Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33382e302f32342d3234203d3e20323632353738.roa
File:                     3137372e38342e33382e302f32342d3234203d3e20323632353738.roa (raw, json)
Hash identifier:          q8uqcemcrCZ2w4U3QeaL9d38KmnjtVRst4KGrspNRoo=
Subject key identifier:   BA:1E:7B:59:46:04:04:7A:E0:F5:23:1D:54:98:26:68:B2:86:7F:05
Certificate issuer:       /CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
Certificate serial:       3EAB86850A932C0B14EF715C5FD6886CE5EE708D
Authority key identifier: 4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33382e302f32342d3234203d3e20323632353738.roa
Signing time:             Sat 02 Sep 2023 13:30:07 +0000
ROA not before:           Sat 02 Sep 2023 13:25:07 +0000
ROA not after:            Sat 31 Aug 2024 13:30:07 +0000
asID:                     262578
IP address blocks:        177.84.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ab:86:85:0a:93:2c:0b:14:ef:71:5c:5f:d6:88:6c:e5:ee:70:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
        Validity
            Not Before: Sep  2 13:25:07 2023 GMT
            Not After : Aug 31 13:30:07 2024 GMT
        Subject: CN=BA1E7B594604047AE0F5231D54982668B2867F05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:aa:ad:31:73:b4:9d:6c:f9:a3:16:1f:d6:83:
                    aa:ab:2a:b8:09:40:4d:3a:8b:27:7a:fd:ba:4c:c1:
                    a5:6b:5a:1c:a3:39:c0:19:b9:c9:69:d3:f0:43:76:
                    d6:7c:bf:e2:8a:cd:0f:c3:30:68:fc:43:08:5d:b0:
                    de:f6:52:54:1f:a8:5e:9c:51:aa:57:68:1d:f7:a2:
                    81:6c:9d:8c:63:03:1c:cc:35:87:33:7b:99:70:27:
                    76:59:46:16:37:2b:f4:24:65:4c:ff:a7:14:5a:cf:
                    1d:cb:9c:d4:20:0e:08:d4:85:a8:b0:d9:68:06:54:
                    44:53:97:09:be:e0:b1:99:cc:e9:01:eb:5b:77:6a:
                    18:5d:d5:1a:e7:d0:16:01:04:8a:6e:65:92:ab:b2:
                    96:79:f1:76:73:c1:10:bd:48:92:bf:b6:ef:04:4e:
                    62:c2:fa:02:9a:d1:52:fc:f1:60:b6:99:6f:c0:a3:
                    ce:e5:61:c6:79:9f:c0:44:dd:94:df:c4:de:7a:65:
                    35:8a:0d:9f:06:56:69:34:2a:57:e7:ad:ee:8c:1a:
                    b5:0a:6f:52:ae:52:79:e4:19:3f:b6:68:53:e4:0d:
                    49:e5:5e:40:78:1c:fa:8c:30:52:23:f0:34:81:54:
                    9a:53:e9:82:3c:3d:c2:1c:60:18:e6:15:5a:75:37:
                    59:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1E:7B:59:46:04:04:7A:E0:F5:23:1D:54:98:26:68:B2:86:7F:05
            X509v3 Authority Key Identifier:
                keyid:4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33382e302f32342d3234203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:19:1b:f9:4b:66:cb:26:25:68:79:14:60:a1:d8:8a:9c:89:
