Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/3137372e38342e33382e302f32332d3233203d3e20323632353738.roa
File:                     3137372e38342e33382e302f32332d3233203d3e20323632353738.roa (raw, json)
Hash identifier:          CkBNztJljZVni7SX/thnDPRlf6gJaygQn9+vfi5SP5c=
Subject key identifier:   AE:6D:01:DA:3A:FF:0A:22:32:F0:C7:D3:53:F5:38:32:00:5E:36:C6
Certificate issuer:       /CN=FFF3CD0C3D025669552813E8E441EAA710DE43B2
Certificate serial:       550409557A2E1DFE9FBAF62241A5C2375DFEFD31
Authority key identifier: FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/3137372e38342e33382e302f32332d3233203d3e20323632353738.roa
Signing time:             Thu 04 Apr 2024 22:49:26 +0000
ROA not before:           Thu 04 Apr 2024 22:44:26 +0000
ROA not after:            Thu 03 Apr 2025 22:49:26 +0000
asID:                     262578
IP address blocks:        177.84.38.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:04:09:55:7a:2e:1d:fe:9f:ba:f6:22:41:a5:c2:37:5d:fe:fd:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF3CD0C3D025669552813E8E441EAA710DE43B2
        Validity
            Not Before: Apr  4 22:44:26 2024 GMT
            Not After : Apr  3 22:49:26 2025 GMT
        Subject: CN=AE6D01DA3AFF0A2232F0C7D353F53832005E36C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f2:62:03:0f:7f:01:c9:8b:4b:ca:a5:ef:e3:
                    eb:d9:15:f2:59:72:74:59:1a:70:03:3f:77:56:96:
                    96:72:c3:80:f9:85:f3:8f:ff:4f:a8:4e:69:9a:05:
                    71:88:9f:5e:e4:4e:c6:b0:e1:22:96:18:d9:36:72:
                    0a:9a:17:8e:3c:3a:d5:15:cc:6d:bf:77:da:24:4d:
                    80:a6:04:29:2b:d9:bf:3a:2f:04:8f:2f:ce:bc:97:
                    d7:6d:d4:72:de:db:03:9a:53:cb:5c:3c:83:00:90:
                    28:8d:1e:e0:e0:e3:0f:f9:2a:ab:8e:df:e6:1a:57:
                    bd:fe:3a:2b:e5:30:a6:7e:23:a9:bf:38:3e:7a:0a:
                    f8:2d:40:10:49:4a:1b:7d:95:3b:fa:54:c9:04:d3:
                    17:27:78:a8:71:0e:34:34:02:23:92:98:11:59:a5:
                    a1:4f:95:3c:22:7d:bf:5c:fb:12:c8:64:3b:c7:cb:
                    2f:2d:66:25:41:45:8d:98:ec:83:e3:5f:03:b6:45:
                    7a:75:6b:7b:b8:53:d2:26:f5:c0:bf:11:56:b7:aa:
                    ee:44:5d:41:e8:83:10:c2:27:f4:64:69:49:a2:b4:
                    8d:8a:87:d9:b3:8f:25:b5:32:03:74:0f:6b:94:b7:
                    7a:95:f8:e0:d6:6b:29:f4:3d:96:4f:b5:df:6e:51:
                    40:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6D:01:DA:3A:FF:0A:22:32:F0:C7:D3:53:F5:38:32:00:5E:36:C6
            X509v3 Authority Key Identifier:
                keyid:FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/3137372e38342e33382e302f32332d3233203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:f7:59:6a:38:55:7f:26:32:98:f9:c2:f9:b2:b8:ec:67:f6:
         2e:04:45:fc:e7:3d:9b:e9:fc:df:9e:ba:e3:1d:c4:ad:6a:00:
         9b:8a:75:26:57:36:7f:f6:02:0d:82:70:69:f0:4e:e5:cd:28:
         2e:5c:35:8b:ef:46:31:a0:f6:c4:6e:d5:a7:05:28:90:45:ab:
         a9:a4:88:07:02:8d:24:8b:e5:4f:ab:36:4f:ff:6f:ea:c7:07:
         c9:21:9b:96:6b:a4:d5:5b:14:43:33:6e:df:86:4e:c5:e0:4f:
         95:44:16:17:d4:46:53:69:b7:bc:be:a0:70:4b:fe:64:31:18:
         8e:13:6a:77:b4:d8:9a:9e:17:a7:9c:3d:b9:99:78:0e:25:86:
         47:2b:97:73:f4:57:8d:c8:65:ef:17:18:15:da:ae:99:9d:7c:
         d8:86:0e:1c:40:b6:52:f0:fb:58:30:c5:98:2e:c2:a4:df:d4:
         0b:3b:b0:09:da:a9:15:f8:84:99:6a:2f:62:f4:4f:08:fe:01:
         6e:ab:17:27:0b:fa:78:b4:58:42:57:2d:ef:af:9e:aa:64:72:
         af:7a:20:4a:a0:fb:33:3c:03:df:d5:e5:b2:71:13:3f:fb:b9:
         2a:a4:5f:67:47:5e:50:01:b8:ef:7d:1d:2e:26:5c:c3:07:73:
         90:ec:38:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:42:11 2024 by rpki-client on console-fra.rpki-client.org