Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33362e302f32332d3233203d3e20323632353738.roa
File:                     3137372e38342e33362e302f32332d3233203d3e20323632353738.roa (raw, json)
Hash identifier:          GQuwhb+hKRZceNxpeyya3O+gj7HUQmJNkWo6zmqPhAM=
Subject key identifier:   71:E5:B7:67:EE:85:63:94:A0:9B:29:45:25:B8:B0:22:CF:DE:7F:49
Certificate issuer:       /CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
Certificate serial:       785A3E2328620AC6DCDF5D0EC41D1605C047F2C4
Authority key identifier: 4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33362e302f32332d3233203d3e20323632353738.roa
Signing time:             Wed 23 Aug 2023 15:36:47 +0000
ROA not before:           Wed 23 Aug 2023 15:31:47 +0000
ROA not after:            Wed 21 Aug 2024 15:36:47 +0000
asID:                     262578
IP address blocks:        177.84.36.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:5a:3e:23:28:62:0a:c6:dc:df:5d:0e:c4:1d:16:05:c0:47:f2:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
        Validity
            Not Before: Aug 23 15:31:47 2023 GMT
            Not After : Aug 21 15:36:47 2024 GMT
        Subject: CN=71E5B767EE856394A09B294525B8B022CFDE7F49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:53:e7:46:0a:c4:3e:e9:53:25:ff:4d:02:66:
                    bd:75:43:e4:e0:41:ba:75:2f:39:33:10:f3:31:c5:
                    19:ac:0f:0b:56:82:5a:36:f7:7d:41:44:39:18:ed:
                    bf:28:e6:15:9a:fd:bc:ee:36:e2:54:36:26:4e:40:
                    c7:73:1f:50:64:b6:d6:e9:39:7e:86:5f:dc:f8:fd:
                    f3:28:87:1c:e8:c7:80:ec:0c:b4:e6:bc:3e:12:d9:
                    95:7b:df:fb:ff:26:40:9a:1a:48:be:18:2d:a2:74:
                    8c:0b:23:d4:23:73:e9:0a:b3:a9:a1:42:e0:ed:eb:
                    a7:f5:5c:45:fd:59:4e:e8:3b:11:f0:36:a7:2b:d5:
                    3e:e4:89:10:2f:14:64:3f:73:fa:90:18:54:dc:0d:
                    00:9f:eb:7d:51:7a:b6:94:f8:16:ae:c2:4d:87:75:
                    47:51:54:c4:de:4e:dd:f5:ab:a8:ad:99:89:8f:fc:
                    5d:00:a8:3f:4b:a3:0d:22:b7:ab:f7:63:96:5b:68:
                    f2:42:ab:c5:90:d1:f5:2c:af:31:1c:19:40:c4:1e:
                    52:fb:da:fc:a0:25:31:a1:f2:20:50:a3:17:48:98:
                    55:6d:b7:5f:81:de:9e:8e:52:fe:b5:57:14:df:2a:
                    8f:5e:7e:9d:ea:89:39:ea:ae:58:3c:3a:a0:51:29:
                    55:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E5:B7:67:EE:85:63:94:A0:9B:29:45:25:B8:B0:22:CF:DE:7F:49
            X509v3 Authority Key Identifier:
                keyid:4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33362e302f32332d3233203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:08:e4:5c:70:b8:c2:1e:39:ef:f8:c9:c3:d5:00:aa:50:90:
         f2:f9:e2:1b:78:e6:8f:ce:b9:6b:97:f3:e5:dd:95:5f:dd:e2:
         6a:31:ac:09:af:a5:e5:2c:c5:b5:51:0c:93:39:bf:e1:8e:c4:
         f5:6c:ca:6b:04:7a:6b:58:8c:15:90:be:63:6b:bf:3c:2b:69:
         04:23:6f:35:1e:8d:48:3f:c5:3d:b4:e8:89:a9:79:5e:8a:71:
         7c:d5:a5:8d:4f:26:97:42:db:b0:87:22:4b:a1:65:60:f4:33:
         66:35:30:cf:ca:6d:df:a4:08:4a:01:1e:92:29:85:73:72:8a:
         e4:0d:af:50:83:6e:47:bf:fa:13:cb:01:2e:5d:60:e7:58:8f:
         89:38:86:d4:d2:66:96:e1:1a:e5:c0:63:3e:df:f0:68:76:6c:
         f0:83:0a:97:50:7d:dd:95:ea:61:36:02:d5:78:58:b2:60:c9:
         52:22:bb:3c:1a:b5:77:a1:96:1e:bc:c0:16:c1:04:be:44:f4:
         c2:d8:13:50:e3:20:16:f5:cf:d5:ca:54:b6:81:5c:d4:50:cf:
         49:72:ad:d7:d9:24:96:92:45:5d:f2:45:6b:70:5b:06:dd:7a:
         63:da:47:22:e9:16:5e:e9:e3:b7:4e:ae:13:14:b4:4e:9b:55:
         e8:aa:34:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org