Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31362e302f32342d3234203d3e203238333630.roa
File:                     3137372e382e31362e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          qHydM7PFpZW/871H6mSiykNaEN47jhkYTTJMMPSN35o=
Subject key identifier:   68:87:9D:B0:00:DE:46:2E:6D:69:6F:90:DA:70:81:6F:80:54:52:CA
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       4A2444B69BD416DB24168B33EECAE91906BED966
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31362e302f32342d3234203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:43 +0000
ROA not before:           Sat 06 Apr 2024 02:40:43 +0000
ROA not after:            Sat 05 Apr 2025 02:45:43 +0000
asID:                     28360
IP address blocks:        177.8.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:24:44:b6:9b:d4:16:db:24:16:8b:33:ee:ca:e9:19:06:be:d9:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:43 2024 GMT
            Not After : Apr  5 02:45:43 2025 GMT
        Subject: CN=68879DB000DE462E6D696F90DA70816F805452CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9e:6a:dc:d1:3f:e1:0d:b2:ab:77:d2:da:c8:
                    a1:13:da:0f:0b:3c:d9:71:f6:86:48:41:02:33:7d:
                    8a:4b:23:7a:03:c0:03:7b:6e:81:e7:73:07:f9:ab:
                    f2:71:72:c2:a5:cc:23:67:e2:2b:ae:8d:de:8c:8b:
                    6a:8a:46:37:90:fd:50:d5:24:92:7e:31:f6:ba:b0:
                    0b:ab:1b:14:d3:1e:2b:9f:05:41:41:db:68:58:d8:
                    61:05:e9:18:d5:6a:87:e2:a9:45:4d:44:18:39:b5:
                    04:ab:40:c2:b6:25:75:74:a7:93:46:13:f5:94:91:
                    2d:92:b6:14:04:e9:59:64:75:44:bb:59:e0:69:19:
                    3a:9e:6c:7b:b3:e2:ec:b6:c0:64:73:59:99:ff:a1:
                    25:8a:87:a1:1a:fc:9d:6a:b4:96:81:71:e9:5b:b6:
                    ae:0c:bc:5c:a7:ac:98:e8:6a:ad:95:c5:6a:6c:28:
                    e6:46:e0:a3:82:83:2c:4e:d8:bb:c2:13:5f:7a:f3:
                    4b:ab:8b:21:6a:17:e9:da:40:64:75:9c:3e:a4:a1:
                    12:1e:62:a3:ac:37:57:d8:b1:bb:4c:33:30:40:18:
                    90:66:66:14:9c:29:e3:1c:4d:74:21:9b:0f:73:c8:
                    65:ed:d3:17:86:b3:a3:c7:49:e7:9b:19:22:f9:3d:
                    6a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:87:9D:B0:00:DE:46:2E:6D:69:6F:90:DA:70:81:6F:80:54:52:CA
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31362e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:ef:7c:d6:af:2f:c4:3d:9f:3f:57:6a:69:a9:49:3a:48:5e:
         f0:0b:43:d1:09:b6:0b:2a:28:ac:24:88:7e:70:c9:7e:7a:51:
         cb:d7:bd:ea:f6:f1:20:b0:a9:ec:6e:d3:5f:d2:7c:e7:a0:85:
         9a:02:f9:15:a1:31:ff:bf:84:2e:be:fc:76:0d:3d:43:6c:ee:
         23:bf:d7:ad:72:16:ea:f8:98:d4:6d:e7:7f:8e:46:c5:c2:ad:
         3c:f3:92:43:8b:e4:30:36:a3:db:e3:60:d5:14:37:99:b1:a2:
         4e:06:d8:ff:ba:93:ff:70:d9:0b:0f:bd:27:5e:d2:d5:26:5f:
         2c:c7:63:db:5e:0e:58:19:04:21:89:a7:4d:31:7e:53:93:d5:
         7e:bc:76:d5:e0:80:65:59:f9:1d:b5:c3:96:bf:e8:bc:25:71:
         2b:7e:5d:94:80:d8:e3:5f:6a:b9:27:90:25:e0:8f:6c:6e:7a:
         bc:18:0e:39:56:7a:3a:78:43:b2:b9:29:3b:e5:32:8f:0d:d6:
         ff:3d:5f:33:fc:ef:3d:35:7e:22:6d:bf:0d:f6:c9:41:ef:c4:
         aa:bd:41:e3:60:6d:9b:da:ff:83:a5:a5:eb:88:71:ef:9d:3a:
         79:a5:53:52:18:c4:cd:d6:64:7c:06:94:a0:fd:b3:81:4e:79:
         26:76:e5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org