Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31362e302f32332d3233203d3e203238333630.roa
File:                     3137372e382e31362e302f32332d3233203d3e203238333630.roa (raw, json)
Hash identifier:          wh0QcrwrYiA3RLZXncjJ4u4fifn2t+FvNFfc4h253z8=
Subject key identifier:   4C:FA:A7:1C:DA:54:8C:90:1E:2B:C3:CF:DC:F5:50:79:C8:C2:99:F1
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       2F67A0E290E446BB558A43234B5335F026B37F02
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31362e302f32332d3233203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:46:09 +0000
ROA not before:           Sat 06 Apr 2024 02:41:09 +0000
ROA not after:            Sat 05 Apr 2025 02:46:09 +0000
asID:                     28360
IP address blocks:        177.8.16.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:67:a0:e2:90:e4:46:bb:55:8a:43:23:4b:53:35:f0:26:b3:7f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:41:09 2024 GMT
            Not After : Apr  5 02:46:09 2025 GMT
        Subject: CN=4CFAA71CDA548C901E2BC3CFDCF55079C8C299F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:09:64:82:b1:58:4e:b5:0a:ca:c2:d1:dc:8a:
                    72:3b:1b:0b:77:c5:a5:bf:c4:0d:14:82:f9:26:32:
                    b4:8f:52:ca:a2:bb:42:0b:b3:ff:ad:52:9d:50:39:
                    24:4c:f3:57:b8:50:cf:c6:e5:97:7f:f8:a9:49:d6:
                    c9:7c:cf:90:33:65:3a:74:4c:7c:e5:9d:a1:3f:81:
                    af:d5:8e:a7:f9:cb:20:77:92:9f:62:75:6e:05:2b:
                    d4:b6:a2:62:d2:89:54:32:eb:f4:be:c6:3d:41:d0:
                    a4:60:0c:e6:8b:5f:ae:50:94:0d:c7:1c:1b:97:20:
                    8d:29:f9:d7:b8:84:66:65:db:33:70:ca:14:11:a6:
                    47:8c:ae:1b:7e:f5:67:58:25:26:79:1f:c6:c9:be:
                    1e:67:d5:bc:87:b6:92:86:9b:b4:a6:cc:42:a2:36:
                    47:c2:82:be:7e:68:34:81:99:2d:63:c1:9e:e4:df:
                    dd:8b:51:3e:53:74:4e:75:26:ec:30:41:80:28:ae:
                    c7:c7:ec:d5:02:e4:32:04:b8:63:57:b8:60:8d:42:
                    73:fb:d9:1d:88:b1:ac:b4:d8:0e:6c:9b:a8:3f:bb:
                    7e:f7:60:12:b6:08:b1:dd:fb:a1:87:a6:ed:6c:be:
                    8b:8c:c6:a8:e0:14:85:e9:7e:38:4e:c1:ae:fe:25:
                    65:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FA:A7:1C:DA:54:8C:90:1E:2B:C3:CF:DC:F5:50:79:C8:C2:99:F1
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31362e302f32332d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:5a:31:28:c3:29:fd:4a:40:96:1f:f5:b8:2d:0b:6d:76:7e:
         76:3d:24:1e:c6:24:ef:b3:84:ca:50:44:73:f4:f6:ab:19:25:
         a9:c9:fd:44:60:b0:6a:59:73:0a:74:93:6e:7a:a8:60:98:54:
         b0:19:b6:0e:80:a8:9a:da:70:c1:ce:15:02:63:c4:29:cf:6d:
         1e:0b:76:98:27:c3:5a:74:98:3c:94:64:73:b5:e2:74:e7:2f:
         5d:c6:ad:2f:90:9a:d9:b1:11:3f:5a:f3:e7:19:04:62:b9:54:
         be:53:82:25:20:60:48:3f:e8:de:27:5e:11:0b:85:01:76:f2:
         d3:03:22:4b:58:46:b3:71:f2:8b:21:0b:96:73:bb:16:f3:93:
         4b:91:9a:20:58:fe:41:15:c5:a3:74:40:28:54:43:4b:43:0b:
         25:a8:6d:4c:34:ef:ff:b8:bd:d5:1c:c7:57:b2:f2:c0:a1:c8:
         6b:9e:de:72:54:fe:01:75:2c:3a:93:dd:14:f3:6f:38:94:7e:
         43:7a:bd:a2:e4:11:a0:57:75:ad:7a:ed:9e:86:c2:94:b6:ed:
         56:90:27:da:96:5a:b1:1b:26:a2:e3:b5:8e:d4:71:fe:54:6f:
         af:37:7b:43:d0:90:08:5a:ea:ef:d5:c4:9b:4b:62:f5:21:4a:
         96:4b:bf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org