Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33352e302f32342d3234203d3e20323632383330.roa
File:                     3137372e382e33352e302f32342d3234203d3e20323632383330.roa (raw, json)
Hash identifier:          WZNKfF0xv6u0qxK93+Mmh7cmCPDcUwlJ5K4gYrOhGZw=
Subject key identifier:   C4:78:1B:9E:B5:34:84:2D:1E:FE:ED:8C:28:52:FC:EE:23:02:B4:3A
Certificate issuer:       /CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
Certificate serial:       0B1F8E2F34FDF76FCA418D4418191270B0213E2F
Authority key identifier: 30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33352e302f32342d3234203d3e20323632383330.roa
Signing time:             Wed 28 Feb 2024 00:56:01 +0000
ROA not before:           Wed 28 Feb 2024 00:51:01 +0000
ROA not after:            Wed 26 Feb 2025 00:56:01 +0000
asID:                     262830
IP address blocks:        177.8.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1f:8e:2f:34:fd:f7:6f:ca:41:8d:44:18:19:12:70:b0:21:3e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
        Validity
            Not Before: Feb 28 00:51:01 2024 GMT
            Not After : Feb 26 00:56:01 2025 GMT
        Subject: CN=C4781B9EB534842D1EFEED8C2852FCEE2302B43A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:40:5c:3a:3c:75:e7:d4:c0:5a:40:37:25:8b:
                    88:30:39:c7:76:01:57:6e:4c:d1:b6:3d:be:a1:73:
                    48:da:0f:01:6b:fe:da:46:02:63:78:16:67:a8:db:
                    62:05:e7:ec:33:b5:dd:45:78:33:e8:46:67:47:0c:
                    c8:c7:70:c0:d5:4a:8e:0d:e2:b8:81:62:1d:66:4c:
                    42:4a:4c:2d:a3:05:24:f3:22:13:1d:79:78:ac:6e:
                    cd:99:60:84:df:6f:30:96:ff:8c:e1:e1:be:a6:16:
                    e0:2b:b0:87:18:ba:f0:80:a6:95:30:14:50:91:b9:
                    db:56:3a:bd:e2:5f:e1:3f:b7:6a:4f:5b:8b:46:ea:
                    94:33:17:90:da:8b:b9:76:1e:9c:c1:6b:ca:d4:9a:
                    90:af:1e:e2:6d:63:17:f3:a4:23:cf:eb:7e:0d:9d:
                    d9:e4:f7:36:7b:15:c1:b2:3a:74:d3:e7:9f:bb:ef:
                    bc:f5:b0:4e:0e:29:74:b7:6b:f7:b1:e6:27:73:ae:
                    d7:16:8a:2b:94:e8:b3:c6:8a:81:c1:80:7c:df:08:
                    d7:ec:a7:a0:14:ce:59:5c:6a:9d:39:e2:e8:20:f7:
                    6e:69:bf:69:21:cb:20:e2:94:8b:bd:70:b3:f7:4c:
                    f4:d9:d9:26:7e:0e:94:a0:d9:42:49:07:dd:09:30:
                    fc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:78:1B:9E:B5:34:84:2D:1E:FE:ED:8C:28:52:FC:EE:23:02:B4:3A
            X509v3 Authority Key Identifier:
                keyid:30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33352e302f32342d3234203d3e20323632383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:a3:fc:0a:f4:4c:99:8c:e7:7f:92:3f:d4:4a:22:6c:ee:0b:
         7f:31:d5:74:90:cc:eb:af:61:85:cd:ce:c8:ab:f1:16:fc:0b:
         a6:16:c0:72:3e:39:1d:96:f7:3c:2f:29:ca:3c:11:f0:7e:b7:
         95:a0:18:14:32:93:48:34:f5:a2:86:db:33:86:d5:81:19:ff:
         70:cc:65:14:45:34:e8:45:dd:a9:12:37:f5:67:e9:a5:d7:63:
         1a:55:e7:dc:0f:56:0c:6b:45:db:89:24:3d:58:20:b6:02:e0:
         34:34:c7:77:b3:48:b6:81:a9:b4:10:30:32:db:bd:8f:36:4b:
         96:67:3e:fa:07:3e:38:fe:fb:59:90:2b:13:16:a7:99:b0:43:
         9d:1a:e2:0b:15:58:aa:33:39:91:5e:ce:6f:b5:ab:59:79:9f:
         b3:9f:fb:9f:92:e3:af:4e:ec:12:bb:fc:62:f6:6a:72:e6:59:
         f9:94:01:4a:ea:5d:a0:ae:e5:f1:67:21:9c:09:93:6a:b9:fb:
         b7:18:9d:81:8e:6c:2f:05:32:53:57:94:30:8c:81:00:d8:46:
         11:06:df:54:ff:d8:0f:1c:a1:e2:9f:a7:0e:af:f4:ba:80:cc:
         3e:a2:99:09:0c:42:73:bd:8b:c6:6f:bc:62:60:21:08:af:07:
         2c:8c:8e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org