Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33372e302f32342d3234203d3e20323632353738.roa
File:                     3137372e38342e33372e302f32342d3234203d3e20323632353738.roa (raw, json)
Hash identifier:          Do52LEjUCOvUrjksZTXtUqQwkb1LCAqc+1ZVW3ykMpE=
Subject key identifier:   FB:A9:13:6F:56:3D:47:4C:B0:72:4C:01:D7:12:1F:C5:34:AA:FF:B5
Certificate issuer:       /CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
Certificate serial:       3A83D9188DC950F068390A234D6D7812A1789B59
Authority key identifier: 4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33372e302f32342d3234203d3e20323632353738.roa
Signing time:             Fri 29 Sep 2023 17:12:00 +0000
ROA not before:           Fri 29 Sep 2023 17:07:00 +0000
ROA not after:            Fri 27 Sep 2024 17:12:00 +0000
asID:                     262578
IP address blocks:        177.84.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:83:d9:18:8d:c9:50:f0:68:39:0a:23:4d:6d:78:12:a1:78:9b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
        Validity
            Not Before: Sep 29 17:07:00 2023 GMT
            Not After : Sep 27 17:12:00 2024 GMT
        Subject: CN=FBA9136F563D474CB0724C01D7121FC534AAFFB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:39:b4:ea:a6:2a:b7:d2:75:f7:6d:fa:64:01:
                    b6:c2:09:c9:fb:ef:74:67:53:41:cf:fc:e8:eb:e0:
                    b7:dc:2a:e6:ed:2c:50:24:fb:a8:f4:de:02:41:a7:
                    69:b7:81:91:b4:3b:67:99:32:b8:f3:5e:a6:d4:c1:
                    3c:58:d7:8e:55:af:d0:52:2c:a5:15:e0:4f:8d:b7:
                    4e:6f:7a:f9:61:cc:ff:76:be:a0:33:cf:1d:82:7d:
                    89:9d:da:b6:2d:69:35:4a:97:6a:64:07:bc:a6:dd:
                    96:d6:14:09:d3:87:ec:d9:29:75:60:68:0a:0d:3b:
                    3d:bf:95:e2:a8:3f:4a:12:9a:14:ea:47:3c:b9:3a:
                    86:27:b4:c4:55:3f:8b:ab:38:1a:b7:3d:c0:27:4c:
                    d6:2f:23:27:b5:90:da:63:ee:c5:77:10:63:dd:f1:
                    52:7b:53:09:95:9a:bc:03:94:d6:e7:c4:83:b8:74:
                    b1:73:37:00:23:42:18:7a:9e:cf:3d:22:5b:1c:fc:
                    f5:aa:58:07:55:55:fb:03:62:e2:09:d7:40:ee:ed:
                    30:de:3d:df:54:c4:3b:b6:e7:c9:a6:6c:ac:59:34:
                    52:0c:12:9e:60:eb:ad:50:89:49:44:23:bc:d0:7a:
                    15:a0:75:39:a5:0e:c6:7b:13:e6:51:12:9f:0f:7f:
                    da:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A9:13:6F:56:3D:47:4C:B0:72:4C:01:D7:12:1F:C5:34:AA:FF:B5
            X509v3 Authority Key Identifier:
                keyid:4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33372e302f32342d3234203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:3c:dd:3e:50:5d:50:6f:c1:01:aa:67:2d:53:8b:82:89:c3:
         45:d2:ec:6b:3e:3f:3e:ec:95:c5:c6:64:29:01:27:82:94:dd:
         3f:b7:64:54:88:3a:b9:ca:3d:41:41:c7:e7:43:39:2b:4b:6b:
         ab:1c:2b:3c:1d:5f:fd:c0:26:8b:59:76:56:98:92:92:1c:58:
         b4:3a:65:de:57:8d:cd:32:f5:49:14:7d:75:a4:9d:52:3e:ce:
         c1:32:f1:9f:ab:ad:bb:2a:02:cf:48:79:5e:e6:b9:ca:7d:a3:
         ad:22:9a:a9:25:b3:8a:1f:20:16:dc:f2:61:07:d8:ff:21:bc:
         a7:b2:98:33:70:0f:a9:8f:dd:21:fd:a0:3a:b6:09:6b:7b:bc:
         e6:6a:d9:5a:e0:f1:5f:67:ac:ff:73:4a:3a:53:b8:6f:ae:df:
         b7:c2:88:fb:08:09:2a:53:1f:60:38:4b:ec:02:d7:31:e4:e6:
         77:38:f1:66:92:61:7c:28:4e:50:a9:b0:6e:3e:6c:2d:dc:03:
         fe:96:1e:6d:60:77:99:63:91:e4:1d:66:b4:26:47:ec:70:a1:
         3c:b8:99:d6:80:08:e7:5b:d3:1b:79:cc:68:c1:5c:78:ec:50:
         24:63:e6:f2:3c:ff:20:95:a4:ab:06:41:3c:23:22:59:dc:c8:
         dd:39:91:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:16 2024 by rpki-client on console-ams.rpki-client.org