Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37372e302f32342d3234203d3e203532393737.roa
File:                     3137372e33392e37372e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          eATa2FprSHExXlzUkfzrfYAltvNQdAgF7hbHzffndzc=
Subject key identifier:   E1:F1:0A:76:9F:43:15:89:66:13:F8:E3:C2:CD:BC:9A:33:E8:F8:1E
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       63A839B1D27A72FECF4A1C2CB0A50FC49855009D
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37372e302f32342d3234203d3e203532393737.roa
Signing time:             Tue 21 Nov 2023 06:00:04 +0000
ROA not before:           Tue 21 Nov 2023 05:55:04 +0000
ROA not after:            Tue 19 Nov 2024 06:00:04 +0000
asID:                     52977
IP address blocks:        177.39.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a8:39:b1:d2:7a:72:fe:cf:4a:1c:2c:b0:a5:0f:c4:98:55:00:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Nov 21 05:55:04 2023 GMT
            Not After : Nov 19 06:00:04 2024 GMT
        Subject: CN=E1F10A769F4315896613F8E3C2CDBC9A33E8F81E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cd:d0:44:c8:8a:6f:8b:06:4c:de:59:fa:70:
                    7f:c8:e3:57:65:14:e7:6d:9a:6c:66:2e:db:90:7b:
                    81:15:3d:83:7c:aa:de:5b:65:41:23:e7:f3:21:65:
                    12:1b:76:38:41:46:92:fc:1a:4a:f2:9a:eb:3d:af:
                    9f:2f:8d:84:9e:2c:67:ab:93:30:62:ca:b8:34:a2:
                    e3:db:d7:0b:b7:3f:38:7a:9f:66:e0:36:53:06:f7:
                    a4:88:38:75:41:e8:b9:fd:6f:96:19:54:ce:5b:4a:
                    63:b7:a3:f2:56:6a:f5:f6:c7:d8:b2:df:c3:d8:b7:
                    87:e0:c5:00:3f:8a:d1:61:c9:30:de:fe:cc:d3:c5:
                    1c:52:de:dc:74:f6:b0:4c:1b:83:63:bd:7e:6f:64:
                    fa:1d:fd:51:fa:52:13:57:88:6c:6c:48:bc:66:4c:
                    7b:17:b8:d4:2e:3a:c1:97:c5:1d:00:04:67:15:64:
                    aa:8d:c2:bd:38:2e:f6:66:26:04:c2:eb:7c:58:4f:
                    3e:6a:29:cd:9a:cf:b3:39:ed:c4:36:c0:04:76:6a:
                    32:ec:ea:31:3d:04:b4:5a:f8:9b:75:c9:e6:7c:13:
                    ed:a5:7b:73:f3:b8:6f:11:f3:d0:bb:c0:32:b3:80:
                    f0:5f:ba:99:62:11:75:99:91:f5:4c:33:66:42:6f:
                    85:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F1:0A:76:9F:43:15:89:66:13:F8:E3:C2:CD:BC:9A:33:E8:F8:1E
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37372e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:cd:61:f6:72:e1:63:7f:a7:ae:e1:b1:1b:f9:98:03:d7:fc:
         2a:34:c3:03:f5:8b:27:26:13:b6:66:5a:44:7f:7b:2d:4c:57:
         ad:cd:fc:7f:57:14:3b:49:58:55:21:b9:bf:e3:1c:21:66:ec:
         d1:14:67:ad:29:34:68:e6:55:03:a9:c3:43:41:cc:f7:40:a4:
         27:8d:d6:30:d5:ab:fd:e0:e0:00:3c:96:78:f8:2c:14:46:37:
         03:be:44:30:e7:55:27:19:1e:24:e4:0f:82:6d:26:f8:e0:10:
         7f:97:39:ee:93:df:b7:49:7e:f3:99:c8:dc:64:af:46:28:16:
         50:d5:f9:11:c8:a2:6e:42:78:13:23:c4:f2:07:fe:eb:df:11:
         ca:39:30:96:85:5f:3a:df:d5:91:94:65:33:c2:ec:e5:65:20:
         2a:2b:fe:7a:7d:cc:1e:e1:2a:e1:b6:61:39:f3:ba:f5:b2:c3:
         f4:d3:a2:ad:99:86:e8:ab:de:54:f1:12:2f:03:4a:2a:b9:b9:
         a8:5d:09:28:e0:51:07:4e:23:4f:0f:b9:f4:67:9e:bb:cd:1a:
         8b:6b:5a:0f:bf:c3:c5:4c:ba:36:0f:94:f7:2e:2c:10:f1:5c:
         f4:f7:c5:a1:42:0c:c2:3a:f9:4a:33:cb:06:39:27:da:46:7b:
         2a:1c:66:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org