Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/3137372e38342e33392e302f32342d3234203d3e20323632353738.roa
File:                     3137372e38342e33392e302f32342d3234203d3e20323632353738.roa (raw, json)
Hash identifier:          4O9ybzfIMXYbebhElFbHzfh2uhD3wYkEj6BSOe1DUGI=
Subject key identifier:   F5:51:4C:6E:50:24:52:AB:68:23:60:7B:17:DB:0E:C3:95:8E:73:CE
Certificate issuer:       /CN=FFF3CD0C3D025669552813E8E441EAA710DE43B2
Certificate serial:       7C19EF13BD40977DC61720FB60599FF422C52437
Authority key identifier: FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/3137372e38342e33392e302f32342d3234203d3e20323632353738.roa
Signing time:             Thu 04 Apr 2024 22:49:22 +0000
ROA not before:           Thu 04 Apr 2024 22:44:22 +0000
ROA not after:            Thu 03 Apr 2025 22:49:22 +0000
asID:                     262578
IP address blocks:        177.84.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:19:ef:13:bd:40:97:7d:c6:17:20:fb:60:59:9f:f4:22:c5:24:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF3CD0C3D025669552813E8E441EAA710DE43B2
        Validity
            Not Before: Apr  4 22:44:22 2024 GMT
            Not After : Apr  3 22:49:22 2025 GMT
        Subject: CN=F5514C6E502452AB6823607B17DB0EC3958E73CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:48:7b:2a:b8:4b:38:a7:89:5c:9a:2c:66:ef:
                    41:5f:46:99:21:d3:94:8a:06:e4:3c:fd:3f:1f:1f:
                    58:18:dd:3c:f1:92:37:6e:66:38:05:8b:f9:e1:ba:
                    c2:23:ae:8e:c0:99:c4:bc:11:58:7e:9f:d1:b3:d2:
                    b6:3e:a2:92:5c:64:cf:98:a9:fc:f1:e4:50:01:bc:
                    b0:56:3b:90:d9:75:f8:51:97:16:bc:9c:04:2f:b8:
                    3b:ba:2b:dc:7a:44:7d:2a:81:34:7b:69:d3:53:35:
                    ba:5b:18:56:97:6e:d3:c4:9f:eb:e0:eb:8a:1c:cf:
                    4b:99:3b:37:52:b1:72:4c:15:77:b2:b2:30:a7:48:
                    b4:98:5d:4e:74:30:b9:e2:c6:6c:c5:64:57:e6:8b:
                    62:38:e3:94:e2:58:07:1c:e5:99:75:9e:07:9a:40:
                    be:17:e3:67:78:ce:28:77:cd:32:9b:e2:c0:b1:da:
                    07:ea:64:34:c6:68:69:02:d7:1b:d0:84:0b:9f:f4:
                    04:fc:5a:51:a5:82:6c:46:15:81:35:40:1b:bd:30:
                    e7:45:2b:eb:23:c0:e2:7c:26:82:34:9a:f3:1b:7c:
                    1d:72:fe:7d:f5:4d:ef:5f:7c:2d:17:49:a1:d6:62:
                    6c:99:c4:a4:96:b4:65:a0:29:f3:b2:b5:57:25:68:
                    a2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:51:4C:6E:50:24:52:AB:68:23:60:7B:17:DB:0E:C3:95:8E:73:CE
            X509v3 Authority Key Identifier:
                keyid:FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/3137372e38342e33392e302f32342d3234203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:b6:19:35:16:74:e4:2d:ba:8a:83:f2:35:f0:67:52:3a:fc:
         d0:ee:5d:62:79:d7:e6:81:6a:f3:ea:2b:69:59:b1:67:77:e5:
         1d:ad:ca:06:b4:e6:49:6a:1c:30:81:74:a0:fa:4c:ad:d7:66:
         a1:a1:4b:fd:67:5d:77:21:d1:df:4a:66:29:32:6f:bc:80:5b:
         51:0c:70:f1:bf:a5:3a:a7:a9:e6:8e:80:05:86:7a:d3:af:9e:
         a2:e8:3c:7c:fc:ff:c2:ce:19:36:5d:a8:b0:98:14:d6:80:4a:
         a3:5d:9b:bc:4b:4e:a6:90:09:b9:81:0a:e9:3d:5a:28:5d:61:
         a3:1b:98:6e:99:45:bd:5e:f7:4f:2c:21:3c:43:74:e9:67:23:
         e5:ac:77:d9:3c:0b:c7:e4:49:98:d7:72:d6:e1:cb:bb:f3:d1:
         c9:a0:2d:9b:e5:14:75:2b:3e:07:b3:9b:d9:3c:91:6d:ce:c9:
         30:80:bf:cf:c2:9c:60:54:82:82:78:ee:17:99:8a:30:6a:04:
         c6:53:c1:50:b6:83:ed:b7:51:cc:16:4e:fc:2a:07:76:51:42:
         0b:5c:a8:8f:02:f0:14:d4:c5:0a:cc:15:59:a4:dd:a7:29:e1:
         35:73:27:c6:7d:d2:1f:22:49:39:c2:fa:d8:8b:35:e8:1d:23:
         2b:a1:28:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 23:10:45 2024 by rpki-client on console-ams.rpki-client.org