Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e302e302f32302d3234203d3e203238333630.roa
File:                     3137372e382e302e302f32302d3234203d3e203238333630.roa (raw, json)
Hash identifier:          0XLPZCAqojJAXzKUXTpYG2wd4z3Fw6+9MlTQW2En1oo=
Subject key identifier:   8F:23:E0:B8:18:C5:BA:EB:25:F7:EE:8C:22:F3:0A:5F:64:88:9D:B9
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       6302E29364FF8A15DBAC7A52907F3ACC710D23C1
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e302e302f32302d3234203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:25 +0000
ROA not before:           Sat 06 Apr 2024 02:40:25 +0000
ROA not after:            Sat 05 Apr 2025 02:45:25 +0000
asID:                     28360
IP address blocks:        177.8.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:02:e2:93:64:ff:8a:15:db:ac:7a:52:90:7f:3a:cc:71:0d:23:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:25 2024 GMT
            Not After : Apr  5 02:45:25 2025 GMT
        Subject: CN=8F23E0B818C5BAEB25F7EE8C22F30A5F64889DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:23:94:9c:9d:a5:13:4c:e4:91:32:03:f1:1b:
                    fe:8c:44:30:7b:b0:47:1d:42:f4:e6:44:80:d3:df:
                    e5:86:fb:59:5c:5a:e1:ef:f1:9f:67:b6:5b:7d:84:
                    6b:33:c1:af:ab:8b:ac:f1:80:c4:31:69:d2:23:f0:
                    15:86:38:47:20:a5:0e:b2:63:9d:3c:ba:6e:ce:00:
                    87:5f:4a:ae:5c:bf:25:8b:6a:b5:3a:eb:83:30:d8:
                    ae:fa:0c:a9:e3:50:e2:d8:c8:a1:79:37:08:de:db:
                    9b:f6:3b:38:47:62:67:bb:3f:70:ce:eb:96:fa:5f:
                    1e:3b:0e:71:f8:d7:27:23:66:83:58:56:4a:62:09:
                    69:e6:36:96:09:24:c2:5d:0a:5f:e3:7b:0d:8d:a9:
                    11:6d:de:b5:1c:05:7b:62:95:70:19:b4:73:cc:12:
                    82:62:d4:b4:77:d0:21:6c:81:37:8e:28:42:e2:46:
                    6c:15:5a:69:cd:9f:f9:90:3f:d1:ce:34:72:09:8c:
                    7b:03:b4:e2:8c:8d:32:03:a4:a0:9f:54:ff:c5:74:
                    d2:d8:9b:e5:ed:52:4a:96:90:0d:36:2e:8c:e6:d0:
                    aa:8e:4d:63:07:81:90:d9:49:60:53:5b:6d:07:84:
                    94:c6:2a:6e:c5:0b:f7:cc:ab:b4:62:80:87:34:75:
                    d0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:23:E0:B8:18:C5:BA:EB:25:F7:EE:8C:22:F3:0A:5F:64:88:9D:B9
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e302e302f32302d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         27:e2:3c:fd:67:ef:1f:26:58:31:f6:1e:d0:86:0e:1a:00:59:
         df:01:85:b6:5a:ab:e8:0b:d3:7c:d5:98:ca:0e:36:c9:53:ce:
         08:63:06:3f:9d:d9:da:e4:0b:77:78:0a:59:7f:4b:cb:04:63:
         27:32:8b:e2:76:76:2b:4d:e0:1a:ac:1a:a7:18:5c:5a:ae:fb:
         2c:38:9c:52:9e:68:c8:a0:f3:cd:1d:d9:30:18:9c:16:c8:c2:
         cd:df:be:b7:b4:ac:a6:7c:33:73:a1:01:95:77:91:b6:7a:65:
         55:ec:ed:83:10:07:10:d7:68:a5:c2:d5:f0:d6:f7:7d:3f:9e:
         49:2a:0f:ab:c3:78:30:25:67:44:d5:22:98:5c:65:c9:2c:f4:
         8b:a7:2b:e0:59:c5:e4:fe:c3:22:5e:d8:df:5c:80:02:2f:ef:
         7a:40:3a:af:0e:81:2b:67:62:01:7a:39:56:87:3b:7e:f2:6c:
         23:15:d6:54:79:f1:49:3b:aa:5f:84:68:61:1f:cf:23:eb:3d:
         75:b8:bf:6d:08:ce:e0:46:18:93:f7:7a:ff:00:6d:8b:2d:28:
         c5:0c:32:9d:8e:97:2a:38:1c:9d:63:8e:cc:13:0e:86:77:05:
         87:b3:e5:9d:a6:8c:2d:11:e9:db:3a:22:7b:e1:a5:27:89:6c:
         c9:4a:57:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org