         77:af:bc:5a:15:fc:30:5e:b7:38:b0:16:59:75:00:6c:48:71:
         f4:49:e1:6e:44:e0:bd:11:60:ff:7b:16:3d:2a:e7:7b:ae:ba:
         69:e5:7c:ac:b6:2a:85:75:6c:33:34:79:78:8a:f6:56:d4:1f:
         3e:1b:76:95:ae:f7:53:3c:52:86:85:25:c0:27:d0:22:d7:c9:
         3a:64:d7:eb:f9:93:f6:71:27:88:70:29:c2:88:80:7d:ab:07:
         63:84:b2:40:de:b5:25:30:ed:3f:fa:ab:60:93:a2:e7:dd:0b:
         13:2b:52:0f:61:e1:d3:74:c1:12:fb:26:c5:0e:85:30:b6:49:
         88:2b:60:ad:27:f3:03:e3:50:fe:06:33:8a:21:dc:47:14:23:
         c1:28:2b:18:3f:a3:75:ca:38:78:76:13:05:b6:49:0c:c2:d7:
         6a:cd:5a:44:52:39:e7:9e:be:4f:93:68:12:54:b1:ad:db:62:
         8d:2f:fd:e4:64:ef:7b:b5:fb:0c:45:20:ce:b5:0e:e5:9a:a0:
         dd:c8:52:a7:10:f4:70:9e:65:a4:30:4d:8d:4f:bc:66:74:d7:
         8c:f8:b0:59:90:bd:28:44:3f:ee:e0:4a:8a:b1:94:6f:49:1e:
         07:cc:7a:17
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPquGhQqTLAsU73FcX9aIbOXucI0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEVBNkUwRjg4MjVDMTY4OEM5MTU3MkM4MUMxN0YxRTkz
NUMzNTNEODAeFw0yMzA5MDIxMzI1MDdaFw0yNDA4MzExMzMwMDdaMDMxMTAvBgNV
BAMTKEJBMUU3QjU5NDYwNDA0N0FFMEY1MjMxRDU0OTgyNjY4QjI4NjdGMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeqq0xc7SdbPmjFh/Wg6qrKrgJ
QE06iyd6/bpMwaVrWhyjOcAZuclp0/BDdtZ8v+KKzQ/DMGj8QwhdsN72UlQfqF6c
UapXaB33ooFsnYxjAxzMNYcze5lwJ3ZZRhY3K/QkZUz/pxRazx3LnNQgDgjUhaiw
2WgGVERTlwm+4LGZzOkB61t3ahhd1Rrn0BYBBIpuZZKrspZ58XZzwRC9SJK/tu8E
TmLC+gKa0VL88WC2mW/Ao87lYcZ5n8BE3ZTfxN56ZTWKDZ8GVmk0Klfnre6MGrUK
b1KuUnnkGT+2aFPkDUnlXkB4HPqMMFIj8DSBVJpT6YI8PcIcYBjmFVp1N1lzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUuh57WUYEBHrg9SMdVJgmaLKGfwUwHwYDVR0j
BBgwFoAUTqbg+IJcFojJFXLIHBfx6TXDU9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmNndlQ5SkU0WndkeE1EWlE4NVNFZm1MSmFzMjVLeUFSVHRCemJNNEw0
QkEvMC80RUE2RTBGODgyNUMxNjg4QzkxNTcyQzgxQzE3RjFFOTM1QzM1M0Q4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRFQTZFMEY4ODI1QzE2ODhD
OTE1NzJDODFDMTdGMUU5MzVDMzUzRDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JjZ3ZUOUpFNFp3ZHhNRFpRODVTRWZtTEphczI1S3lBUlR0QnpiTTRMNEJBLzAv
MzEzNzM3MmUzODM0MmUzMzM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzUzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsVQmMA0GCSqGSIb3DQEBCwUAA4IBAQCqGRv5S2bL
JiVoeRRgodiKnIl3r7xaFfwwXrc4sBZZdQBsSHH0SeFuROC9EWD/exY9Kud7rrpp
5XystiqFdWwzNHl4ivZW1B8+G3aVrvdTPFKGhSXAJ9Ai18k6ZNfr+ZP2cSeIcCnC
iIB9qwdjhLJA3rUlMO0/+qtgk6Ln3QsTK1IPYeHTdMES+ybFDoUwtkmIK2CtJ/MD
41D+BjOKIdxHFCPBKCsYP6N1yjh4dhMFtkkMwtdqzVpEUjnnnr5Pk2gSVLGt22KN
L/3kZO97tfsMRSDOtQ7lmqDdyFKnEPRwnmWkME2NT7xmdNeM+LBZkL0oRD/u4EqK
sZRvSR4HzHoX
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:16 2024 by rpki-client on console-ams.rpki-client.org