Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33382e302f32332d3233203d3e20323632353738.roa
File:                     3137372e38342e33382e302f32332d3233203d3e20323632353738.roa (raw, json)
Hash identifier:          u3ixB6jM6GW0H7gl3WIigp3k73tKEc49d8qjlpKZnIw=
Subject key identifier:   95:3E:F0:C0:FF:14:13:28:D9:0C:7A:3F:F6:D2:AD:B7:1F:CB:45:77
Certificate issuer:       /CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
Certificate serial:       59FD768EBCAFDCB12F9BC1B06A730809370FE3EF
Authority key identifier: 4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33382e302f32332d3233203d3e20323632353738.roa
Signing time:             Sat 02 Sep 2023 13:29:33 +0000
ROA not before:           Sat 02 Sep 2023 13:24:33 +0000
ROA not after:            Sat 31 Aug 2024 13:29:33 +0000
asID:                     262578
IP address blocks:        177.84.38.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:fd:76:8e:bc:af:dc:b1:2f:9b:c1:b0:6a:73:08:09:37:0f:e3:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
        Validity
            Not Before: Sep  2 13:24:33 2023 GMT
            Not After : Aug 31 13:29:33 2024 GMT
        Subject: CN=953EF0C0FF141328D90C7A3FF6D2ADB71FCB4577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7f:58:bb:57:0c:5e:48:f9:00:fe:be:0c:1d:
                    3d:05:b9:e1:f9:2e:15:50:74:81:36:5e:b6:d9:08:
                    4b:83:f6:1f:29:53:dd:62:3e:3e:47:0d:d4:8a:b9:
                    8a:cf:68:12:9e:c0:75:5f:81:c5:d4:7b:b8:dc:e1:
                    33:00:31:5d:ed:61:e6:8f:ef:48:a8:0f:f5:e9:e1:
                    b5:e9:0b:17:42:94:1c:5e:6f:09:12:7e:9e:cd:a4:
                    7b:c6:d2:3a:c3:4e:fb:b1:3f:d9:d9:5c:cb:64:e8:
                    77:33:70:06:20:9a:24:9f:18:64:22:60:7b:f1:14:
                    41:f2:cf:98:ff:9f:01:c0:39:f5:50:0d:19:98:27:
                    e7:11:9c:76:9a:70:14:a4:4c:0a:4c:3a:24:7c:bb:
                    52:24:fe:f6:7c:75:f9:a7:9f:d9:40:d2:56:37:dd:
                    ee:43:f6:a3:d4:28:3c:64:73:0d:70:40:d5:97:ec:
                    de:c6:3f:98:7e:09:31:7b:22:c0:72:b4:25:3c:85:
                    3f:5a:16:8d:92:25:76:b1:89:74:64:c0:f9:e2:c3:
                    85:db:b5:a6:d4:d0:43:93:4a:b8:67:ef:3d:25:ef:
                    43:f0:7a:dd:ea:e8:a0:be:7b:ce:f7:2f:c5:39:da:
                    22:ab:71:4a:10:2f:4e:74:b0:cb:8c:e3:a7:69:01:
                    6d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:3E:F0:C0:FF:14:13:28:D9:0C:7A:3F:F6:D2:AD:B7:1F:CB:45:77
            X509v3 Authority Key Identifier:
                keyid:4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33382e302f32332d3233203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:7d:d0:0c:40:b5:d4:4b:92:3b:c9:10:97:cd:b0:73:8c:51:
