Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/3137372e38342e33382e302f32342d3234203d3e20323632353738.roa
File:                     3137372e38342e33382e302f32342d3234203d3e20323632353738.roa (raw, json)
Hash identifier:          dOrNX8knthL4L9oMMpB9TkbwC6ng0LYKP0xUwJvpD9w=
Subject key identifier:   19:06:A5:68:2D:61:7B:31:28:B7:A9:83:17:00:DD:15:80:71:04:59
Certificate issuer:       /CN=FFF3CD0C3D025669552813E8E441EAA710DE43B2
Certificate serial:       6A34C686A973A50D83371CB25E6A8584613B3787
Authority key identifier: FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/3137372e38342e33382e302f32342d3234203d3e20323632353738.roa
Signing time:             Thu 04 Apr 2024 22:49:25 +0000
ROA not before:           Thu 04 Apr 2024 22:44:25 +0000
ROA not after:            Thu 03 Apr 2025 22:49:25 +0000
asID:                     262578
IP address blocks:        177.84.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:34:c6:86:a9:73:a5:0d:83:37:1c:b2:5e:6a:85:84:61:3b:37:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF3CD0C3D025669552813E8E441EAA710DE43B2
        Validity
            Not Before: Apr  4 22:44:25 2024 GMT
            Not After : Apr  3 22:49:25 2025 GMT
        Subject: CN=1906A5682D617B3128B7A9831700DD1580710459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2a:b1:13:9f:82:98:d8:eb:82:e4:d4:95:6d:
                    5e:17:9a:59:50:7c:3c:b3:f8:84:46:a2:3d:f9:1f:
                    cb:36:57:29:2a:c9:8f:28:40:59:8f:8c:17:ba:84:
                    f1:57:7a:43:44:eb:bd:a3:d5:24:58:69:82:4d:18:
                    10:b0:73:70:ed:dc:34:2c:01:c4:77:d9:ae:7f:a6:
                    2e:23:31:37:54:97:6c:8d:d7:52:65:72:36:47:c4:
                    0f:53:5d:27:64:39:09:cd:f9:a8:68:25:08:8c:91:
                    8f:72:1e:04:1a:93:e9:7e:37:6a:a6:fd:6d:69:d1:
                    77:75:df:25:38:c2:1c:fc:e0:ba:ca:24:05:1e:38:
                    81:9e:6f:22:c6:9e:af:b5:4e:d3:32:dc:f3:b8:a4:
                    d7:8e:fc:25:12:92:5e:3b:9b:bb:b9:65:e8:bb:e8:
                    f5:a4:85:43:23:dc:0c:d5:15:2a:0b:0c:a5:d1:44:
                    56:99:6a:26:1d:53:bd:86:01:8a:54:98:ab:c0:10:
                    d5:6b:0e:53:02:2d:87:8e:35:44:e3:cf:f9:8d:26:
                    ba:ad:1d:3c:4b:ef:f7:51:e3:49:e3:43:19:7f:20:
                    5a:ac:20:81:86:c0:83:f7:3c:e0:8d:7a:fe:9b:50:
                    ff:43:06:2b:60:58:3b:59:91:3b:3f:2d:4c:4f:86:
                    c7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:06:A5:68:2D:61:7B:31:28:B7:A9:83:17:00:DD:15:80:71:04:59
            X509v3 Authority Key Identifier:
                keyid:FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/3137372e38342e33382e302f32342d3234203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:8d:75:77:8d:32:20:4d:b2:b2:59:4d:b4:e2:2a:8a:9e:44:
         9a:39:9b:fb:25:5f:9c:d6:87:3f:17:9f:db:68:d6:1d:e8:1e:
         2c:cf:21:53:a9:43:73:85:7e:80:00:bf:77:17:46:c7:93:88:
         12:ed:81:d9:10:39:15:7f:b1:a3:fa:7b:02:78:dc:64:39:0c:
         9c:e3:44:a5:ab:6b:f9:73:f1:0d:25:bb:7c:0c:81:3c:83:a3:
         f2:ce:21:ef:37:38:b6:7c:d3:b5:1d:cf:67:b8:cd:de:a0:b2:
         df:be:3f:d6:32:78:fc:d7:e5:73:46:ff:ac:5b:88:cc:e5:5a:
         2d:af:22:08:43:84:28:d0:48:cf:7c:1c:68:06:b9:79:62:70:
         33:3a:c1:64:14:2a:15:98:aa:54:88:2c:d5:55:58:89:57:a4:
         da:61:5a:1e:7e:47:56:45:e5:20:eb:70:bb:39:e0:e6:2e:4b:
         cb:cf:0c:03:06:ea:95:97:a6:8c:a8:90:db:9c:83:47:9a:d1:
         17:50:0c:82:b8:e0:4a:4e:ca:81:ca:88:88:19:5d:1b:a5:89:
         90:50:b3:d1:48:36:63:6b:a7:7e:ed:bc:8a:06:65:1b:6d:41:
         73:cf:ee:c4:56:90:43:70:ad:71:05:16:39:fd:1a:19:66:31:
         f8:90:46:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:42:11 2024 by rpki-client on console-fra.rpki-client.org