Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37382e302f32332d3233203d3e203532393737.roa
File:                     3137372e33392e37382e302f32332d3233203d3e203532393737.roa (raw, json)
Hash identifier:          ouLk8TLlVOVqn40Co0p1LFh1sORuq/AyRppyTYeLbwA=
Subject key identifier:   7C:15:2C:DF:7A:F0:26:26:0C:06:98:7B:5F:F7:D9:BB:EA:37:AA:10
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       6DE25723BA6526554AC074DD8C9CC7758E590719
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37382e302f32332d3233203d3e203532393737.roa
Signing time:             Tue 21 Nov 2023 06:00:00 +0000
ROA not before:           Tue 21 Nov 2023 05:55:00 +0000
ROA not after:            Tue 19 Nov 2024 06:00:00 +0000
asID:                     52977
IP address blocks:        177.39.78.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e2:57:23:ba:65:26:55:4a:c0:74:dd:8c:9c:c7:75:8e:59:07:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Nov 21 05:55:00 2023 GMT
            Not After : Nov 19 06:00:00 2024 GMT
        Subject: CN=7C152CDF7AF026260C06987B5FF7D9BBEA37AA10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:89:59:86:f8:b6:d1:c4:14:bf:ef:6b:62:c2:
                    7c:7b:9a:50:d4:6f:01:11:23:be:3f:94:5a:b1:0d:
                    fd:33:1a:6f:39:39:1e:1a:11:89:4f:3c:f8:89:ff:
                    69:70:18:1f:9d:e9:3a:6e:84:94:49:ae:f6:a0:53:
                    65:c5:60:ca:4a:0e:da:64:de:8e:8f:ef:ad:31:20:
                    cb:9a:99:cb:80:53:c8:f9:1a:f7:2c:7f:a2:6a:10:
                    d5:c1:7f:0c:9b:8b:4d:4a:da:d4:05:ea:13:88:9c:
                    36:f9:c8:23:72:32:6c:50:65:85:51:c7:db:6d:4a:
                    cc:7d:56:18:77:0a:45:e8:7b:ae:44:ca:ef:20:06:
                    45:f7:a7:f7:50:1f:3b:99:fc:50:c4:fe:a2:a6:4a:
                    71:fa:44:08:d2:2a:5e:61:94:4b:ab:57:ed:70:ab:
                    cf:bd:5c:fd:cc:18:f0:03:3e:b2:0c:81:89:da:93:
                    36:c1:51:c1:61:b7:d7:7a:26:5f:03:6b:f6:7d:91:
                    9e:79:a8:cd:05:ee:39:13:76:cc:80:2c:45:18:62:
                    b9:21:76:7d:b9:8c:86:b7:fd:cb:49:94:15:77:4d:
                    2b:b4:bd:ac:b2:c2:97:9d:7c:c0:38:d8:c2:cd:7e:
                    dd:7c:03:6f:6a:c9:06:22:fe:df:f1:3c:53:2c:c8:
                    cb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:15:2C:DF:7A:F0:26:26:0C:06:98:7B:5F:F7:D9:BB:EA:37:AA:10
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37382e302f32332d3233203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:09:75:27:fa:c5:f6:78:fc:74:04:0a:df:04:fa:5a:b9:94:
         63:24:48:21:2e:1c:ef:a7:27:d8:19:c2:12:62:d8:0a:31:f5:
         6a:67:70:60:29:44:5f:cf:e0:75:88:69:40:89:24:ca:53:e9:
         19:80:60:b2:51:07:45:4b:a5:bd:70:aa:ae:d6:4e:b9:c2:9d:
         92:54:db:85:ab:7a:39:ed:60:b1:5e:78:27:ec:9d:2b:1b:1d:
         fd:5b:76:8f:e3:b6:7d:bf:63:f2:ab:6e:84:7c:41:e8:b9:68:
         fa:86:b8:3a:f1:e9:19:e3:5d:e0:84:ce:3f:1a:f3:c2:00:ec:
         21:62:7f:f5:76:6a:cd:2d:5b:0c:32:c5:fb:65:5f:5e:87:9a:
         3b:cc:11:63:a5:1e:ba:dc:f3:47:8f:23:3c:b7:f7:5d:de:bb:
         73:a8:9e:6b:bf:95:c2:02:b9:76:e8:b0:99:6b:b2:d3:46:45:
         7f:04:db:45:e3:0e:2c:e3:e7:ea:c8:a3:5c:7a:07:77:7a:f3:
         e8:02:88:a4:03:ce:0d:51:71:da:75:91:24:e4:cd:7e:ef:55:
         f3:76:bd:8c:46:3a:f5:59:14:81:13:46:a0:bb:70:fd:b2:b3:
         93:f0:9f:31:35:a5:e7:d1:4c:a8:85:11:7b:9c:9c:7e:eb:fc:
         b4:3d:86:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:23 2025 by rpki-client