Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31382e302f32342d3234203d3e203238333630.roa
File:                     3137372e382e31382e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          ArWyddhxP0NpBEnC2fk7peGOuvQvxVehqH6X7UxJhJs=
Subject key identifier:   D5:23:7E:0A:33:74:9F:17:B1:4F:9E:F6:E4:12:0E:23:BF:EE:F5:D5
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       03E6C75992CB7403E4CE6D06686D4D8DC8D381E8
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31382e302f32342d3234203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:46:04 +0000
ROA not before:           Sat 06 Apr 2024 02:41:04 +0000
ROA not after:            Sat 05 Apr 2025 02:46:04 +0000
asID:                     28360
IP address blocks:        177.8.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e6:c7:59:92:cb:74:03:e4:ce:6d:06:68:6d:4d:8d:c8:d3:81:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:41:04 2024 GMT
            Not After : Apr  5 02:46:04 2025 GMT
        Subject: CN=D5237E0A33749F17B14F9EF6E4120E23BFEEF5D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9c:09:e2:9d:b2:f6:f5:67:7c:da:60:b6:fc:
                    91:fe:6d:f9:a5:99:dc:35:7b:7f:24:05:92:e1:36:
                    b8:f0:ce:8b:43:6f:21:5e:31:dc:5a:8a:eb:80:77:
                    f8:3d:46:aa:84:5a:15:6f:8a:df:33:a7:96:3a:10:
                    ed:a0:ea:f0:3b:8d:01:48:1b:7f:d4:73:b6:64:8c:
                    d1:04:e8:18:cc:73:12:d1:12:24:f2:45:45:34:08:
                    30:d2:e4:65:70:ac:12:fd:da:b4:77:74:46:f6:ef:
                    c2:f8:0c:0e:6d:6c:8e:63:fc:a6:09:09:47:92:18:
                    ea:f2:6a:b4:91:67:05:a0:5a:7e:1d:1a:a8:69:04:
                    e5:9e:b9:64:9b:2f:8d:b2:13:ba:41:72:d9:b7:84:
                    ea:df:a7:e1:cf:32:4f:cd:1a:86:33:eb:7e:40:ea:
                    39:be:87:78:09:13:59:10:07:5c:78:2c:22:4c:a0:
                    83:78:a2:69:1a:8a:29:9d:2d:3f:ab:32:e3:4c:a2:
                    05:54:9a:94:10:91:8e:a3:a4:3f:cf:5f:61:63:67:
                    01:b8:e4:b2:11:e0:c1:b8:cc:4a:03:c9:00:85:ff:
                    55:f7:2b:9f:8d:00:1e:e2:4a:16:65:f1:f4:c0:ad:
                    90:93:09:d8:af:8a:7f:d0:b5:31:7e:98:57:6a:52:
                    1e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:23:7E:0A:33:74:9F:17:B1:4F:9E:F6:E4:12:0E:23:BF:EE:F5:D5
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31382e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:94:53:ec:a9:6d:62:7f:5b:9e:6f:24:7b:ee:3f:33:16:c4:
         02:59:36:85:00:ce:e1:ec:b0:d2:0e:d2:da:f4:61:be:78:75:
         21:47:30:ff:ca:56:b5:32:0c:62:b0:06:1d:58:84:79:a0:36:
         35:17:8c:01:b1:bc:f5:b9:4c:d7:0b:33:b8:9e:6f:92:9a:e5:
         01:04:c8:0c:cb:5d:db:d6:6a:30:5c:c1:d0:4b:a5:fa:07:08:
         19:25:c3:55:bc:ef:07:90:ac:c3:aa:59:73:72:66:20:99:18:
         f6:bc:f9:eb:12:11:20:67:d6:2d:cc:9f:eb:4b:a3:ec:c6:2d:
         8d:94:e5:59:87:f8:7a:4f:1b:06:3f:9f:51:7c:20:91:cd:0c:
         3c:5f:33:e2:c3:d0:97:3a:dc:f3:11:b0:fd:dd:41:8d:ce:ce:
         03:58:85:43:de:1f:f8:ae:fe:32:e0:5d:ae:b6:1e:42:3f:d2:
         85:70:55:e5:16:e9:cc:bc:ff:32:cf:dd:f8:fe:64:11:c3:41:
         11:94:87:25:a0:f2:63:ef:0f:13:7d:6f:10:0a:8b:d8:4d:86:
         73:69:1e:52:76:85:d7:d5:54:e6:51:45:29:16:0a:0b:82:bb:
         5d:76:8d:e7:f7:0c:93:d4:83:54:0d:16:33:03:92:54:e4:c6:
         11:96:5b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org