Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/3137372e38342e33322e302f32322d3232203d3e20323632353738.roa
File:                     3137372e38342e33322e302f32322d3232203d3e20323632353738.roa (raw, json)
Hash identifier:          FBPnJCepPmsuXd+hkyYr73HY6W4PEE4wSh53//PD0Ac=
Subject key identifier:   2E:09:CC:CB:F1:55:C7:CC:39:BF:E5:26:1E:C2:11:08:FE:FF:EE:D8
Certificate issuer:       /CN=FFF3CD0C3D025669552813E8E441EAA710DE43B2
Certificate serial:       1F09712B3C2908DAF151A742588E659E883735F8
Authority key identifier: FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/3137372e38342e33322e302f32322d3232203d3e20323632353738.roa
Signing time:             Thu 04 Apr 2024 22:49:22 +0000
ROA not before:           Thu 04 Apr 2024 22:44:22 +0000
ROA not after:            Thu 03 Apr 2025 22:49:22 +0000
asID:                     262578
IP address blocks:        177.84.32.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:09:71:2b:3c:29:08:da:f1:51:a7:42:58:8e:65:9e:88:37:35:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF3CD0C3D025669552813E8E441EAA710DE43B2
        Validity
            Not Before: Apr  4 22:44:22 2024 GMT
            Not After : Apr  3 22:49:22 2025 GMT
        Subject: CN=2E09CCCBF155C7CC39BFE5261EC21108FEFFEED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:92:f9:e1:06:19:9c:7f:48:b0:5d:e9:2f:6a:
                    dd:b9:2f:1a:f2:f4:0a:89:e0:2f:2f:30:6a:79:03:
                    ec:ae:5d:77:4c:3a:74:b0:0b:b2:7e:80:c4:c0:13:
                    d0:f4:a2:34:08:04:2f:1a:c5:4a:3e:5d:aa:9e:bb:
                    78:5b:99:3e:e1:5e:02:9c:aa:83:63:ce:92:0d:2d:
                    ef:a2:61:85:d2:ab:1f:38:1e:89:d7:ee:8e:af:89:
                    c3:55:d1:ab:06:c3:17:7f:e5:35:17:cc:71:ee:e7:
                    6d:68:0a:df:ac:d8:ce:33:06:90:be:4f:14:41:66:
                    a1:72:18:b2:c0:1d:8c:2d:20:1c:ff:91:ba:ba:42:
                    ac:9c:a4:63:d8:51:02:d9:a7:92:29:cf:b7:5f:cb:
                    25:d2:ab:a9:01:80:36:0d:23:72:07:16:6e:1e:ad:
                    c3:0a:13:67:15:29:dc:2d:a3:56:51:cf:d3:75:bb:
                    cd:2b:d5:b8:d0:16:f4:0b:65:5a:1b:0e:52:ab:43:
                    7d:06:e8:53:70:c7:fd:38:e2:54:98:33:20:c4:3e:
                    f5:bc:43:fe:55:d6:36:d6:79:cf:ee:64:e5:53:78:
                    fe:c6:d9:a7:d7:e6:5f:76:9a:4a:2b:ab:2d:6a:4b:
                    e3:9c:31:02:f4:94:97:af:61:55:11:93:28:52:89:
                    c8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:09:CC:CB:F1:55:C7:CC:39:BF:E5:26:1E:C2:11:08:FE:FF:EE:D8
            X509v3 Authority Key Identifier:
                keyid:FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/3137372e38342e33322e302f32322d3232203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:02:1f:51:b9:40:4f:81:a1:a5:83:a5:c6:f4:e1:4a:8c:88:
         c4:f5:b0:2e:04:77:d1:1a:5f:89:be:a4:f8:68:0c:91:52:ee:
         5b:1b:da:8f:af:dd:ab:4d:8d:41:73:74:30:20:e0:78:2d:e2:
         32:89:f1:d2:c5:88:ba:63:06:99:dd:e3:e3:8f:87:29:b3:3f:
         45:77:8e:06:84:82:b4:a1:15:02:eb:a7:2e:c5:17:30:18:bd:
         bb:28:09:95:9f:16:42:97:69:8f:6d:e6:97:c2:13:43:3c:2d:
         5f:a1:a3:5e:27:9c:72:42:76:95:36:a9:38:7f:86:c7:e3:cd:
         55:a5:af:ae:1d:b1:da:63:d4:1b:1a:3f:4c:21:76:f8:c2:1d:
         6c:d0:2b:c8:fe:c2:95:13:ab:ab:66:da:b0:fb:ac:aa:34:07:
         91:07:d2:cb:e9:aa:9f:90:0d:6a:84:da:99:8d:4c:98:c2:f4:
         df:fd:d9:26:80:c3:90:ca:fa:8a:48:13:ea:5f:e4:8d:30:bf:
         de:33:3f:14:27:f3:81:54:30:7f:47:7e:0d:93:2b:fb:cc:08:
         45:e4:2d:72:2b:f3:31:58:42:8b:63:7f:9d:aa:a1:d3:30:72:
         69:e5:bc:2a:91:35:7e:7f:97:58:d4:46:e0:6e:9b:00:76:20:
         70:f5:58:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:42:11 2024 by rpki-client on console-fra.rpki-client.org