Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/3137372e38342e33332e302f32342d3234203d3e20323632353738.roa
File:                     3137372e38342e33332e302f32342d3234203d3e20323632353738.roa (raw, json)
Hash identifier:          /TOThvmWLgbDpvu2EvQT2xysBPVeauw0/SdhuyLbXfQ=
Subject key identifier:   85:A6:AB:F9:4E:7E:37:AB:E6:67:F5:66:E1:FF:F8:79:B5:FB:0B:8A
Certificate issuer:       /CN=FFF3CD0C3D025669552813E8E441EAA710DE43B2
Certificate serial:       1D9D81D14BBF0B4B9A1AEC41DC411D70A3818911
Authority key identifier: FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/3137372e38342e33332e302f32342d3234203d3e20323632353738.roa
Signing time:             Thu 04 Apr 2024 22:49:24 +0000
ROA not before:           Thu 04 Apr 2024 22:44:24 +0000
ROA not after:            Thu 03 Apr 2025 22:49:24 +0000
asID:                     262578
IP address blocks:        177.84.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9d:81:d1:4b:bf:0b:4b:9a:1a:ec:41:dc:41:1d:70:a3:81:89:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF3CD0C3D025669552813E8E441EAA710DE43B2
        Validity
            Not Before: Apr  4 22:44:24 2024 GMT
            Not After : Apr  3 22:49:24 2025 GMT
        Subject: CN=85A6ABF94E7E37ABE667F566E1FFF879B5FB0B8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6e:ff:f4:fb:08:8b:76:6e:df:4a:2d:47:36:
                    a1:1a:08:aa:ed:a8:9e:1c:15:6a:da:d2:d3:f3:ee:
                    34:ff:bb:a6:1d:73:90:26:28:dd:bb:b5:07:8d:1b:
                    12:3f:01:a6:ec:a1:26:e6:b8:e6:2c:13:0f:db:72:
                    93:d9:c7:96:c2:77:e7:14:47:8c:35:c0:e6:2e:ed:
                    9f:ea:49:1c:08:c8:1a:82:b6:a6:00:db:93:78:d0:
                    79:06:80:fd:68:78:20:15:3f:ed:c8:e4:69:ec:56:
                    f0:ea:ad:5d:38:bf:1e:76:da:c6:d0:9b:2d:d8:cd:
                    db:01:cf:8f:a9:0f:90:77:ad:85:74:bd:78:da:4c:
                    78:09:cc:3a:c0:29:46:07:05:e9:8a:ab:4a:6f:a5:
                    41:b3:51:4c:0d:dc:d1:0f:be:11:53:46:39:14:17:
                    d3:4f:50:26:eb:fc:d1:12:cb:e5:46:6b:7f:a3:51:
                    b0:ce:cb:d8:25:a5:39:b0:d3:e5:88:5e:3d:e4:86:
                    91:1c:d5:18:da:96:34:a2:a3:46:1e:4f:98:da:ca:
                    64:9b:41:29:6b:42:c9:7b:c9:e1:c7:5f:bb:b8:5d:
                    3b:91:bb:f3:5d:98:56:49:3e:d9:1f:02:d0:65:82:
                    07:bd:55:a7:fc:d3:a9:0d:c1:5f:e6:a2:07:86:92:
                    45:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A6:AB:F9:4E:7E:37:AB:E6:67:F5:66:E1:FF:F8:79:B5:FB:0B:8A
            X509v3 Authority Key Identifier:
                keyid:FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/3137372e38342e33332e302f32342d3234203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:56:54:ed:99:2e:1f:d1:e1:ae:91:96:0e:b2:80:90:bd:20:
         33:3f:a5:9c:e1:26:0c:1c:b0:71:1e:12:f6:e8:3a:4a:fc:b1:
         35:8f:36:97:39:8d:fb:c2:aa:79:38:c6:fe:67:9f:f9:87:a2:
         aa:23:45:28:37:01:5a:4a:b6:70:2e:b8:64:ec:31:33:8a:16:
         bd:4a:fe:54:44:e5:a9:3c:f5:74:cf:55:b8:c9:9c:81:1f:cd:
         5e:d3:59:e5:11:c6:33:08:f0:22:ca:a8:7e:54:18:f9:e1:5c:
         18:25:32:78:98:bb:bf:84:a7:5e:be:b2:2c:fb:8b:f7:3c:5d:
         52:d0:f7:6d:7c:74:f9:b6:a5:43:40:e8:82:be:22:8b:16:d0:
         96:c2:35:d5:61:57:77:bc:96:75:69:b4:e2:a4:3c:5a:70:1f:
         d6:91:81:6a:2e:d8:68:a0:c5:18:fe:92:73:ff:79:e3:ff:17:
         4e:33:02:81:93:42:e9:2d:76:ce:09:07:17:0a:51:fe:87:35:
         b1:05:2f:1c:62:cf:95:4d:6f:31:48:ae:00:96:4e:5b:ce:e1:
         e7:79:0c:b6:f7:91:ba:ef:26:d4:4b:36:88:44:b2:31:c8:7e:
         c3:85:ae:d8:55:cb:a0:06:ab:c7:a3:13:2e:e9:d9:ff:32:33:
         2e:69:b8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:42:11 2024 by rpki-client on console-fra.rpki-client.org