Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33322e302f32322d3232203d3e20323632383330.roa
File:                     3137372e382e33322e302f32322d3232203d3e20323632383330.roa (raw, json)
Hash identifier:          9VIZ8W5EodseHiisIRUqniMN9ttONua9EjiqgqUa6p8=
Subject key identifier:   9B:A9:BD:86:6E:A1:99:4F:08:7F:43:14:FA:2B:5B:5C:9A:9A:EE:49
Certificate issuer:       /CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
Certificate serial:       7713E8AF16CAFDE78DCF8EC45D04229AFCC041C0
Authority key identifier: 30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33322e302f32322d3232203d3e20323632383330.roa
Signing time:             Thu 01 Feb 2024 11:12:59 +0000
ROA not before:           Thu 01 Feb 2024 11:07:59 +0000
ROA not after:            Thu 30 Jan 2025 11:12:59 +0000
asID:                     262830
IP address blocks:        177.8.32.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:13:e8:af:16:ca:fd:e7:8d:cf:8e:c4:5d:04:22:9a:fc:c0:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
        Validity
            Not Before: Feb  1 11:07:59 2024 GMT
            Not After : Jan 30 11:12:59 2025 GMT
        Subject: CN=9BA9BD866EA1994F087F4314FA2B5B5C9A9AEE49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:98:ef:af:e6:24:3f:92:a7:27:ee:6d:b8:a7:
                    de:a5:97:be:a8:41:fc:4f:be:9f:91:43:e7:ff:56:
                    4a:33:3a:66:1c:95:f3:f0:4b:19:86:4e:d4:c3:39:
                    9b:b9:8b:1a:6f:ac:22:e4:93:95:bd:f7:8c:07:ba:
                    3e:be:5a:ba:89:50:f6:c3:07:e5:94:a7:83:4b:3c:
                    8e:8e:3f:65:22:97:39:dd:56:f2:1e:0c:8b:cd:68:
                    6f:77:ac:11:81:86:ec:e1:41:00:45:e6:93:47:b1:
                    9b:19:83:4f:4c:84:54:1a:12:96:51:79:83:da:ea:
                    16:b0:20:bc:e8:67:ca:be:c1:30:95:3a:16:d3:1c:
                    1f:c4:75:01:37:3e:d3:ab:56:37:96:c8:12:59:08:
                    5f:20:cf:ed:80:09:6d:41:24:f7:44:e6:84:20:2c:
                    e4:46:23:ad:d9:2e:aa:1f:17:45:bd:3e:fc:4e:1c:
                    69:12:b3:78:e3:15:d6:55:52:ad:2b:25:5b:d1:10:
                    12:14:3f:5b:b9:f0:a5:cf:6d:76:e8:b3:c0:9f:c4:
                    9a:33:c8:0b:52:ab:44:bc:85:e6:23:8d:ff:14:db:
                    bc:d7:71:a5:0f:fa:39:ed:44:98:50:6f:6a:9b:3a:
                    de:30:14:d0:2a:3d:36:60:e2:38:be:d6:ae:ea:36:
                    cf:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A9:BD:86:6E:A1:99:4F:08:7F:43:14:FA:2B:5B:5C:9A:9A:EE:49
            X509v3 Authority Key Identifier:
                keyid:30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33322e302f32322d3232203d3e20323632383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:32:53:3a:61:3f:48:02:27:c3:17:82:56:df:02:0f:fa:80:
         8a:6a:50:ef:33:7e:19:03:11:1b:a0:21:4a:1b:d6:ce:34:c9:
         ec:8a:c9:6f:5e:c6:c0:f9:ed:fe:59:52:86:d9:a2:61:7b:f1:
         47:41:6b:b7:b4:f4:3a:69:7b:18:d6:cc:70:39:a7:55:4e:7c:
         38:94:df:60:a1:35:0f:9b:97:1a:70:16:f2:df:37:a6:21:33:
         0e:16:a0:7c:25:81:e8:62:4e:0e:8e:68:7b:ba:e6:2c:46:b6:
         da:57:20:ce:ce:3b:cc:a5:06:6d:9f:fe:9f:67:c8:f4:e5:c5:
         02:89:b8:4b:7a:e0:6a:69:96:9e:d5:be:e7:65:0f:e4:aa:6c:
         c9:c6:f6:06:50:90:a3:a9:03:81:c0:fb:b7:20:b7:30:77:01:
         7e:0e:38:e8:48:d9:94:84:04:a6:43:c8:f9:78:fa:24:b5:b8:
         ab:2e:d3:5a:88:d6:e4:0a:37:65:77:85:16:4e:d6:87:6a:f2:
         a3:31:f1:99:83:a5:5c:49:b5:07:1a:74:8a:ab:c9:a4:e4:2b:
         1f:77:2a:a1:dc:fd:75:db:c8:8d:12:5e:d4:ae:34:69:ec:d9:
         36:7b:d8:e2:d6:56:2f:02:69:6c:e4:47:0b:38:06:f0:61:c6:
         6a:8d:93:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org