Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FXNC6UKksVJZEPCFUov8SzayG4xJziasFTQizAzCtBaP/0/3137302e38342e3138342e302f32322d3234203d3e20323635303034.roa
File:                     3137302e38342e3138342e302f32322d3234203d3e20323635303034.roa (raw, json)
Hash identifier:          bSK9OlluUrjDf0IFI6xkZ32/43t0eHtRUMpnjZyBBmI=
Subject key identifier:   CB:83:28:7F:D2:F6:2F:9F:70:6F:2A:25:F5:6A:60:CD:5D:3B:64:33
Certificate issuer:       /CN=BB78A453A25C3A7C1029301CA2EABC508A518EAA
Certificate serial:       187954A76843F127CD8E78A79390BA40D9EA671D
Authority key identifier: BB:78:A4:53:A2:5C:3A:7C:10:29:30:1C:A2:EA:BC:50:8A:51:8E:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB78A453A25C3A7C1029301CA2EABC508A518EAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXNC6UKksVJZEPCFUov8SzayG4xJziasFTQizAzCtBaP/0/3137302e38342e3138342e302f32322d3234203d3e20323635303034.roa
Signing time:             Tue 12 Sep 2023 12:34:00 +0000
ROA not before:           Tue 12 Sep 2023 12:29:00 +0000
ROA not after:            Tue 10 Sep 2024 12:34:00 +0000
asID:                     265004
IP address blocks:        170.84.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:79:54:a7:68:43:f1:27:cd:8e:78:a7:93:90:ba:40:d9:ea:67:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB78A453A25C3A7C1029301CA2EABC508A518EAA
        Validity
            Not Before: Sep 12 12:29:00 2023 GMT
            Not After : Sep 10 12:34:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:58:c4:e0:6e:79:6c:75:ee:89:cd:c1:54:19:
                    33:17:14:10:c4:f3:93:af:43:fc:09:5e:bf:dc:f1:
                    0a:4a:a2:03:9a:53:52:31:62:ec:16:6f:5e:41:a4:
                    e1:89:74:01:b5:86:73:02:c8:7a:aa:20:86:88:6a:
                    bc:7d:66:bb:d2:e9:b1:25:05:99:78:52:e0:42:21:
                    c5:f3:83:a5:82:bd:7f:dc:04:29:76:74:df:54:c7:
                    68:e5:35:28:e0:72:3d:96:e7:76:8d:5c:ff:cf:fb:
                    cf:1e:7d:84:16:f5:93:74:f1:c5:6c:a3:46:8d:fa:
                    75:86:f4:54:78:8a:b7:e6:aa:db:93:01:b7:da:61:
                    4c:1e:4a:d4:cf:64:1c:08:70:69:7e:57:19:7f:da:
                    da:d1:24:89:68:49:37:77:ac:27:74:0e:19:3a:79:
                    a7:48:76:16:13:56:3c:16:d7:5b:55:b6:c3:54:ba:
                    8a:f9:9e:a1:12:7a:f6:3d:20:ea:6a:87:10:13:b1:
                    e0:17:f9:06:58:92:fe:ab:e8:ce:5f:a8:b5:90:03:
                    08:69:4f:34:43:cd:ad:97:10:3a:11:7f:d3:48:7e:
                    9f:a2:cb:6a:26:b1:ee:ba:32:28:3e:ac:04:fb:be:
                    27:51:6b:49:65:6d:1a:94:64:fa:4b:db:b7:62:7e:
                    79:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:83:28:7F:D2:F6:2F:9F:70:6F:2A:25:F5:6A:60:CD:5D:3B:64:33
            X509v3 Authority Key Identifier:
                keyid:BB:78:A4:53:A2:5C:3A:7C:10:29:30:1C:A2:EA:BC:50:8A:51:8E:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXNC6UKksVJZEPCFUov8SzayG4xJziasFTQizAzCtBaP/0/BB78A453A25C3A7C1029301CA2EABC508A518EAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB78A453A25C3A7C1029301CA2EABC508A518EAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXNC6UKksVJZEPCFUov8SzayG4xJziasFTQizAzCtBaP/0/3137302e38342e3138342e302f32322d3234203d3e20323635303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:dc:ea:4c:90:16:19:75:f4:ca:bc:dc:08:54:96:82:49:9c:
