Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/3137372e38342e33352e302f32342d3234203d3e20323632353738.roa
File:                     3137372e38342e33352e302f32342d3234203d3e20323632353738.roa (raw, json)
Hash identifier:          whbv8XquyJ4MVpIfiDUsLsVZ9eCIBVUH565kO0lFg9E=
Subject key identifier:   FF:20:2E:2B:5A:1E:D2:FE:E1:4F:FC:0C:58:2E:72:D9:E1:96:D9:49
Certificate issuer:       /CN=FFF3CD0C3D025669552813E8E441EAA710DE43B2
Certificate serial:       052928320935FFC1A9948C273CDF58CAE1642D92
Authority key identifier: FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/3137372e38342e33352e302f32342d3234203d3e20323632353738.roa
Signing time:             Thu 04 Apr 2024 22:49:26 +0000
ROA not before:           Thu 04 Apr 2024 22:44:26 +0000
ROA not after:            Thu 03 Apr 2025 22:49:26 +0000
asID:                     262578
IP address blocks:        177.84.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:29:28:32:09:35:ff:c1:a9:94:8c:27:3c:df:58:ca:e1:64:2d:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF3CD0C3D025669552813E8E441EAA710DE43B2
        Validity
            Not Before: Apr  4 22:44:26 2024 GMT
            Not After : Apr  3 22:49:26 2025 GMT
        Subject: CN=FF202E2B5A1ED2FEE14FFC0C582E72D9E196D949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c7:76:71:07:03:ed:0d:c0:d5:50:27:c8:cb:
                    71:fc:b9:42:e5:81:7b:19:51:a8:9d:3e:11:3e:7d:
                    b4:bc:72:88:56:8e:1f:aa:03:cf:1d:84:4c:7d:14:
                    7c:f2:d4:80:c5:d9:93:a9:4d:d4:2e:21:5e:79:6f:
                    95:8b:99:f4:04:ed:e4:14:33:ac:3f:e9:95:1e:86:
                    4a:e8:17:1d:5b:40:45:01:89:94:61:58:61:3f:24:
                    6b:dd:02:8f:73:58:cb:9a:f8:3c:5d:ef:30:bb:c7:
                    fd:0e:27:42:d2:a2:e7:c4:75:9b:38:3f:47:b0:5c:
                    f9:44:cd:47:b2:43:b6:a2:61:ff:43:4b:bb:93:8f:
                    16:19:15:e5:46:c4:01:43:c4:78:fe:db:b2:ae:81:
                    cc:8e:17:cf:f8:38:f0:94:8a:e1:fb:0d:92:36:1e:
                    4f:16:a9:f4:ec:ab:5a:25:85:ef:97:91:3c:fc:60:
                    24:ab:40:96:06:7b:bc:33:28:0f:19:46:b0:68:51:
                    b2:b2:07:f7:b7:61:f3:52:8d:88:cd:39:10:3d:b5:
                    79:85:f9:a4:9d:6a:17:06:cd:70:d9:4e:9c:3a:42:
                    6f:77:c3:44:ad:83:e2:4b:45:79:88:52:3f:97:61:
                    34:8a:70:7c:ec:9f:3f:9e:c5:8a:31:e7:8b:fb:18:
                    a1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:20:2E:2B:5A:1E:D2:FE:E1:4F:FC:0C:58:2E:72:D9:E1:96:D9:49
            X509v3 Authority Key Identifier:
                keyid:FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/3137372e38342e33352e302f32342d3234203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:8b:2a:a7:86:1a:7d:75:4b:89:b0:e2:70:de:fc:54:4b:6c:
         3b:74:3f:ca:0f:37:85:dc:79:8d:84:35:ab:d5:a3:71:24:2c:
         d1:9c:17:40:68:36:78:80:f7:b1:f0:9f:57:2e:86:c9:49:1e:
         f8:ae:cd:26:f2:31:20:c9:3c:e2:7c:1e:40:9b:c0:e2:84:9c:
         61:c8:c7:73:48:ba:bc:ae:24:cf:d9:79:8a:a0:81:fb:53:7b:
         84:0d:af:b6:c5:8c:51:20:44:a3:71:5b:f3:4b:7a:4c:74:ba:
         21:e5:42:df:83:09:3c:40:b8:05:d9:ae:c5:50:82:e7:fa:be:
         28:3c:01:bd:f6:91:ab:36:d6:0f:fe:5e:30:aa:3b:96:46:7a:
         6d:74:67:6b:47:d3:7e:30:bb:69:bd:58:23:bb:a1:93:80:3d:
         c6:ce:1b:cc:c2:8a:bb:42:de:40:df:2f:06:6c:53:ff:66:19:
         d5:2f:ad:98:be:ff:f5:24:c4:c4:0f:1d:ab:c6:b7:f9:63:f4:
         55:57:4a:22:33:71:9c:7a:eb:1e:b5:40:00:87:ef:db:11:19:
         ca:46:6a:c9:34:c7:86:a8:52:23:ee:2a:d2:63:bd:68:83:ab:
         87:54:60:a0:ae:c0:82:2b:80:81:91:81:b2:e5:bc:ea:b9:27:
         17:ac:ff:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 23:10:45 2024 by rpki-client on console-ams.rpki-client.org