Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37382e302f32342d3234203d3e203532393737.roa
File:                     3137372e33392e37382e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          j4pwJtpKbLUf5UHeVwFXx+bK5lwrXvgfXPlnnJialEw=
Subject key identifier:   06:1B:99:1A:21:86:23:91:96:17:67:74:6F:A2:16:8D:A6:7E:C3:BD
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       0FF7648F32840548993A0B8A32EB4976F50F86A8
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37382e302f32342d3234203d3e203532393737.roa
Signing time:             Tue 21 Nov 2023 06:00:02 +0000
ROA not before:           Tue 21 Nov 2023 05:55:02 +0000
ROA not after:            Tue 19 Nov 2024 06:00:02 +0000
asID:                     52977
IP address blocks:        177.39.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f7:64:8f:32:84:05:48:99:3a:0b:8a:32:eb:49:76:f5:0f:86:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Nov 21 05:55:02 2023 GMT
            Not After : Nov 19 06:00:02 2024 GMT
        Subject: CN=061B991A21862391961767746FA2168DA67EC3BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1c:b5:e0:5d:ce:6e:11:b7:6a:c3:38:50:23:
                    9f:6c:72:2e:9b:d6:bd:aa:76:d7:b7:7d:9f:21:9f:
                    4e:5c:fc:2e:11:f6:02:ec:cc:8d:a3:7b:08:b3:f1:
                    8b:3e:f4:c6:f6:60:e1:2f:7d:1a:25:70:6d:e8:ca:
                    44:f2:8c:a9:45:36:dd:79:3b:4d:48:75:f3:ec:b0:
                    c1:d1:dd:a8:bc:c5:1a:c4:46:c4:94:88:53:7e:cc:
                    01:69:09:e6:6b:9d:7c:55:60:b7:56:40:08:37:b3:
                    3c:bd:27:9c:bf:91:09:07:3b:49:00:0e:46:de:b8:
                    d6:05:34:22:fc:e5:30:13:c1:af:12:00:0e:62:b1:
                    8d:10:88:52:4c:f8:92:04:4c:28:f7:64:1c:45:50:
                    57:d0:89:4b:95:8e:af:fa:01:41:1f:5b:da:7b:16:
                    2d:60:1a:41:27:15:11:8c:59:33:5b:65:62:84:4e:
                    4d:23:55:f9:18:01:db:6b:5a:9a:b2:c9:7a:6d:c4:
                    70:7f:82:40:0a:74:14:0b:c4:5c:e2:b0:e5:4a:f9:
                    f2:41:52:4d:ad:67:30:0c:40:70:98:9b:9b:44:76:
                    f9:cf:8a:54:cc:cf:e6:40:88:a8:d2:a6:04:29:15:
                    ba:ea:e5:4f:d2:c0:71:c9:ab:9f:93:02:a5:5a:62:
                    d2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1B:99:1A:21:86:23:91:96:17:67:74:6F:A2:16:8D:A6:7E:C3:BD
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37382e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:0a:d0:5e:f0:56:08:60:94:98:cd:1f:6e:24:0a:0b:7c:77:
         b9:14:23:9c:90:5c:88:63:3e:82:52:cc:a1:92:9f:40:fd:88:
         f1:f0:fa:5f:ba:c5:35:f6:e0:0a:19:8b:96:cc:e1:ad:f9:c1:
         5e:c8:81:a4:3a:de:ea:d7:e8:9f:79:cc:1f:4a:7d:51:f0:72:
         9c:ce:ae:06:05:84:d9:69:12:8f:55:e1:84:8e:6b:8a:fe:bc:
         26:18:72:8a:45:56:35:40:83:24:88:bb:e0:2d:a0:74:9b:c6:
         7a:89:01:f4:4e:ad:d7:2d:99:c3:25:13:d9:35:9e:18:c1:1d:
         c0:90:fb:7f:15:53:a7:c3:c1:73:91:32:68:59:02:3d:cb:1b:
         16:8b:b7:cc:80:44:7b:80:ab:f9:c0:46:dd:84:47:ba:4d:76:
         a9:c9:43:1e:87:1e:d2:a4:ea:a0:b2:71:68:f5:12:7e:88:ac:
         79:61:f3:b5:03:f3:34:1e:ce:69:2f:2b:61:da:a2:6b:2a:a0:
         9f:69:fa:b8:16:73:fd:98:41:b3:dd:79:3f:66:59:90:27:28:
         4e:fa:0d:7a:74:d8:0b:88:e5:c0:09:17:a8:79:da:30:13:9b:
         cf:8f:fb:d6:6b:af:08:ea:ec:74:fc:9c:45:1b:2b:87:0a:43:
         e1:c8:d9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:13 2024 by rpki-client on console-ams.rpki-client.org