Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/3137372e38342e33342e302f32342d3234203d3e20323632353738.roa
File:                     3137372e38342e33342e302f32342d3234203d3e20323632353738.roa (raw, json)
Hash identifier:          rblWS3L/xIxqgXNhKDrRBjU6nQj8GXsGb+9BurM8FDQ=
Subject key identifier:   6E:19:33:8B:10:D9:C0:7C:9B:76:E8:F2:59:FC:1D:4C:2B:8F:EF:62
Certificate issuer:       /CN=FFF3CD0C3D025669552813E8E441EAA710DE43B2
Certificate serial:       51A87E3AA20869BE880C1BDF37AE40F86099A445
Authority key identifier: FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/3137372e38342e33342e302f32342d3234203d3e20323632353738.roa
Signing time:             Thu 04 Apr 2024 22:49:23 +0000
ROA not before:           Thu 04 Apr 2024 22:44:23 +0000
ROA not after:            Thu 03 Apr 2025 22:49:23 +0000
asID:                     262578
IP address blocks:        177.84.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a8:7e:3a:a2:08:69:be:88:0c:1b:df:37:ae:40:f8:60:99:a4:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF3CD0C3D025669552813E8E441EAA710DE43B2
        Validity
            Not Before: Apr  4 22:44:23 2024 GMT
            Not After : Apr  3 22:49:23 2025 GMT
        Subject: CN=6E19338B10D9C07C9B76E8F259FC1D4C2B8FEF62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:30:7f:14:84:b7:c4:3b:c5:c1:51:9f:f1:7d:
                    53:a3:79:0f:c1:0d:71:ea:cb:15:8c:74:73:48:b4:
                    ca:06:cb:cb:82:0e:34:bd:cd:9c:c9:8c:fe:16:cb:
                    5f:b0:51:01:e8:c5:f6:f1:97:e3:51:6c:55:d7:73:
                    28:68:50:a4:a7:1d:68:2d:89:3d:87:c0:49:cf:13:
                    58:da:0b:2a:dc:84:62:54:85:a3:e6:79:48:ae:cd:
                    9b:25:02:d6:f5:e8:8b:43:33:ef:ef:c6:e6:c8:4a:
                    b0:08:7b:16:9f:6e:db:10:f0:03:ef:9a:5f:38:d0:
                    f0:10:56:9e:53:87:a9:c0:b2:5b:6a:cc:de:fd:5f:
                    9a:a3:94:4c:84:48:4e:7f:b4:2d:78:28:ea:ca:f5:
                    c9:b7:16:03:8e:d1:97:87:b4:9b:66:8a:69:9d:c6:
                    b3:c5:ed:8e:33:ed:c2:27:da:fc:58:31:63:7d:6d:
                    e7:01:77:18:af:0a:e2:e1:0a:13:f6:b4:d8:f1:fc:
                    3b:d2:3d:b3:bf:1e:47:af:5c:f3:c5:fd:f2:6f:38:
                    43:21:da:dc:c0:87:ce:2e:ba:02:c6:3c:d4:6c:8e:
                    4b:d8:5d:25:ed:11:74:8a:83:71:e9:98:ca:98:65:
                    1e:d3:ea:43:e8:e2:8e:2d:24:d6:7c:22:3f:fa:84:
                    e6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:19:33:8B:10:D9:C0:7C:9B:76:E8:F2:59:FC:1D:4C:2B:8F:EF:62
            X509v3 Authority Key Identifier:
                keyid:FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/3137372e38342e33342e302f32342d3234203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:1d:3b:b4:fc:f0:45:67:9c:b7:07:be:8c:df:32:69:be:51:
