Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32302e302f32342d3234203d3e203238333630.roa
File:                     3137372e382e32302e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          UuqWxNA6ahSIqiUFCDHSFCvkqUBleU+ci3OcO7tnDHo=
Subject key identifier:   32:BF:16:24:D2:57:26:E0:B4:E6:D8:21:93:28:5C:2B:5A:FC:83:EB
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       2234C0691C2B7707BA0BC290D4B31838DF21EBD6
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32302e302f32342d3234203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:56 +0000
ROA not before:           Sat 06 Apr 2024 02:40:56 +0000
ROA not after:            Sat 05 Apr 2025 02:45:56 +0000
asID:                     28360
IP address blocks:        177.8.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:34:c0:69:1c:2b:77:07:ba:0b:c2:90:d4:b3:18:38:df:21:eb:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:56 2024 GMT
            Not After : Apr  5 02:45:56 2025 GMT
        Subject: CN=32BF1624D25726E0B4E6D82193285C2B5AFC83EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:80:8d:28:ad:4b:4b:a0:36:c1:3e:2a:de:64:
                    d6:18:55:a2:42:a9:c8:4c:a5:d5:46:fc:3c:35:ea:
                    e6:8e:dc:84:07:a3:e8:3d:02:64:65:f1:fc:4b:e2:
                    52:3a:ee:18:fc:7d:b7:27:f7:4a:c7:a7:49:f3:ca:
                    65:8e:d6:4b:19:e9:84:10:3d:37:ce:6d:44:65:fc:
                    6a:57:99:0b:c3:79:29:e3:7d:c1:75:bf:a2:03:56:
                    58:b0:36:68:33:f4:51:15:c1:64:39:8e:00:f7:8a:
                    9e:06:13:ef:a7:3b:b8:d5:62:f1:65:de:69:75:0a:
                    44:37:3c:72:7c:4a:8e:e7:14:56:a4:dc:6b:11:2f:
                    6f:c0:d5:fc:04:be:39:37:e6:3e:94:d7:f1:38:2b:
                    59:89:b7:c3:d5:42:55:5a:f1:e3:d0:f5:1a:d3:84:
                    b1:92:a3:c3:b4:26:12:bf:78:15:6d:c1:4a:b3:dc:
                    23:e2:e0:fc:4a:d4:0e:27:2c:42:e3:4b:82:e8:1b:
                    33:98:2b:5d:e4:64:85:9f:a8:ce:62:cd:78:c4:41:
                    4d:49:31:09:6c:3e:49:69:d6:a7:99:1e:71:26:fb:
                    55:c8:0f:b4:c0:f4:d3:0d:47:fa:b8:86:3d:b0:b5:
                    51:97:70:6e:04:d1:2c:01:31:d7:a2:e9:13:5e:26:
                    2c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:BF:16:24:D2:57:26:E0:B4:E6:D8:21:93:28:5C:2B:5A:FC:83:EB
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32302e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:1d:6c:db:07:6d:30:92:b6:d8:94:0c:01:92:2e:d6:69:95:
         a4:37:62:6e:ec:69:0d:a4:42:8c:b4:9c:d6:74:67:b5:15:86:
         2a:4b:1c:9a:a0:c4:1a:de:55:30:9a:56:60:e7:64:3e:1e:3a:
         fa:80:5e:da:0a:87:8f:ae:f5:41:43:db:ee:3c:0c:a2:39:90:
         d7:0e:7c:73:fb:82:c7:82:0b:51:e5:ca:86:4d:f3:73:78:e8:
         e1:c1:18:80:f2:59:ce:f5:67:92:73:c0:5e:51:4f:fc:39:45:
         a3:1f:7d:24:03:e9:1b:ca:2b:bf:ac:cf:36:58:c8:a9:e2:1b:
         ad:90:39:9e:29:95:3c:b6:68:6e:ad:f3:33:18:a4:da:55:c2:
         48:ee:0e:f5:53:47:48:47:6a:ba:c0:ff:8c:b0:4c:d9:03:16:
         6d:59:71:69:b7:c8:be:ca:5a:d4:d2:d2:5c:39:5f:a7:97:ef:
         06:77:b1:bc:c6:82:1b:b9:7a:1a:9b:c0:c1:29:9a:63:60:c8:
         e9:65:b6:28:83:d7:2b:25:02:95:08:64:ef:fe:9a:26:d2:a9:
         41:b1:df:c5:14:07:82:9a:8e:8a:2e:cb:69:64:2f:1e:29:c9:
         87:de:43:b0:85:83:11:5f:74:5e:9a:1a:38:d7:db:5f:f4:28:
         1d:ea:aa:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org