Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33332e302f32342d3234203d3e20323632383330.roa
File:                     3137372e382e33332e302f32342d3234203d3e20323632383330.roa (raw, json)
Hash identifier:          wULOAe380+6OoY0ymEyENkh5CfFKCC71bhoX1oxgPhU=
Subject key identifier:   E6:4F:FF:3A:F1:C0:96:DC:F1:51:BA:B1:6D:16:2F:9F:14:2B:CB:59
Certificate issuer:       /CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
Certificate serial:       5626ACA31450C30BF75DF5529BC0D522CFDC43F6
Authority key identifier: 30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33332e302f32342d3234203d3e20323632383330.roa
Signing time:             Wed 28 Feb 2024 00:56:01 +0000
ROA not before:           Wed 28 Feb 2024 00:51:01 +0000
ROA not after:            Wed 26 Feb 2025 00:56:01 +0000
asID:                     262830
IP address blocks:        177.8.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:26:ac:a3:14:50:c3:0b:f7:5d:f5:52:9b:c0:d5:22:cf:dc:43:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
        Validity
            Not Before: Feb 28 00:51:01 2024 GMT
            Not After : Feb 26 00:56:01 2025 GMT
        Subject: CN=E64FFF3AF1C096DCF151BAB16D162F9F142BCB59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:18:14:4b:74:98:6e:3a:ea:60:6b:2a:39:99:
                    a4:1a:7b:87:e8:14:e8:4b:cc:77:c3:ee:27:ba:a4:
                    10:eb:47:0a:ba:19:35:95:cd:66:ae:3b:2d:57:92:
                    04:7b:c3:43:04:9e:e1:8c:ef:6e:b8:19:fe:9f:84:
                    fc:de:d7:c9:6e:09:2b:4d:24:69:40:70:12:1e:55:
                    06:00:d5:f3:6e:c7:a0:29:aa:9b:e8:d8:b2:23:d7:
                    13:96:19:06:ce:89:52:7c:b9:a3:d6:4d:b9:dc:4b:
                    88:18:14:04:18:98:e2:0d:f2:14:6c:d0:d9:e8:94:
                    ec:c3:2c:36:e7:ee:0d:46:20:18:13:61:e1:68:c1:
                    62:32:31:b3:9e:be:1e:ca:c6:0e:fa:01:b7:3a:f3:
                    02:e5:ff:5c:b5:ab:67:e9:f1:7d:43:c0:3f:f0:d0:
                    c5:5a:dc:89:54:d6:8d:f2:2e:b9:d2:2f:72:29:28:
                    cf:58:6e:64:1c:aa:f0:a3:66:5b:a7:9c:b1:86:01:
                    0c:2b:24:57:e0:58:64:49:9a:d8:28:00:c4:31:21:
                    93:e0:b3:6a:0a:4f:72:7f:5e:06:32:54:6a:6a:7d:
                    fc:6b:ea:60:e0:67:17:21:b9:11:e8:b3:0f:77:fd:
                    ce:b8:79:76:9f:26:6b:2d:2a:f9:6a:da:de:5f:fb:
                    6e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4F:FF:3A:F1:C0:96:DC:F1:51:BA:B1:6D:16:2F:9F:14:2B:CB:59
            X509v3 Authority Key Identifier:
                keyid:30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33332e302f32342d3234203d3e20323632383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:af:08:c9:a5:b2:06:d5:61:8f:fd:e6:a6:2f:82:dd:c3:0b:
         b4:33:8d:c6:72:c8:03:e7:20:90:66:3d:58:e2:0f:b9:a7:05:
         47:3c:d2:58:5d:d2:33:1a:3a:de:d6:05:62:57:3f:b0:c9:8d:
         1b:3a:86:61:52:54:93:68:a1:58:06:58:41:5b:5a:3a:95:de:
         f2:ea:18:45:04:51:e4:5e:b3:79:d6:cd:f0:99:20:b1:33:ef:
         24:b3:a5:1f:8d:0f:40:c8:6d:5f:f9:a6:1b:05:a8:78:d9:99:
         08:3f:ff:de:83:61:3a:0f:43:26:f8:c3:dd:da:e5:03:ac:04:
         6d:94:dc:af:61:93:75:66:ea:98:4c:b6:dd:fb:09:20:4f:e6:
         fb:65:a5:dd:07:54:60:21:72:c8:c2:c7:4c:ae:cf:39:26:71:
         70:5c:52:db:fe:1e:f7:15:b7:2b:55:88:0e:64:07:77:c8:74:
         b8:78:25:26:9f:1f:33:e0:70:3a:0b:c9:91:93:60:af:9b:f9:
         04:12:15:35:f2:ec:0c:f3:dc:e0:b5:10:6a:0c:ed:14:95:98:
         a3:51:6a:cc:ef:0c:e7:fc:98:4d:5b:c4:07:22:65:52:ee:87:
         4a:70:39:69:f6:0c:f8:e1:a0:e0:39:6b:ce:30:32:0b:75:94:
         7a:05:fd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org