Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33382e302f32332d3233203d3e20323633333237.roa
File:                     3137372e38342e33382e302f32332d3233203d3e20323633333237.roa (raw, json)
Hash identifier:          CwlIRtkuuzss5dcU42+g3i0/83CuO7/r2p0KvvUgJwk=
Subject key identifier:   BC:9F:22:A3:2F:FF:81:E9:18:88:5E:F7:23:07:E4:0E:B1:CE:C1:DD
Certificate issuer:       /CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
Certificate serial:       796513F0AF61BC4313C4D50A9048ED897E179F6D
Authority key identifier: 4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33382e302f32332d3233203d3e20323633333237.roa
Signing time:             Wed 23 Aug 2023 15:37:10 +0000
ROA not before:           Wed 23 Aug 2023 15:32:10 +0000
ROA not after:            Wed 21 Aug 2024 15:37:10 +0000
asID:                     263327
IP address blocks:        177.84.38.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:65:13:f0:af:61:bc:43:13:c4:d5:0a:90:48:ed:89:7e:17:9f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
        Validity
            Not Before: Aug 23 15:32:10 2023 GMT
            Not After : Aug 21 15:37:10 2024 GMT
        Subject: CN=BC9F22A32FFF81E918885EF72307E40EB1CEC1DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8e:89:97:02:c5:63:cd:e9:33:14:b9:50:f1:
                    c8:8b:3f:2b:4c:59:5c:f0:b7:30:a7:d3:17:2f:9d:
                    93:88:69:e2:ab:f2:e4:b1:77:02:3e:aa:bb:9e:d6:
                    bb:6f:6a:96:69:9d:0d:0b:76:61:87:eb:69:e8:a8:
                    cb:c1:f1:55:05:86:23:bc:e9:f2:05:90:7c:6e:ca:
                    9f:b9:f6:c6:1d:32:de:28:0c:39:a0:da:05:2c:31:
                    82:16:58:84:52:3c:ef:58:a8:d5:5d:70:d5:8e:8a:
                    a4:b2:4f:b4:10:9b:e9:a2:a6:d8:93:6f:74:57:57:
                    f6:bf:9b:16:f1:9a:7d:0a:a2:9a:bf:a4:96:ed:6f:
                    82:14:b8:69:24:ad:92:95:03:3a:30:60:3d:6a:08:
                    79:10:8e:2a:6e:9a:4b:3d:56:d2:d5:2b:7c:e1:88:
                    04:12:13:3c:68:4b:40:bb:48:9e:f2:7c:bb:44:21:
                    17:ab:c1:c7:d8:b2:60:d2:64:85:19:f8:69:e1:4b:
                    06:16:71:6a:f0:fc:16:86:39:d7:a8:e4:19:b0:a2:
                    ed:09:56:67:31:f5:68:60:94:99:65:36:27:2f:ea:
                    bf:50:89:6b:82:45:75:d1:7e:20:51:4d:b5:ca:13:
                    95:4b:90:99:40:84:0e:d9:51:e9:dd:13:95:cb:44:
                    c2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9F:22:A3:2F:FF:81:E9:18:88:5E:F7:23:07:E4:0E:B1:CE:C1:DD
            X509v3 Authority Key Identifier:
                keyid:4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33382e302f32332d3233203d3e20323633333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:dd:30:e8:2a:0e:a9:9b:65:f5:4f:ad:21:ed:42:f2:c3:ec:
         60:69:6e:26:d5:fc:d5:08:63:1c:d2:39:83:fb:31:57:4e:64:
         3d:13:9e:2e:cb:d8:9d:e3:6a:38:0f:0f:2c:df:ab:2a:bb:04:
         c3:15:b7:08:b0:3f:5d:a6:e7:73:a2:19:31:a3:18:80:16:63:
         52:4d:e3:74:f8:0b:7b:e8:2b:d1:06:6a:6b:c4:21:6f:2f:7a:
         44:45:da:eb:29:fd:8b:ef:f2:3e:10:57:11:49:c0:bc:93:8f:
         68:d4:16:e7:cd:9a:0f:04:3f:69:b5:1f:20:d4:00:a8:10:83:
         31:3c:a8:fd:2e:33:66:aa:4a:dd:6b:c3:15:2d:bb:fe:b0:a0:
         4a:97:61:10:5e:4e:d5:77:36:07:ff:d7:c7:4a:bf:81:6f:33:
         44:cc:03:cd:a8:f7:a1:5a:1a:27:a5:cf:3c:6e:46:08:3f:5d:
         98:75:10:75:8b:cb:b1:78:24:a9:40:8b:85:9a:74:66:b2:c1:
         0d:f4:d8:1a:a4:95:33:be:44:eb:55:81:d9:67:d5:53:c9:e6:
         ce:8e:07:95:87:c9:69:49:49:37:52:ef:ed:17:b1:29:1e:20:
         15:bd:00:e4:14:0e:65:99:ad:bd:38:94:4e:aa:32:d8:bb:86:
         ca:ba:81:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org