Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32322e302f32342d3234203d3e203238333630.roa
File:                     3137372e382e32322e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          OoihbQZxDjlYKzW2fjS8LZDDkPKtGkBbm8rP6I8DTK4=
Subject key identifier:   EF:0B:A4:66:37:75:38:71:CB:3A:43:86:BE:3C:C9:57:FC:15:8A:26
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       7EA097CC0B987984F8374BD83653DFD198B04AEE
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32322e302f32342d3234203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:20 +0000
ROA not before:           Sat 06 Apr 2024 02:40:20 +0000
ROA not after:            Sat 05 Apr 2025 02:45:20 +0000
asID:                     28360
IP address blocks:        177.8.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a0:97:cc:0b:98:79:84:f8:37:4b:d8:36:53:df:d1:98:b0:4a:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:20 2024 GMT
            Not After : Apr  5 02:45:20 2025 GMT
        Subject: CN=EF0BA46637753871CB3A4386BE3CC957FC158A26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9c:b7:2d:d8:24:f8:33:38:94:d6:a5:99:2f:
                    b3:6f:df:f1:42:16:35:11:fd:dc:c9:a5:c6:53:45:
                    5f:9a:6a:3c:b8:4a:14:94:a3:6d:bc:5e:bc:e5:39:
                    11:cf:bd:30:6a:2d:17:34:06:59:09:e5:e3:4a:02:
                    b7:73:19:37:7a:a6:d6:29:f2:57:a9:2b:68:5d:43:
                    6c:fb:48:5d:eb:40:7e:0e:9d:20:8b:70:ad:ea:ea:
                    13:d3:56:01:d9:c3:44:85:ee:68:28:8a:55:1e:66:
                    8b:44:36:16:b2:2e:75:b5:14:2f:ee:ac:f2:b8:ee:
                    62:04:5c:17:ee:9c:04:60:c0:cb:05:a0:0d:c9:50:
                    bc:3a:4b:33:79:da:83:0e:8d:e6:dd:14:2a:76:9e:
                    a2:82:11:7c:6c:2f:19:37:59:86:cc:9f:26:36:15:
                    79:63:c5:95:9c:86:76:6d:8f:41:ef:8c:04:0e:2d:
                    4d:6b:42:2d:fd:f7:45:da:ec:e4:4d:82:d7:a1:bd:
                    ee:9a:52:0f:7d:a4:0e:54:99:0f:65:f7:3b:90:17:
                    9c:93:ae:4c:fa:ec:a1:99:dc:cd:15:bf:6c:54:23:
                    5c:2a:e5:3d:e9:3f:a9:85:8f:41:9f:b1:b4:8b:f8:
                    df:5b:4a:b9:8e:74:be:de:cd:70:d7:b4:66:5d:1f:
                    d2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0B:A4:66:37:75:38:71:CB:3A:43:86:BE:3C:C9:57:FC:15:8A:26
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32322e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:62:62:2c:e2:79:46:9a:9b:ae:c0:bd:ad:5b:5c:cb:57:c5:
         d8:09:89:3f:51:55:a9:56:d7:dd:d8:fe:79:7d:51:5f:59:86:
         81:39:a9:80:ee:a4:eb:e9:71:10:99:35:8c:3b:2d:f6:dc:f3:
         2c:11:4a:f1:c3:67:9b:3c:ac:84:22:aa:8b:2d:25:f2:e3:35:
         90:78:4f:62:72:5a:7e:f9:79:60:19:ab:0b:e8:35:65:1a:41:
         7c:84:7c:c5:48:14:85:39:3a:46:44:2b:a1:e3:33:b3:1e:40:
         1c:25:5b:ec:36:be:1e:4c:2c:5f:9c:90:d8:c0:88:69:d7:45:
         09:c5:e5:e7:ae:8e:11:3a:8f:9e:b4:f9:ae:2e:df:f0:ba:7c:
         da:db:5f:02:f0:46:2f:65:fb:c2:b7:5c:1c:9e:e6:08:17:95:
         82:c4:3c:17:d7:5e:73:9a:d1:81:01:3f:b2:16:b1:09:25:db:
         78:4c:15:8f:12:06:08:47:28:2d:bf:63:75:d6:f8:82:bc:71:
         46:7d:a7:c4:27:4c:17:ca:6a:bb:a3:3d:df:b6:30:03:e3:15:
         85:e0:e7:e5:3c:c6:48:7c:bb:36:3e:58:c0:6c:8f:a0:7b:56:
         81:f3:94:fc:91:fa:8e:e7:31:65:0e:a3:f6:6c:89:40:b9:f7:
         ec:48:f7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org