Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37392e302f32342d3234203d3e203532393737.roa
File:                     3137372e33392e37392e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          ltNw33PyPBl/NV5d9D1CI/wXg5DSSowy/45ob28I51A=
Subject key identifier:   AF:CE:10:B0:DF:A2:3F:1D:B1:31:F2:BD:45:64:A1:15:0F:90:9D:2A
Certificate issuer:       /CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
Certificate serial:       571C01C79C81580C2F8EBBD1B51E372A7905A8DD
Authority key identifier: 43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37392e302f32342d3234203d3e203532393737.roa
Signing time:             Tue 21 Nov 2023 06:00:04 +0000
ROA not before:           Tue 21 Nov 2023 05:55:04 +0000
ROA not after:            Tue 19 Nov 2024 06:00:04 +0000
asID:                     52977
IP address blocks:        177.39.79.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:1c:01:c7:9c:81:58:0c:2f:8e:bb:d1:b5:1e:37:2a:79:05:a8:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BE6DA27C5783CC7ABB43D63E087157C7220E35
        Validity
            Not Before: Nov 21 05:55:04 2023 GMT
            Not After : Nov 19 06:00:04 2024 GMT
        Subject: CN=AFCE10B0DFA23F1DB131F2BD4564A1150F909D2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:67:00:fa:b7:b9:e1:13:ff:43:3e:d1:d6:b3:
                    4d:9e:7b:dd:4e:64:89:8f:76:76:e5:be:0d:62:58:
                    ec:3d:0c:ce:64:b3:aa:06:82:a7:11:54:76:22:ec:
                    82:1e:ef:b1:1c:d9:2f:18:72:04:13:9a:12:a3:e2:
                    e8:f3:38:13:67:27:89:41:51:1f:e0:fd:ac:87:73:
                    c2:42:93:8d:d8:94:76:7d:c8:c6:c6:47:a4:9a:89:
                    e8:ba:cc:30:ab:22:2a:7d:57:9a:7a:e5:6c:0c:e9:
                    62:3b:21:45:26:bc:4f:c4:2a:71:93:c8:9d:98:32:
                    3d:5f:0c:9c:bb:28:52:a0:62:20:92:09:54:58:7f:
                    0d:a9:fa:8c:12:c8:ab:d8:37:e6:15:4b:a0:ec:f9:
                    96:af:63:c3:42:ca:99:ef:82:e2:ab:e4:75:d7:40:
                    e0:5f:6c:8a:d0:33:fc:a1:c1:3e:96:aa:bc:ca:50:
                    67:ea:e7:80:84:cf:68:a3:aa:44:39:13:69:34:b4:
                    96:09:75:38:18:90:6b:76:a8:d9:4a:b6:ff:79:0f:
                    9c:3d:13:d6:09:08:01:17:c6:41:24:d6:28:25:49:
                    ed:fd:d5:85:43:a9:0b:73:99:89:21:62:e1:2e:1c:
                    be:e1:d0:6a:82:82:d5:ae:8a:a9:ca:12:92:7d:08:
                    72:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CE:10:B0:DF:A2:3F:1D:B1:31:F2:BD:45:64:A1:15:0F:90:9D:2A
            X509v3 Authority Key Identifier:
                keyid:43:BE:6D:A2:7C:57:83:CC:7A:BB:43:D6:3E:08:71:57:C7:22:0E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BE6DA27C5783CC7ABB43D63E087157C7220E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/0/3137372e33392e37392e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:36:98:79:3d:24:0d:08:26:81:ee:2d:14:e2:14:5a:01:3a:
