Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33332e302f32342d3234203d3e20323632353738.roa
File:                     3137372e38342e33332e302f32342d3234203d3e20323632353738.roa (raw, json)
Hash identifier:          5pwG8+S7yUqQz1pf43Y6aRb0bdtpaPl6bZ17eKFgQmE=
Subject key identifier:   35:CA:23:76:78:B4:04:79:B1:AC:12:A7:B4:9A:81:A7:08:3F:A5:C0
Certificate issuer:       /CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
Certificate serial:       3F4516A2E8E348A4EF903A4593D3F72FA38E979E
Authority key identifier: 4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33332e302f32342d3234203d3e20323632353738.roa
Signing time:             Fri 11 Aug 2023 16:35:11 +0000
ROA not before:           Fri 11 Aug 2023 16:30:11 +0000
ROA not after:            Fri 09 Aug 2024 16:35:11 +0000
asID:                     262578
IP address blocks:        177.84.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:45:16:a2:e8:e3:48:a4:ef:90:3a:45:93:d3:f7:2f:a3:8e:97:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
        Validity
            Not Before: Aug 11 16:30:11 2023 GMT
            Not After : Aug  9 16:35:11 2024 GMT
        Subject: CN=35CA237678B40479B1AC12A7B49A81A7083FA5C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ab:d1:0c:0d:11:f0:ff:e8:fd:46:6f:53:b0:
                    ba:27:d2:67:92:59:bf:dc:d4:18:95:52:97:76:08:
                    41:40:7b:34:af:3a:d3:39:04:34:d4:bd:8a:40:a0:
                    03:06:1f:88:0c:dd:82:4e:75:4c:42:a6:46:99:16:
                    0b:8e:6f:57:2b:2e:cb:a3:c2:dd:39:7e:80:31:04:
                    f5:a5:ab:69:a5:a7:34:0f:57:d3:f1:d6:2a:fc:5e:
                    a5:cc:dc:9b:fc:30:f2:a3:38:d2:46:0d:73:82:ab:
                    8a:b7:e7:b5:61:6e:60:1a:2b:26:59:99:3d:1b:f7:
                    42:70:e1:80:26:9d:55:ac:03:00:18:bd:22:5c:f2:
                    b7:42:ab:f0:ea:2b:d7:1d:42:b9:a6:61:fb:46:77:
                    0e:cb:64:19:b6:31:2f:88:5d:ec:17:4c:00:15:65:
                    f9:2a:0c:e5:e0:1e:ee:7e:25:a4:c1:93:e8:e6:08:
                    53:3e:57:92:0b:df:89:e2:04:c0:26:de:ef:c3:5f:
                    e4:c6:95:b7:e4:b8:52:e0:0c:67:1f:14:66:a5:4e:
                    20:86:4d:25:07:e9:c3:e1:26:23:5e:9a:5f:36:09:
                    fd:38:6d:e9:06:53:68:c8:3c:cc:52:00:92:7a:01:
                    7c:6b:30:65:5b:b2:33:54:2c:d7:83:56:8f:51:5f:
                    d3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CA:23:76:78:B4:04:79:B1:AC:12:A7:B4:9A:81:A7:08:3F:A5:C0
            X509v3 Authority Key Identifier:
                keyid:4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33332e302f32342d3234203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:3c:21:77:60:2a:27:ea:c1:27:e7:d3:39:90:41:fc:c0:60:
         5a:0f:35:0d:31:9d:bc:67:b8:ee:af:e3:21:1c:80:ca:53:9f:
         81:57:1f:15:2d:86:c0:06:ba:e6:b3:28:56:62:8f:4c:2d:34:
         17:d3:50:1d:35:07:6b:83:a8:d7:31:b6:65:56:64:4c:9b:9e:
         e5:84:29:3c:7d:61:60:bd:dc:9b:e1:fc:2e:a2:e3:e3:93:0e:
         1a:dc:85:07:91:83:87:4d:c6:ff:cc:ef:cc:41:81:e1:01:42:
         92:a0:12:52:c5:ca:b8:fa:33:08:82:bf:12:f8:59:55:54:bb:
         80:a7:61:78:c7:6b:b5:e8:bf:d2:01:20:d4:fc:d9:bb:55:95:
         00:96:94:ea:93:bc:7f:8c:1d:ac:7d:4d:96:b1:9c:3e:1a:42:
         08:0d:42:25:a6:18:37:76:f5:95:19:24:4c:38:01:14:5c:29:
         3a:9d:d0:a9:30:44:83:38:52:2e:37:14:57:d1:d1:4a:66:1b:
         ca:bd:7f:e3:9c:5e:4f:7a:5a:8f:5b:af:b1:96:df:fd:4f:74:
         5f:c3:84:fe:51:07:b3:11:d2:2a:1c:5c:63:b3:3b:ba:43:ef:
         53:29:53:c1:13:2f:7e:24:7c:22:19:72:07:49:17:d9:19:2e:
         a3:1f:d1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:56 2024 by rpki-client on console-fra.rpki-client.org