Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33342e302f32342d3234203d3e20323632353738.roa
File:                     3137372e38342e33342e302f32342d3234203d3e20323632353738.roa (raw, json)
Hash identifier:          RkAI8KLdidZGBKCU/4CwBkBOYokkSazcC8eEEyCsc0U=
Subject key identifier:   D0:43:FE:C4:76:BB:23:0E:51:81:62:2D:18:96:16:FD:C4:F3:B1:29
Certificate issuer:       /CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
Certificate serial:       2AC52985F70C6D4F85965698DFF6405A4BA091C7
Authority key identifier: 4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33342e302f32342d3234203d3e20323632353738.roa
Signing time:             Fri 11 Aug 2023 16:35:14 +0000
ROA not before:           Fri 11 Aug 2023 16:30:14 +0000
ROA not after:            Fri 09 Aug 2024 16:35:14 +0000
asID:                     262578
IP address blocks:        177.84.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c5:29:85:f7:0c:6d:4f:85:96:56:98:df:f6:40:5a:4b:a0:91:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
        Validity
            Not Before: Aug 11 16:30:14 2023 GMT
            Not After : Aug  9 16:35:14 2024 GMT
        Subject: CN=D043FEC476BB230E5181622D189616FDC4F3B129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3e:0a:7c:e8:dc:33:a4:2e:c6:de:9e:fe:3c:
                    fd:f3:5c:f5:4a:72:03:0f:82:9e:c8:40:b8:16:47:
                    a5:b1:7d:d1:d9:58:2c:5e:7d:19:5d:63:01:8d:8f:
                    ba:90:87:c9:3d:21:43:35:e1:9c:4b:c6:a7:29:64:
                    38:2b:ed:27:2f:11:67:2f:e4:cc:a5:85:a0:1b:c7:
                    d2:48:c9:40:e4:aa:e9:61:f4:c4:f3:a1:e9:10:08:
                    38:b1:d7:61:5c:83:b5:1d:ab:22:d3:cf:99:7d:2a:
                    3b:a8:e3:77:4c:47:2f:45:8f:04:48:49:a2:f8:15:
                    87:61:0b:a0:55:ad:95:6e:a9:1d:ca:d7:d4:21:0c:
                    ec:8f:07:f1:3a:a3:34:ec:cb:d6:c5:c9:93:af:08:
                    f6:81:e4:07:79:f2:38:76:c9:e9:ff:a6:8d:13:b5:
                    ae:82:26:62:8f:67:56:1c:6c:44:23:2c:f2:dd:33:
                    1c:54:fc:8e:cd:31:73:29:9b:a4:02:3a:c2:be:d4:
                    19:6d:8a:5e:81:e4:29:10:4d:95:b8:38:72:02:57:
                    76:7b:00:31:dc:b8:49:9b:e8:0c:1c:98:8c:67:62:
                    c9:6d:42:b9:f0:5d:3f:b7:a6:23:6f:d5:27:2d:02:
                    f7:ac:dd:0b:ab:0a:62:62:7f:7c:f0:d4:eb:74:e3:
                    41:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:43:FE:C4:76:BB:23:0E:51:81:62:2D:18:96:16:FD:C4:F3:B1:29
            X509v3 Authority Key Identifier:
                keyid:4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33342e302f32342d3234203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:a6:c4:1d:36:db:7a:57:57:93:df:39:5f:1d:56:bd:2d:f4:
         89:6d:27:38:c8:91:9a:02:0f:f9:99:2f:ad:1d:8a:18:85:8e:
         44:b8:65:d5:76:ac:0c:4d:69:9e:b7:c4:17:55:12:ca:b5:e3:
         58:84:3f:b9:3d:6b:88:ea:ed:bb:b4:df:3e:29:20:b9:73:cc:
         85:53:63:5d:ba:96:65:8c:29:d8:61:e8:6c:25:13:e8:9c:b7:
         36:24:1e:9f:12:ef:fc:e0:a3:c7:d4:a0:da:59:a6:05:3a:3b:
         ce:26:2d:8b:05:eb:4a:db:fa:0b:3c:3a:60:2a:95:e1:33:88:
         92:db:ac:30:92:38:7d:24:f2:fb:77:dd:17:ba:a2:c5:2d:2c:
         cf:33:0f:98:c0:e8:29:87:0e:53:b3:7a:d7:cc:59:71:e5:9b:
         25:d4:a3:06:e9:43:87:ab:51:66:5d:1f:bb:f0:ea:1c:78:ac:
         29:9c:11:bf:d6:0c:1f:26:ff:92:e8:09:21:60:ee:76:10:47:
         4f:6d:10:25:c4:6d:fb:3d:27:c7:75:25:7c:a7:c0:b4:3a:93:
         eb:3f:02:c3:bd:d3:09:23:27:b0:35:c5:df:9f:82:3d:6d:f8:
         58:e8:8b:93:6f:af:83:05:6d:c7:16:ca:ce:67:eb:3e:38:f2:
         5e:89:96:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org