Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33322e302f32332d3233203d3e20323632383330.roa
File:                     3137372e382e33322e302f32332d3233203d3e20323632383330.roa (raw, json)
Hash identifier:          FQ6GWlUq3U053IKfuwsAJfIqZWk2ITejokIhjjDOx7s=
Subject key identifier:   F7:B3:3E:D5:44:33:88:A5:09:73:04:50:14:C9:F4:EC:56:5C:37:35
Certificate issuer:       /CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
Certificate serial:       22454AF3A94366186E927D1CAC9EF66D43A2D616
Authority key identifier: 30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33322e302f32332d3233203d3e20323632383330.roa
Signing time:             Wed 28 Feb 2024 00:55:58 +0000
ROA not before:           Wed 28 Feb 2024 00:50:58 +0000
ROA not after:            Wed 26 Feb 2025 00:55:58 +0000
asID:                     262830
IP address blocks:        177.8.32.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:45:4a:f3:a9:43:66:18:6e:92:7d:1c:ac:9e:f6:6d:43:a2:d6:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
        Validity
            Not Before: Feb 28 00:50:58 2024 GMT
            Not After : Feb 26 00:55:58 2025 GMT
        Subject: CN=F7B33ED5443388A50973045014C9F4EC565C3735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3b:83:97:f4:77:a2:db:0b:6f:c9:04:36:e6:
                    77:31:01:e4:90:31:b2:0e:5f:68:21:22:6e:e1:a1:
                    ad:9e:96:9d:26:8a:68:2b:1c:9f:61:d4:10:be:33:
                    bd:0a:f6:d2:18:65:dd:70:5d:0d:cf:78:46:cb:28:
                    4f:3d:01:2f:78:5e:95:9b:4f:50:e7:0b:4e:45:f8:
                    d9:74:60:46:16:f8:e2:d2:b5:7d:30:c9:47:7c:46:
                    6c:d9:1a:10:e2:94:44:98:88:12:a1:ad:07:51:74:
                    67:86:e2:62:9f:bd:63:41:80:66:95:08:81:e3:ee:
                    d2:c7:33:33:6c:bf:f4:33:53:e9:8e:56:18:98:ac:
                    5a:8e:85:59:4f:98:08:33:41:74:26:d7:5b:8e:82:
                    a8:6d:47:45:e7:f1:3f:1c:5a:f2:17:a5:01:da:7a:
                    cd:70:e2:e6:c7:c6:f2:62:c8:5f:29:d8:45:13:b0:
                    89:a3:d4:c0:40:84:b1:c6:22:15:f4:12:90:65:4a:
                    fe:33:7e:7f:33:c1:cf:30:c5:bf:ca:d5:bc:f9:3c:
                    6e:9b:5c:c0:52:8a:9e:84:20:50:36:1e:8a:60:a7:
                    5e:82:7c:b7:76:9b:69:3e:d0:0c:fb:57:c5:bb:1d:
                    2e:df:89:35:47:f8:68:66:75:6f:2e:7d:d6:25:0b:
                    a8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B3:3E:D5:44:33:88:A5:09:73:04:50:14:C9:F4:EC:56:5C:37:35
            X509v3 Authority Key Identifier:
                keyid:30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33322e302f32332d3233203d3e20323632383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:23:20:df:18:25:f3:2c:33:d4:1a:c7:2e:a8:d9:48:0e:b2:
         2b:fc:90:29:4b:77:15:a1:43:a2:db:19:24:c8:a3:42:a3:c3:
         43:4b:9f:10:bd:c7:8d:48:6e:65:9e:d9:de:52:26:b8:15:9f:
         09:da:03:4d:d9:a3:a2:62:82:36:fc:64:06:c5:a4:34:e3:2c:
         d0:dd:00:7a:ce:55:7e:b6:44:6b:c0:8c:d4:fd:44:fd:1b:b9:
         8b:ca:df:ec:cf:11:8e:87:f0:d0:18:c5:5e:b8:41:35:13:95:
         47:fb:87:a2:c6:12:db:b4:8f:08:0c:40:33:f2:41:58:42:44:
         56:ed:d9:ed:50:34:85:97:7c:34:16:a3:76:88:8e:90:00:dc:
         c1:d5:a1:c5:a5:47:bf:76:b0:2b:3d:c1:a5:e4:8e:2f:2d:34:
         9a:4d:3f:87:05:17:fb:eb:46:33:1a:00:39:61:7d:7f:56:35:
         82:1f:6f:68:fe:53:57:25:79:01:79:fe:24:19:fa:08:04:81:
         cf:4b:d7:1b:d3:e2:15:2c:70:45:ba:90:47:37:51:59:d5:31:
         52:07:fc:7f:67:5d:e3:89:01:4f:10:26:c2:5e:bb:11:95:61:
         0b:20:0d:2c:7e:fc:e0:23:0d:37:3e:41:e1:3d:2e:1e:c3:e0:
         2f:62:52:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org