:03:78:72:
         82:5d:ab:dd:3a:52:cd:ef:d6:f3:34:5c:af:4c:bd:37:51:15:
         46:cf:c2:a5:77:59:ac:b0:3e:ff:af:1f:40:7a:69:0a:04:c5:
         99:50:e7:d1:bf:96:ac:af:41:0b:6e:6f:41:a6:15:e6:7c:a7:
         9b:d4:af:1f:b1:af:85:7b:4d:d0:32:21:ce:d8:66:af:02:2e:
         bc:b8:f4:d6:9f:02:86:a2:16:cb:dc:da:21:c7:bb:8a:31:de:
         95:fa:83:35:1e:62:c4:e1:7d:4c:28:93:bd:98:92:68:67:1c:
         37:b1:2f:92:9e:21:db:da:97:70:44:bb:33:82:fe:3f:8b:21:
         17:d5:e3:b1:34:78:3f:a6:d5:fe:70:2e:40:31:2a:c1:fe:cc:
         e9:42:cc:10:51:db:10:ff:06:34:a4:78:e9:f2:70:94:c2:16:
         87:f6:a0:7a:d1:78:48:36:49:99:9c:48:13:36:5c:74:eb:84:
         83:73:66:e6:f2:38:c0:02:bc:4a:40:1f:49:3d:16:9b:f1:f8:
         f8:5f:6d:41:ce:90:e9:63:b9:15:90:20:1a:c4:43:e7:15:5e:
         ce:9a:50:6c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUF0bWxHgdXdxDHJvFXM3U0+u+cNowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNCRTZEQTI3QzU3ODNDQzdBQkI0M0Q2M0UwODcxNTdD
NzIyMEUzNTAeFw0yMzExMjEwNTU1MDBaFw0yNDExMTkwNjAwMDBaMDMxMTAvBgNV
BAMTKDJDMjAzQTcwRTQ2QkNBQzBEMzIwOTJCQ0FBMUJBNTAwRDI3RDU5MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDERJwUb9xLYv/R20PNAydZWtx3
9+LFZYQuBpvmJF5Vpr+CvobA54DZ9h2IB6V+c8YGSoBKD2zEo6yY0BEpildkXDWG
mjicaHGCOSxInD4eNM10YVLvXQIUcwjdprMLQA4b/eM2qstOuvsZu1nRD2At6f0K
9TBcz2oPwIYGzxmAYxlfafiJalgyIuzuZ4UeiBNjnzQd/I4d0/doKGzV1sNXa7zJ
CVSkDUF3UAsZO3yy5PeD3hnleE8pojBofILjtv2rBw/GnLZ/u+2Ofp/8nNJNTO6A
DeykpeDNV/x4Bv8QnUBGN/ZgtZVqdwVwpxAyMfD5DGHE3Jv5lir7QT5LLQ1TAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQULCA6cORrysDTIJK8qhulANJ9WScwHwYDVR0j
BBgwFoAUQ75tonxXg8x6u0PWPghxV8ciDjUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTl6dGV3SmRGQjJ1WkNIWWlwZ244Ylp0RjZFN2NDWjhEdTFzeEN0aEYy
cHAvMC80M0JFNkRBMjdDNTc4M0NDN0FCQjQzRDYzRTA4NzE1N0M3MjIwRTM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQzQkU2REEyN0M1NzgzQ0M3
QUJCNDNENjNFMDg3MTU3QzcyMjBFMzUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5enRld0pkRkIydVpDSFlpcGduOGJadEY2RTdjQ1o4RHUxc3hDdGhGMnBwLzAv
MzEzNzM3MmUzMzM5MmUzNzM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM5
MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALEnSzANBgkqhkiG9w0BAQsFAAOCAQEAueEB975mEEug
LIkmWVOovv0YpU/L/1hjR+ofa8YF96G4A3hygl2r3TpSze/W8zRcr0y9N1EVRs/C
pXdZrLA+/68fQHppCgTFmVDn0b+WrK9BC25vQaYV5nynm9SvH7GvhXtN0DIhzthm
rwIuvLj01p8ChqIWy9zaIce7ijHelfqDNR5ixOF9TCiTvZiSaGccN7Evkp4h29qX
cES7M4L+P4shF9XjsTR4P6bV/nAuQDEqwf7M6ULMEFHbEP8GNKR46fJwlMIWh/ag
etF4SDZJmZxIEzZcdOuEg3Nm5vI4wAK8SkAfST0Wm/H4+F9tQc6Q6WO5FZAgGsRD
5xVezppQbA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org