         54:ee:2b:c1:b5:01:86:72:69:a1:30:eb:c8:3e:1d:87:6d:db:
         6c:b2:27:55:38:aa:44:25:05:e9:f7:2a:79:b5:51:6c:87:78:
         d5:05:bc:fe:1e:f5:20:ba:7d:54:e7:0d:91:d0:fa:73:7e:67:
         67:cf:96:ae:ac:f4:b1:e7:09:f4:be:24:66:ca:e2:ad:c0:06:
         b3:e6:2f:cd:54:6f:54:96:50:ca:81:d7:81:90:6a:8c:ff:b8:
         31:88:f8:87:20:14:2f:ed:d7:9e:bc:10:ca:84:89:7c:88:66:
         54:90:cc:d9:9f:4f:40:62:5a:72:a0:45:af:ad:23:5d:f5:9c:
         6e:4e:31:b0:8b:c9:f4:27:29:8e:34:3c:9c:c2:db:54:51:9d:
         68:c4:e1:91:41:d3:75:24:54:6a:49:52:83:8b:f7:6b:83:4b:
         76:5b:87:2f:73:6b:71:0c:af:fc:1a:0b:5b:69:17:b1:bc:3f:
         0d:d2:96:4a:9a:0e:5e:ad:b8:9c:7d:6a:a6:6f:f0:34:94:aa:
         44:a3:7d:81:fd:9e:bc:3c:38:f8:28:57:ec:1e:c9:1b:68:bd:
         27:fb:5f:e6:cc:78:72:d8:76:0d:72:82:a4:61:67:42:b5:19:
         ed:1c:53:b4
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUGHlUp2hD8SfNjnink5C6QNnqZx0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkI3OEE0NTNBMjVDM0E3QzEwMjkzMDFDQTJFQUJDNTA4
QTUxOEVBQTAeFw0yMzA5MTIxMjI5MDBaFw0yNDA5MTAxMjM0MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUM1OEM0RTA2RTc5NkM3NUVF
ODlDREMxNTQxOTMzMTcxNDEwQzRGMzkzQUY0M0ZDMDk1RUJGRENGMTBBNEFBMjAz
OUE1MzUyMzE2MkVDMTY2RjVFNDFBNEUxODk3NDAxQjU4NjczMDJDODdBQUEyMDg2
ODg2QUJDN0Q2NkJCRDJFOUIxMjUwNTk5Nzg1MkUwNDIyMUM1RjM4M0E1ODJCRDdG
REMwNDI5NzY3NERGNTRDNzY4RTUzNTI4RTA3MjNEOTZFNzc2OEQ1Q0ZGQ0ZGQkNG
MUU3RDg0MTZGNTkzNzRGMUM1NkNBMzQ2OERGQTc1ODZGNDU0Nzg4QUI3RTZBQURC
OTMwMUI3REE2MTRDMUU0QUQ0Q0Y2NDFDMDg3MDY5N0U1NzE5N0ZEQURBRDEyNDg5
Njg0OTM3NzdBQzI3NzQwRTE5M0E3OUE3NDg3NjE2MTM1NjNDMTZENzVCNTVCNkMz
NTRCQThBRjk5RUExMTI3QUY2M0QyMEVBNkE4NzEwMTNCMUUwMTdGOTA2NTg5MkZF
QUJFOENFNUZBOEI1OTAwMzA4Njk0RjM0NDNDREFEOTcxMDNBMTE3RkQzNDg3RTlG
QTJDQjZBMjZCMUVFQkEzMjI4M0VBQzA0RkJCRTI3NTE2QjQ5NjU2RDFBOTQ2NEZB
NEJEQkI3NjI3RTc5RUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArFjE4G55bHXuic3BVBkzFxQQxPOTr0P8CV6/3PEKSqIDmlNSMWLs
Fm9eQaThiXQBtYZzAsh6qiCGiGq8fWa70umxJQWZeFLgQiHF84Olgr1/3AQpdnTf
VMdo5TUo4HI9lud2jVz/z/vPHn2EFvWTdPHFbKNGjfp1hvRUeIq35qrbkwG32mFM
HkrUz2QcCHBpflcZf9ra0SSJaEk3d6wndA4ZOnmnSHYWE1Y8FtdbVbbDVLqK+Z6h
Enr2PSDqaocQE7HgF/kGWJL+q+jOX6i1kAMIaU80Q82tlxA6EX/TSH6fostqJrHu
ujIoPqwE+74nUWtJZW0alGT6S9u3Yn557wIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FMuDKH/S9i+fcG8qJfVqYM1dO2QzMB8GA1UdIwQYMBaAFLt4pFOiXDp8ECkwHKLq
vFCKUY6qMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZYTkM2VUtrc1ZKWkVQ
Q0ZVb3Y4U3pheUc0eEp6aWFzRlRRaXpBekN0QmFQLzAvQkI3OEE0NTNBMjVDM0E3
QzEwMjkzMDFDQTJFQUJDNTA4QTUxOEVBQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CQjc4QTQ1M0EyNUMzQTdDMTAyOTMwMUNBMkVBQkM1MDhBNTE4
RUFBLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GWE5DNlVLa3NWSlpFUENGVW92
OFN6YXlHNHhKemlhc0ZUUWl6QXpDdEJhUC8wLzMxMzczMDJlMzgzNDJlMzEzODM0
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1MzAzMDM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
qlS4MA0GCSqGSIb3DQEBCwUAA4IBAQBi3OpMkBYZdfTKvNwIVJaCSZxU7ivBtQGG
cmmhMOvIPh2HbdtssidVOKpEJQXp9yp5tVFsh3jVBbz+HvUgun1U5w2R0Ppzfmdn
z5aurPSx5wn0viRmyuKtwAaz5i/NVG9UllDKgdeBkGqM/7gxiPiHIBQv7deevBDK
hIl8iGZUkMzZn09AYlpyoEWvrSNd9ZxuTjGwi8n0JymONDycwttUUZ1oxOGRQdN1
JFRqSVKDi/drg0t2W4cvc2txDK/8GgtbaRexvD8N0pZKmg5erbicfWqmb/A0lKpE
o32B/Z68PDj4KFfsHskbaL0n+1/mzHhy2HYNcoKkYWdCtRntHFO0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:06 2024 by rpki-client on console-ams.rpki-client.org