Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/3137372e38342e33372e302f32342d3234203d3e20323632353738.roa
File:                     3137372e38342e33372e302f32342d3234203d3e20323632353738.roa (raw, json)
Hash identifier:          6yQxZfeQX9SlUl3A9hvBVj274FAVTfO+CWsypRi+GO0=
Subject key identifier:   47:5E:01:6B:60:65:FB:3B:A6:4F:B2:CA:F9:81:46:D3:9F:08:7B:C5
Certificate issuer:       /CN=FFF3CD0C3D025669552813E8E441EAA710DE43B2
Certificate serial:       09245A8893DFBB14822162462BBA5FC79A3E1F42
Authority key identifier: FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/3137372e38342e33372e302f32342d3234203d3e20323632353738.roa
Signing time:             Thu 04 Apr 2024 22:49:26 +0000
ROA not before:           Thu 04 Apr 2024 22:44:26 +0000
ROA not after:            Thu 03 Apr 2025 22:49:26 +0000
asID:                     262578
IP address blocks:        177.84.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:24:5a:88:93:df:bb:14:82:21:62:46:2b:ba:5f:c7:9a:3e:1f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF3CD0C3D025669552813E8E441EAA710DE43B2
        Validity
            Not Before: Apr  4 22:44:26 2024 GMT
            Not After : Apr  3 22:49:26 2025 GMT
        Subject: CN=475E016B6065FB3BA64FB2CAF98146D39F087BC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6b:7f:19:a8:df:ec:16:40:c2:66:79:79:61:
                    b4:52:0c:c0:b6:bf:e7:de:12:51:f1:51:bc:a2:a3:
                    97:ea:4d:f3:ca:7c:c8:1f:93:bf:65:8f:bd:a5:80:
                    3b:8c:1b:1f:c5:0c:06:8b:f4:95:87:35:41:1b:ae:
                    ed:5d:7d:3b:0d:61:7a:62:b6:7f:d2:bf:b4:2e:d7:
                    20:96:ed:b8:d5:c9:24:99:3c:0a:17:16:3d:7a:bc:
                    d9:d8:f0:09:4c:f2:5b:d1:e3:39:a3:0d:02:fe:31:
                    56:14:58:d5:2a:4c:31:69:e5:e0:88:11:5b:ac:e3:
                    af:6f:b8:32:d1:07:74:d9:b0:6b:c0:df:56:0f:04:
                    60:8e:6c:20:09:5e:01:34:ec:0c:2f:fe:82:f6:3c:
                    c3:bc:35:d2:76:42:53:09:3d:92:ee:2a:9e:be:8b:
                    1e:fd:c9:84:13:b2:ad:27:11:83:8f:46:9c:78:83:
                    ba:27:27:b4:ed:e5:07:d7:31:88:c3:9a:53:d0:03:
                    98:53:c7:4e:ff:ea:00:3f:66:3b:6e:c5:1e:34:c3:
                    8c:db:93:68:b8:03:5a:ea:c9:8d:6d:9a:b6:1d:36:
                    3d:ef:af:51:64:97:84:e3:e0:e3:dc:de:b1:b3:10:
                    07:c1:7e:ef:76:7e:ca:50:77:35:5f:67:6d:01:56:
                    12:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5E:01:6B:60:65:FB:3B:A6:4F:B2:CA:F9:81:46:D3:9F:08:7B:C5
            X509v3 Authority Key Identifier:
                keyid:FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/3137372e38342e33372e302f32342d3234203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:af:2e:0e:0d:5a:d5:40:4a:2f:a9:57:91:4a:09:0c:d3:a5:
         f9:3c:85:81:bb:cb:54:98:a2:8b:20:56:5d:9e:51:c5:2d:16:
         c4:91:5a:ab:be:bc:41:23:8e:7e:ee:f0:c9:72:3f:a5:2c:27:
         39:41:46:a7:af:92:35:24:76:35:58:93:b1:d6:3c:f1:40:10:
         f6:ff:68:b6:9b:f3:e4:97:42:19:1e:45:f6:f8:21:da:52:c1:
         7c:74:dd:75:8f:69:96:fe:91:eb:c6:a4:dd:10:89:94:c2:98:
         57:c6:f0:d7:5b:b7:cc:5d:4f:ff:2c:a4:c1:ae:81:e6:0a:82:
         f1:5b:a4:ed:86:ff:34:17:32:43:4c:c7:bc:f2:ee:4a:1c:f1:
         c4:7c:b0:bc:8a:cd:c9:92:41:c3:57:59:08:2d:97:ae:60:bf:
         9a:61:0b:da:cd:e7:7e:3e:e8:09:3c:f3:39:07:d1:3d:42:5f:
         2a:2b:d9:2e:58:7b:43:6e:8a:1c:7f:fc:c9:34:c0:11:29:20:
         3b:ba:4d:86:70:01:f7:5e:1b:67:8d:e8:74:8f:ef:9e:20:8a:
         04:7f:90:b9:fb:f0:4b:dd:10:d6:23:c6:d2:27:b2:52:28:79:
         8d:eb:73:fd:49:51:44:fa:79:c0:da:e2:7b:ee:f5:5b:23:00:
         91:a1:01:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:42:11 2024 by rpki-client on console-fra.rpki-client.org