Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33322e302f32342d3234203d3e20323632383330.roa
File:                     3137372e382e33322e302f32342d3234203d3e20323632383330.roa (raw, json)
Hash identifier:          iXDw41TgHDQkjdo1Iw9BT6kGCDhaJNaztQa/rUIwkxs=
Subject key identifier:   8E:EE:B4:5E:81:5E:93:EC:03:2B:83:B0:DC:9A:0F:B7:43:76:F9:CA
Certificate issuer:       /CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
Certificate serial:       139A4A04A50562E9010058E2A4E8092896594110
Authority key identifier: 30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33322e302f32342d3234203d3e20323632383330.roa
Signing time:             Wed 28 Feb 2024 00:56:02 +0000
ROA not before:           Wed 28 Feb 2024 00:51:02 +0000
ROA not after:            Wed 26 Feb 2025 00:56:02 +0000
asID:                     262830
IP address blocks:        177.8.32.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:9a:4a:04:a5:05:62:e9:01:00:58:e2:a4:e8:09:28:96:59:41:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
        Validity
            Not Before: Feb 28 00:51:02 2024 GMT
            Not After : Feb 26 00:56:02 2025 GMT
        Subject: CN=8EEEB45E815E93EC032B83B0DC9A0FB74376F9CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:19:48:0f:c6:cd:d3:06:9a:3c:51:d7:f2:d3:
                    29:ed:5d:3d:1b:66:45:49:0e:6a:2a:5a:b0:21:45:
                    27:bc:6c:d5:46:a0:2c:13:b5:48:7e:3f:76:5a:5d:
                    cf:81:86:3e:86:92:64:2a:8b:eb:5e:51:90:ed:68:
                    aa:bf:18:98:13:55:49:08:b4:6c:82:a9:91:dc:9b:
                    77:59:09:13:fe:e5:d5:16:c1:34:22:62:a3:fb:8f:
                    04:96:61:01:22:fc:79:55:27:86:51:e5:5a:e3:77:
                    f2:09:44:bd:90:ff:0c:6d:7f:c3:9b:6a:cf:1c:2e:
                    e9:1f:99:b8:d7:86:a3:fc:55:9d:6d:04:87:a2:9f:
                    3c:91:15:a8:80:90:76:1c:80:98:56:0a:57:22:07:
                    a7:47:38:25:0f:b6:cd:22:6b:96:82:49:1f:9a:9a:
                    67:d8:39:0a:5f:78:8e:f3:9c:fb:13:7b:ac:4f:ca:
                    3f:29:86:85:1f:65:f0:96:82:7b:cd:ed:25:82:e6:
                    90:94:7b:80:c7:43:9c:27:c1:04:0d:3c:0a:ec:75:
                    05:9b:aa:80:c7:64:77:3c:5b:78:db:d2:19:85:a3:
                    ed:2c:62:b6:a4:b1:49:62:e9:81:fc:c7:7b:19:e7:
                    b0:14:8b:7a:5f:32:ab:69:9d:ca:6a:4c:d6:5e:1e:
                    6d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:EE:B4:5E:81:5E:93:EC:03:2B:83:B0:DC:9A:0F:B7:43:76:F9:CA
            X509v3 Authority Key Identifier:
                keyid:30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33322e302f32342d3234203d3e20323632383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:ce:e1:3f:a8:20:2c:2f:19:ad:b1:80:81:23:7b:c3:2b:2f:
         1d:e1:18:2e:61:ee:a9:42:6c:95:6f:b0:3f:3c:5a:1a:6c:0e:
         59:d8:af:e5:cf:0a:c6:9b:1d:4b:46:de:89:09:29:d3:3c:22:
         ff:18:85:93:11:8b:cd:34:3c:bf:72:3f:20:fc:3b:5a:4d:d5:
         93:19:3d:24:1f:2f:4b:8a:f8:56:53:44:3f:c7:af:fb:4b:4b:
         09:49:2b:33:f9:7b:ac:c4:e0:99:c5:69:eb:d4:97:6c:af:c5:
         13:03:32:c0:53:40:0c:cf:96:2e:53:e5:c0:be:f8:54:93:44:
         c1:a0:e2:ae:ee:92:bf:7d:9c:13:f9:fd:de:d9:78:0b:0f:51:
         7d:d9:bd:ba:8a:17:e1:55:f6:71:f8:02:b4:8d:56:87:39:5c:
         d6:14:bd:2f:10:74:f6:f0:48:b1:a6:0b:80:c4:2d:01:d7:34:
         fe:74:d5:70:82:73:73:56:97:31:67:54:e2:0e:7f:50:5f:c9:
         91:15:70:31:da:d7:69:d4:d9:9c:26:9a:07:c5:36:d7:91:4a:
         ba:c9:c7:12:03:0b:4e:8a:7b:0b:43:0b:ee:1b:37:47:05:f4:
         9d:6a:88:df:1c:9d:1f:31:31:1a:d6:49:8a:a7:59:4d:e7:82:
         e2:be:21:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:26 2025 by rpki-client