Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37362e302f32342d3234203d3e203532393737.roa
File:                     3137372e33392e37362e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          zKVJlwYddUnArWfIhASievYoGpzqIlJ9Iq+sUkbpx+M=
Subject key identifier:   1D:2E:72:6F:01:D1:0C:73:86:B3:D2:F2:58:D3:49:97:3E:BE:CB:4E
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       03D8A4C698CCD1F3DBDF00B508FD982ABA92D861
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37362e302f32342d3234203d3e203532393737.roa
Signing time:             Tue 21 Nov 2023 06:00:05 +0000
ROA not before:           Tue 21 Nov 2023 05:55:05 +0000
ROA not after:            Tue 19 Nov 2024 06:00:05 +0000
asID:                     52977
IP address blocks:        177.39.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d8:a4:c6:98:cc:d1:f3:db:df:00:b5:08:fd:98:2a:ba:92:d8:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Nov 21 05:55:05 2023 GMT
            Not After : Nov 19 06:00:05 2024 GMT
        Subject: CN=1D2E726F01D10C7386B3D2F258D349973EBECB4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:74:7c:25:ab:01:e5:bb:39:b2:ab:c7:09:3f:
                    8d:6f:96:0d:95:90:02:9a:99:70:10:21:05:fc:84:
                    5a:66:93:ca:b2:62:6c:9d:57:78:b6:fa:9c:2c:db:
                    7a:4f:1b:f3:8c:cd:a6:f2:79:d3:b6:7b:6c:e9:ab:
                    46:93:ec:05:d9:0f:89:5b:21:65:01:74:8d:c9:33:
                    06:f3:61:00:a0:88:e6:46:50:14:2b:64:7b:0b:82:
                    42:13:c8:5a:7b:e1:cc:cc:de:80:57:3c:8a:4d:b0:
                    28:e3:bc:93:28:49:e7:be:69:2d:eb:1a:f1:00:47:
                    b9:b0:64:e8:2b:bf:d7:65:22:e1:d8:a7:64:35:15:
                    1d:70:bf:6e:ad:ee:1c:02:04:46:79:5c:c3:68:14:
                    3f:9f:0b:81:97:21:e1:7a:cb:11:fd:d4:72:9c:8a:
                    bc:c7:c9:2a:7b:a3:ab:84:4b:8c:3f:e0:ae:eb:3e:
                    a0:74:b9:a5:40:6e:22:8c:ff:ee:ee:5c:d2:57:1d:
                    9f:a1:0c:b1:f6:15:7b:f3:43:a4:5f:28:50:37:5f:
                    fd:95:f3:8b:8c:6c:27:5a:b3:8f:21:1c:64:75:5b:
                    e7:eb:30:be:02:80:93:28:11:a8:fb:cd:ef:f2:92:
                    00:85:75:4b:f9:9e:a5:d8:8b:4c:23:02:bb:4e:8a:
                    5d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2E:72:6F:01:D1:0C:73:86:B3:D2:F2:58:D3:49:97:3E:BE:CB:4E
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37362e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:01:96:69:7f:27:ec:f7:32:79:91:d3:22:49:83:2d:ef:7e:
         b0:c2:f6:a4:8c:45:d8:06:df:70:80:2b:2f:b8:b2:6c:b9:72:
         24:26:8c:1f:3d:e7:5c:f9:45:66:7f:ef:1f:dd:2d:d7:6e:17:
         0b:6b:cd:b6:25:6d:df:0b:50:64:78:96:15:c9:c9:e9:52:34:
         2d:be:f5:0a:8d:f2:21:44:f8:f2:ea:34:0f:6a:9c:23:e4:43:
         77:41:08:ae:35:d0:90:0f:c8:2c:38:89:17:d9:77:d6:8a:bf:
         93:d6:a7:54:66:40:1c:07:2f:19:ec:05:ed:64:7c:2b:c4:6d:
         91:02:b7:28:d4:e2:10:3a:7d:95:99:44:3b:12:ff:2e:fc:3b:
         b7:63:39:4a:23:bb:5f:4c:29:b1:f1:15:8d:77:ed:15:e3:8d:
         03:8e:ca:58:09:9a:c0:0b:1f:8f:bd:52:6f:b3:07:df:37:dd:
         18:13:74:99:15:b7:30:15:54:94:60:f6:ee:1a:f7:6f:d8:8a:
         d8:a0:6d:f9:d3:51:09:1d:d3:51:79:9b:0a:e9:d1:ce:b8:84:
         df:9d:42:e3:8c:71:53:5e:23:1c:6a:c0:8d:15:ad:0f:91:f9:
         2e:47:1e:be:91:17:6a:a3:00:c5:55:31:d2:d8:79:2e:39:00:
         75:f1:81:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org