Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31362e302f32302d3234203d3e203238333630.roa
File:                     3137372e382e31362e302f32302d3234203d3e203238333630.roa (raw, json)
Hash identifier:          VrxLoSsbkmfh3zVH9eBHxwqcuac5kC6S5UuWNkn18zE=
Subject key identifier:   75:B3:BC:3B:0E:04:21:9F:36:46:4F:D6:BD:C5:25:9E:64:52:C8:2C
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       387D3201DA366C2B7BE68018ABEE21DFC2F5FD9B
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31362e302f32302d3234203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:55 +0000
ROA not before:           Sat 06 Apr 2024 02:40:55 +0000
ROA not after:            Sat 05 Apr 2025 02:45:55 +0000
asID:                     28360
IP address blocks:        177.8.16.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7d:32:01:da:36:6c:2b:7b:e6:80:18:ab:ee:21:df:c2:f5:fd:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:55 2024 GMT
            Not After : Apr  5 02:45:55 2025 GMT
        Subject: CN=75B3BC3B0E04219F36464FD6BDC5259E6452C82C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4e:fa:88:fb:7c:30:39:fc:16:db:11:c4:4d:
                    ed:86:02:3c:c6:3e:bc:7b:f4:00:23:24:04:02:20:
                    b0:07:71:20:8f:6c:91:c7:97:bd:0d:4e:0d:18:35:
                    c3:31:44:76:a0:d5:49:4a:f5:db:9f:c6:36:e2:ce:
                    61:28:bd:f8:25:1a:ba:13:68:90:00:84:cc:95:8c:
                    21:ff:39:4c:b6:5f:15:a3:f5:3d:46:f6:66:e4:05:
                    ac:23:78:72:f9:d3:82:fb:ac:0e:f9:cd:33:c1:65:
                    03:aa:10:96:8a:b6:1a:0f:16:bd:ae:6b:6f:77:8f:
                    2c:40:a3:cc:3f:45:2b:ef:52:87:90:01:29:ef:2e:
                    e9:06:c0:15:e6:46:74:d6:3b:58:4a:b9:c1:e0:42:
                    6a:79:6b:77:73:cf:51:2c:5a:e3:ec:64:f5:cd:61:
                    bc:ab:47:34:13:96:25:41:a6:be:5e:33:07:c7:67:
                    80:30:55:69:0c:fc:af:62:24:5c:34:12:ca:d6:db:
                    af:c6:07:76:d5:02:75:f2:3c:0a:78:f2:d3:62:6b:
                    2d:7e:f6:d1:08:33:9c:d0:26:6f:5a:55:d5:22:fd:
                    bd:91:f4:8b:45:51:ee:bb:b5:3e:b5:5e:2d:62:93:
                    c9:2f:45:cf:68:9c:88:0b:88:a7:85:c7:21:b4:14:
                    9f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B3:BC:3B:0E:04:21:9F:36:46:4F:D6:BD:C5:25:9E:64:52:C8:2C
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31362e302f32302d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         04:db:d0:ce:a6:b6:8c:9f:50:2d:a9:60:d3:b6:bc:99:5e:b1:
         63:fa:72:b9:16:e0:77:c5:3b:ae:8b:d5:27:01:09:fd:8f:85:
         23:07:99:c4:59:ad:21:85:8c:9f:cc:97:25:c0:e8:b1:ad:57:
         c2:8e:8c:ba:00:a9:a7:87:47:ec:90:5a:18:11:07:43:bb:e9:
         0f:43:e0:59:bf:29:5b:90:56:7c:30:1c:2f:2e:77:fc:7d:0d:
         d5:e8:32:64:71:90:6f:e4:08:a2:d1:c3:46:2a:ef:20:aa:4e:
         93:5b:b4:31:20:02:59:4c:66:82:8b:2c:4b:7d:22:5c:3c:f7:
         66:50:9a:03:77:92:7b:1a:00:65:85:a2:93:21:6c:a5:5d:d7:
         ea:82:5d:55:4e:30:0b:1b:c1:65:0f:7c:64:7f:d4:78:78:29:
         17:2e:b4:6b:d4:bc:62:01:5c:6e:f3:de:31:a2:ea:d2:a2:77:
         fa:f0:14:97:69:0d:a5:4e:6b:4c:7a:89:78:04:a4:50:14:cf:
         d6:fe:d5:93:60:56:48:e9:8f:b9:e0:73:b6:0a:71:d5:92:13:
         31:3a:85:25:ed:d0:49:dc:8c:b9:ae:8e:3a:c5:c6:8e:f0:60:
         43:09:17:c0:18:30:7f:f3:0d:d8:b8:b1:57:17:25:28:e4:ea:
         31:2d:bd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org