Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/1/3137372e3130352e38302e302f32302d3234203d3e203532383535.roa
File:                     3137372e3130352e38302e302f32302d3234203d3e203532383535.roa (raw, json)
Hash identifier:          x9Z9nJvC9i8FzdUDfEH08u4ua59/sC6Hdd7o5aBXiUg=
Subject key identifier:   41:F9:7E:0B:5E:D1:78:60:57:EA:4A:78:0F:BF:C8:79:3A:1D:48:5C
Certificate issuer:       /CN=8A41BCAC92557DC5FEAF58C2237EC573624B2F0F
Certificate serial:       52FF9CB88360BA76516523BB72861B75DD9143A3
Authority key identifier: 8A:41:BC:AC:92:55:7D:C5:FE:AF:58:C2:23:7E:C5:73:62:4B:2F:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A41BCAC92557DC5FEAF58C2237EC573624B2F0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/1/3137372e3130352e38302e302f32302d3234203d3e203532383535.roa
Signing time:             Thu 04 Apr 2024 11:57:36 +0000
ROA not before:           Thu 04 Apr 2024 11:52:36 +0000
ROA not after:            Thu 03 Apr 2025 11:57:36 +0000
asID:                     52855
IP address blocks:        177.105.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ff:9c:b8:83:60:ba:76:51:65:23:bb:72:86:1b:75:dd:91:43:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A41BCAC92557DC5FEAF58C2237EC573624B2F0F
        Validity
            Not Before: Apr  4 11:52:36 2024 GMT
            Not After : Apr  3 11:57:36 2025 GMT
        Subject: CN=41F97E0B5ED1786057EA4A780FBFC8793A1D485C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c5:97:76:58:4a:52:e0:84:50:ac:85:22:91:
                    16:47:9c:6d:d9:a0:43:46:33:10:91:21:2e:0b:c8:
                    bf:3d:c8:48:18:5a:7a:e3:70:e6:cf:8d:9c:90:bf:
                    22:c4:cd:f6:a0:23:be:0d:73:aa:67:56:5d:59:0a:
                    4d:17:c0:8e:eb:0a:8d:49:1b:ad:20:47:aa:dd:6b:
                    0d:37:40:68:d6:f0:f1:63:2a:01:08:df:e2:52:a3:
                    b0:85:c5:8d:5e:e8:3a:cc:3c:b4:64:c3:5a:cf:a1:
                    d9:c2:ee:66:e7:ac:05:f2:51:08:df:1d:bb:5f:11:
                    4e:45:c2:83:a7:94:b1:25:46:a1:7b:4d:8c:00:51:
                    94:a0:0f:c9:b3:48:79:40:61:5a:59:e9:ba:bb:e4:
                    56:de:ee:ef:cb:79:01:ab:5d:fe:59:97:f7:0e:89:
                    03:c1:33:2c:b0:d0:95:a7:a1:bc:1a:53:cd:bf:08:
                    20:a3:ee:5c:46:cc:14:55:bd:bc:f0:14:a5:2b:fe:
                    6c:34:ea:08:92:6b:25:75:34:29:26:b5:9a:f1:f3:
                    a7:fc:35:7b:f2:e9:e8:6d:a1:56:00:8d:a4:0c:99:
                    0e:76:87:8f:ec:14:63:2d:31:1a:6f:40:10:b7:e7:
                    f9:6e:ed:99:54:d0:ba:a3:42:36:68:0b:6b:e6:16:
                    9f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F9:7E:0B:5E:D1:78:60:57:EA:4A:78:0F:BF:C8:79:3A:1D:48:5C
            X509v3 Authority Key Identifier:
                keyid:8A:41:BC:AC:92:55:7D:C5:FE:AF:58:C2:23:7E:C5:73:62:4B:2F:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/1/8A41BCAC92557DC5FEAF58C2237EC573624B2F0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A41BCAC92557DC5FEAF58C2237EC573624B2F0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/1/3137372e3130352e38302e302f32302d3234203d3e203532383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         98:8e:81:97:ac:51:5b:0b:47:bf:8f:e7:60:87:79:22:70:9d:
         6c:61:05:19:27:19:88:98:ad:b3:de:43:01:2e:bf:80:82:21:
         78:b0:d9:21:9e:6f:d7:06:43:dd:81:30:25:22:f0:60:1a:40:
         0a:34:b2:40:6d:5c:22:ab:2d:6c:06:49:05:7f:eb:09:89:04:
         30:a1:0b:dc:ea:4b:2d:d1:b7:5c:42:c8:9f:4f:52:64:06:92:
         39:17:85:12:50:9c:c3:d5:06:a3:24:f8:70:60:5f:05:02:93:
         14:29:6a:77:46:0a:33:3f:0c:0a:bb:e3:be:96:31:65:1c:e8:
         bc:b8:f0:bf:af:0c:c0:1a:0c:dd:44:8a:e2:d3:b1:96:bd:74:
         65:67:89:5a:17:09:c5:b7:e1:5a:2a:64:75:0c:bd:4e:4a:55:
         db:b6:c1:89:9a:aa:d4:54:c1:71:33:77:61:04:54:e9:a1:ed:
         f1:d7:6c:2b:a6:93:4d:b3:e2:c9:85:7f:f9:10:4b:ce:47:e8:
         e3:92:31:35:a7:1d:a4:c0:c5:1b:a0:b4:21:af:9e:1d:5c:9d:
         b9:9d:ee:a1:3a:16:45:16:e7:8f:2b:7c:3b:9f:ef:0a:78:d8:
         6e:9e:0d:e3:f6:4b:f0:08:a2:d0:cb:5f:f7:af:13:b3:30:81:
         d8:bf:e0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org