         f7:3c:63:fa:b7:ce:d2:38:09:fc:d3:56:37:29:67:9a:3e:6e:
         47:64:38:4a:8f:b8:f5:fd:ae:35:0e:4b:81:ce:a1:84:84:ba:
         bf:35:f0:5b:e9:f7:0d:fd:f0:4f:42:80:41:95:d8:2c:66:b9:
         61:07:d2:f5:2f:e5:a4:03:90:9a:a8:8f:bf:41:b2:18:b6:38:
         b1:5c:71:36:3c:d6:ec:3a:bd:64:cb:b5:ed:8c:d7:4b:41:0c:
         ae:30:cd:61:0b:63:fb:ac:be:17:16:68:a9:33:22:8c:4b:18:
         55:ae:79:af:9d:5c:6b:f0:0b:d0:96:0d:b1:7e:40:b4:01:2a:
         ae:42:99:21:a5:3d:25:f0:dc:4e:a6:3a:12:2a:c8:e1:80:ee:
         3d:da:b8:51:aa:02:a2:83:f6:9f:92:5a:01:cb:c6:fc:ec:0b:
         9e:af:56:04:81:f0:0f:c6:86:85:a9:13:26:86:60:96:fa:26:
         21:9c:16:bd:81:cf:eb:73:cf:a9:de:b2:33:c7:3b:60:93:6a:
         7e:09:b4:57:72:a0:77:92:78:fc:5b:5c:9b:19:a6:f3:cb:c1:
         3a:86:b0:a6:21:b7:ba:75:6c:7d:a2:a9:bf:20:00:b7:c8:ed:
         ce:17:cb:39
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUah+OqIIab6IDBvfN65A+GCZpEUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZGM0NEMEMzRDAyNTY2OTU1MjgxM0U4RTQ0MUVBQTcx
MERFNDNCMjAeFw0yNDA0MDQyMjQ0MjNaFw0yNTA0MDMyMjQ5MjNaMDMxMTAvBgNV
BAMTKDZFMTkzMzhCMTBEOUMwN0M5Qjc2RThGMjU5RkMxRDRDMkI4RkVGNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmMH8UhLfEO8XBUZ/xfVOjeQ/B
DXHqyxWMdHNItMoGy8uCDjS9zZzJjP4Wy1+wUQHoxfbxl+NRbFXXcyhoUKSnHWgt
iT2HwEnPE1jaCyrchGJUhaPmeUiuzZslAtb16ItDM+/vxubISrAIexafbtsQ8APv
ml840PAQVp5Th6nAsltqzN79X5qjlEyESE5/tC14KOrK9cm3FgOO0ZeHtJtmimmd
xrPF7Y4z7cIn2vxYMWN9becBdxivCuLhChP2tNjx/DvSPbO/HkevXPPF/fJvOEMh
2tzAh84uugLGPNRsjkvYXSXtEXSKg3HpmMqYZR7T6kPo4o4tJNZ8Ij/6hOZlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbhkzixDZwHybdujyWfwdTCuP72IwHwYDVR0j
BBgwFoAU//PNDD0CVmlVKBPo5EHqpxDeQ7IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmNndlQ5SkU0WndkeE1EWlE4NVNFZm1MSmFzMjVLeUFSVHRCemJNNEw0
QkEvMS9GRkYzQ0QwQzNEMDI1NjY5NTUyODEzRThFNDQxRUFBNzEwREU0M0IyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGRjNDRDBDM0QwMjU2Njk1
NTI4MTNFOEU0NDFFQUE3MTBERTQzQjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JjZ3ZUOUpFNFp3ZHhNRFpRODVTRWZtTEphczI1S3lBUlR0QnpiTTRMNEJBLzEv
MzEzNzM3MmUzODM0MmUzMzM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzUzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsVQiMA0GCSqGSIb3DQEBCwUAA4IBAQBbHTu0/PBF
Z5y3B76M3zJpvlH3PGP6t87SOAn801Y3KWeaPm5HZDhKj7j1/a41DkuBzqGEhLq/
NfBb6fcN/fBPQoBBldgsZrlhB9L1L+WkA5CaqI+/QbIYtjixXHE2PNbsOr1ky7Xt
jNdLQQyuMM1hC2P7rL4XFmipMyKMSxhVrnmvnVxr8AvQlg2xfkC0ASquQpkhpT0l
8NxOpjoSKsjhgO492rhRqgKig/afkloBy8b87Auer1YEgfAPxoaFqRMmhmCW+iYh
nBa9gc/rc8+p3rIzxztgk2p+CbRXcqB3knj8W1ybGabzy8E6hrCmIbe6dWx9oqm/
IAC3yO3OF8s5
-----END CERTIFICATE-----
Generated at Fri Jun 28 21:42:11 2024 by rpki-client on console-fra.rpki-client.org