Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33362e302f32322d3232203d3e20323632383330.roa
File:                     3137372e382e33362e302f32322d3232203d3e20323632383330.roa (raw, json)
Hash identifier:          E86Gd44p+7+lG/6CZMH454kPAeKtEaGbHC45w6CDZ3o=
Subject key identifier:   B5:73:31:23:48:94:76:33:21:CA:D2:A7:DD:79:A5:03:D2:42:7B:A6
Certificate issuer:       /CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
Certificate serial:       02CF8E7D352F081FDA30EA1E84B9B3AB35273751
Authority key identifier: 30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33362e302f32322d3232203d3e20323632383330.roa
Signing time:             Thu 01 Feb 2024 11:13:00 +0000
ROA not before:           Thu 01 Feb 2024 11:08:00 +0000
ROA not after:            Thu 30 Jan 2025 11:13:00 +0000
asID:                     262830
IP address blocks:        177.8.36.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:cf:8e:7d:35:2f:08:1f:da:30:ea:1e:84:b9:b3:ab:35:27:37:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
        Validity
            Not Before: Feb  1 11:08:00 2024 GMT
            Not After : Jan 30 11:13:00 2025 GMT
        Subject: CN=B57331234894763321CAD2A7DD79A503D2427BA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:40:77:9b:3f:18:a0:dc:f6:cd:e6:a0:2e:9a:
                    c2:7c:15:54:ee:a6:ea:05:84:9f:c1:39:54:c2:e7:
                    d6:48:dd:7a:a8:d4:d9:21:72:96:92:05:0a:50:71:
                    a6:a5:a8:92:3e:88:a7:22:72:10:20:d4:0f:f0:6a:
                    be:0e:82:f4:bb:f9:99:3c:56:bf:07:06:ba:b4:b7:
                    fe:0e:71:ea:a6:65:8a:28:bb:29:55:5b:0f:84:7e:
                    df:53:c4:11:0a:bc:70:2c:bf:04:37:a3:2f:f7:75:
                    41:9d:9e:47:dd:2f:8a:eb:27:a1:ba:74:b3:0f:64:
                    e6:59:0e:02:b8:f2:08:ef:ef:a7:5e:0e:2e:48:46:
                    81:08:c1:b6:4e:e0:eb:22:ae:b1:69:bb:79:4c:90:
                    06:dc:fb:b3:bc:d9:a6:ad:f3:fb:62:3f:da:b0:d3:
                    6b:a7:69:c3:f9:70:48:9f:99:2f:42:7b:4b:06:4c:
                    46:6f:8d:dd:e8:bf:30:0e:de:ab:74:6b:6e:b4:62:
                    89:77:e8:36:e5:cd:8c:a3:3d:ad:01:d8:79:4b:f2:
                    59:52:e8:22:d4:35:0e:d2:5d:ca:9c:7a:21:e8:d7:
                    24:a4:96:fd:97:25:0f:46:5a:9b:44:69:d1:a6:11:
                    2d:d4:59:00:67:5b:e4:a7:fe:82:7c:f0:7b:1e:12:
                    ce:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:73:31:23:48:94:76:33:21:CA:D2:A7:DD:79:A5:03:D2:42:7B:A6
            X509v3 Authority Key Identifier:
                keyid:30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33362e302f32322d3232203d3e20323632383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:97:5c:c1:31:50:45:e3:3f:b3:81:90:b1:6b:0c:9e:9b:6a:
         52:ee:15:5a:b9:40:a3:72:e3:f5:dd:31:2d:80:0c:02:a0:72:
         08:49:4f:dd:75:a9:70:52:25:76:8f:35:7a:8b:dc:cd:38:a1:
         a8:0b:18:8b:93:cd:30:2f:d5:0b:0b:d9:ad:58:21:4f:50:6b:
         4f:56:46:70:ee:81:2a:7c:d1:b3:12:88:19:cf:71:23:28:5a:
         bf:6c:8e:fa:5a:e5:1d:bc:5a:c0:0b:f2:27:c8:4a:21:ca:17:
         05:fd:ba:0c:8a:5c:65:d1:3f:0a:34:ac:6e:cb:b4:c4:22:78:
         64:da:13:7c:39:85:87:7d:60:62:1b:95:71:09:73:97:74:4e:
         73:25:70:2a:1c:21:64:99:5c:6f:14:78:85:71:e7:06:df:e7:
         6c:6e:df:ed:30:0b:ac:b5:69:7c:2d:0a:28:a6:6e:df:5e:52:
         51:23:5e:a2:17:ff:16:70:8f:4e:a8:64:19:4b:1e:11:85:57:
         2c:a1:27:64:7d:ff:2e:fa:7d:d9:05:f4:0c:2b:14:ab:d7:1f:
         07:06:0b:2d:bd:08:98:8a:03:bf:3c:df:38:38:22:a9:dd:ee:
         63:56:f6:93:ec:5d:8e:54:b9:e2:48:d5:0c:45:5e:4b:89:9b:
         2e:ab:30:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org