         6d:bf:b9:64:8b:ad:c0:18:a1:d5:cc:36:4c:da:df:ec:7e:28:
         71:a2:99:c8:5f:ba:49:b8:7e:aa:6a:90:b5:57:6f:d3:f9:49:
         b2:ab:de:5e:c5:a9:ae:6a:bd:23:79:d5:53:b1:83:e9:a2:07:
         31:dd:5a:59:cd:4e:f7:c6:29:02:0c:5f:b7:87:66:ea:fe:86:
         4e:ae:00:30:fd:b3:d7:f9:cd:ce:c8:72:62:f5:57:26:0d:0e:
         ea:fa:bd:96:90:f6:88:0c:1e:6d:47:17:68:52:b9:40:c8:bf:
         fb:84:e7:3c:6d:62:e8:41:0b:e1:5d:6f:53:e5:cd:8b:fc:87:
         27:fc:97:e2:af:79:28:f9:52:eb:32:75:fc:fa:a9:ac:41:7d:
         ea:d8:96:a5:0a:cd:00:00:0c:06:29:8f:90:1d:95:4b:a0:61:
         dc:a2:23:58:09:7e:81:c0:03:d6:10:8c:9b:4d:a4:44:5b:6e:
         9a:fa:ba:3f:74:ae:a0:5d:7b:cb:6b:a2:58:69:20:2b:c3:1b:
         78:1e:30:04:1d:b4:e1:50:37:dc:2b:7e:25:48:88:30:ee:fe:
         83:12:9e:65:1f:e0:1a:07:52:95:2e:bd:c4:8d:09:7b:60:63:
         f7:20:bb:1d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUVxwBx5yBWAwvjrvRtR43KnkFqN0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNCRTZEQTI3QzU3ODNDQzdBQkI0M0Q2M0UwODcxNTdD
NzIyMEUzNTAeFw0yMzExMjEwNTU1MDRaFw0yNDExMTkwNjAwMDRaMDMxMTAvBgNV
BAMTKEFGQ0UxMEIwREZBMjNGMURCMTMxRjJCRDQ1NjRBMTE1MEY5MDlEMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ZwD6t7nhE/9DPtHWs02ee91O
ZImPdnblvg1iWOw9DM5ks6oGgqcRVHYi7IIe77Ec2S8YcgQTmhKj4ujzOBNnJ4lB
UR/g/ayHc8JCk43YlHZ9yMbGR6Saiei6zDCrIip9V5p65WwM6WI7IUUmvE/EKnGT
yJ2YMj1fDJy7KFKgYiCSCVRYfw2p+owSyKvYN+YVS6Ds+ZavY8NCypnvguKr5HXX
QOBfbIrQM/yhwT6WqrzKUGfq54CEz2ijqkQ5E2k0tJYJdTgYkGt2qNlKtv95D5w9
E9YJCAEXxkEk1iglSe391YVDqQtzmYkhYuEuHL7h0GqCgtWuiqnKEpJ9CHKHAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUr84QsN+iPx2xMfK9RWShFQ+QnSowHwYDVR0j
BBgwFoAUQ75tonxXg8x6u0PWPghxV8ciDjUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTl6dGV3SmRGQjJ1WkNIWWlwZ244Ylp0RjZFN2NDWjhEdTFzeEN0aEYy
cHAvMC80M0JFNkRBMjdDNTc4M0NDN0FCQjQzRDYzRTA4NzE1N0M3MjIwRTM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQzQkU2REEyN0M1NzgzQ0M3
QUJCNDNENjNFMDg3MTU3QzcyMjBFMzUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5enRld0pkRkIydVpDSFlpcGduOGJadEY2RTdjQ1o4RHUxc3hDdGhGMnBwLzAv
MzEzNzM3MmUzMzM5MmUzNzM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM5
MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALEnTzANBgkqhkiG9w0BAQsFAAOCAQEAZTaYeT0kDQgm
ge4tFOIUWgE6bb+5ZIutwBih1cw2TNrf7H4ocaKZyF+6Sbh+qmqQtVdv0/lJsqve
XsWprmq9I3nVU7GD6aIHMd1aWc1O98YpAgxft4dm6v6GTq4AMP2z1/nNzshyYvVX
Jg0O6vq9lpD2iAwebUcXaFK5QMi/+4TnPG1i6EEL4V1vU+XNi/yHJ/yX4q95KPlS
6zJ1/PqprEF96tiWpQrNAAAMBimPkB2VS6Bh3KIjWAl+gcAD1hCMm02kRFtumvq6
P3SuoF17y2uiWGkgK8MbeB4wBB204VA33Ct+JUiIMO7+gxKeZR/gGgdSlS69xI0J
e2Bj9yC7HQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:13 2024 by rpki-client on console-ams.rpki-client.org