         c3:0a:f9:92:45:8c:f9:d7:87:9d:8c:7e:4b:78:ab:c5:53:cf:
         db:10:8e:30:09:31:31:79:d6:5a:2e:e6:24:96:66:a7:92:05:
         e3:08:06:47:08:44:06:7c:0b:7d:9f:43:e5:88:50:5f:e1:09:
         69:8b:7f:33:7f:27:5e:ba:0b:22:c4:97:7a:59:38:ac:61:02:
         88:e5:c1:61:2c:d5:fc:4d:a4:b4:9a:69:9b:07:82:19:82:36:
         d8:82:95:f6:1e:19:2b:f8:e8:7a:45:bb:f1:16:3c:8b:19:c1:
         26:bf:3e:1f:cc:49:99:76:fa:13:41:0c:b3:b0:b2:4f:be:f2:
         0a:92:32:57:44:d3:52:13:bb:18:e6:3b:4e:36:a5:48:86:a6:
         32:80:32:5e:1c:7e:7e:f9:34:1c:9d:6f:a4:6a:22:ea:03:95:
         ba:3a:d2:bd:b0:a4:0d:3e:8e:00:cf:4f:2f:7c:e7:94:13:5f:
         8e:f7:56:71:ee:5c:6d:0d:c5:ba:e2:96:45:43:0d:07:3b:12:
         ee:9f:7f:04:f8:f2:f7:14:52:3a:ec:53:7a:1d:e3:a2:3d:9b:
         e6:17:d3:1f:5a:cd:2a:bb:98:29:ee:a3:75:0b:d2:a8:8c:7f:
         84:13:e4:f3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWf12jryv3LEvm8GwanMICTcP4+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEVBNkUwRjg4MjVDMTY4OEM5MTU3MkM4MUMxN0YxRTkz
NUMzNTNEODAeFw0yMzA5MDIxMzI0MzNaFw0yNDA4MzExMzI5MzNaMDMxMTAvBgNV
BAMTKDk1M0VGMEMwRkYxNDEzMjhEOTBDN0EzRkY2RDJBREI3MUZDQjQ1NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAf1i7VwxeSPkA/r4MHT0FueH5
LhVQdIE2XrbZCEuD9h8pU91iPj5HDdSKuYrPaBKewHVfgcXUe7jc4TMAMV3tYeaP
70ioD/Xp4bXpCxdClBxebwkSfp7NpHvG0jrDTvuxP9nZXMtk6HczcAYgmiSfGGQi
YHvxFEHyz5j/nwHAOfVQDRmYJ+cRnHaacBSkTApMOiR8u1Ik/vZ8dfmnn9lA0lY3
3e5D9qPUKDxkcw1wQNWX7N7GP5h+CTF7IsBytCU8hT9aFo2SJXaxiXRkwPniw4Xb
tabU0EOTSrhn7z0l70Pwet3q6KC+e873L8U52iKrcUoQL050sMuM46dpAW1DAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUlT7wwP8UEyjZDHo/9tKttx/LRXcwHwYDVR0j
BBgwFoAUTqbg+IJcFojJFXLIHBfx6TXDU9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmNndlQ5SkU0WndkeE1EWlE4NVNFZm1MSmFzMjVLeUFSVHRCemJNNEw0
QkEvMC80RUE2RTBGODgyNUMxNjg4QzkxNTcyQzgxQzE3RjFFOTM1QzM1M0Q4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRFQTZFMEY4ODI1QzE2ODhD
OTE1NzJDODFDMTdGMUU5MzVDMzUzRDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JjZ3ZUOUpFNFp3ZHhNRFpRODVTRWZtTEphczI1S3lBUlR0QnpiTTRMNEJBLzAv
MzEzNzM3MmUzODM0MmUzMzM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMy
MzUzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsVQmMA0GCSqGSIb3DQEBCwUAA4IBAQAHfdAMQLXU
S5I7yRCXzbBzjFHDCvmSRYz514edjH5LeKvFU8/bEI4wCTExedZaLuYklmankgXj
CAZHCEQGfAt9n0PliFBf4Qlpi38zfydeugsixJd6WTisYQKI5cFhLNX8TaS0mmmb
B4IZgjbYgpX2Hhkr+Oh6RbvxFjyLGcEmvz4fzEmZdvoTQQyzsLJPvvIKkjJXRNNS
E7sY5jtONqVIhqYygDJeHH5++TQcnW+kaiLqA5W6OtK9sKQNPo4Az08vfOeUE1+O
91Zx7lxtDcW64pZFQw0HOxLun38E+PL3FFI67FN6HeOiPZvmF9MfWs0qu5gp7qN1
C9KojH+EE+Tz
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:56 2024 by rpki-client on console-fra.rpki-client.org