Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33362e302f32332d3233203d3e20323632383330.roa
File:                     3137372e382e33362e302f32332d3233203d3e20323632383330.roa (raw, json)
Hash identifier:          q2xRMbxKJllcUOXFBhj2iMwCAoEsFBVButz0lV6kVQQ=
Subject key identifier:   14:D3:EE:5C:43:70:F4:B6:F4:51:9D:CC:4E:19:1F:69:84:0B:63:A1
Certificate issuer:       /CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
Certificate serial:       66453A71F2492983F53F9C239F98EBEAED5FA00D
Authority key identifier: 30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33362e302f32332d3233203d3e20323632383330.roa
Signing time:             Wed 28 Feb 2024 00:55:59 +0000
ROA not before:           Wed 28 Feb 2024 00:50:59 +0000
ROA not after:            Wed 26 Feb 2025 00:55:59 +0000
asID:                     262830
IP address blocks:        177.8.36.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:45:3a:71:f2:49:29:83:f5:3f:9c:23:9f:98:eb:ea:ed:5f:a0:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
        Validity
            Not Before: Feb 28 00:50:59 2024 GMT
            Not After : Feb 26 00:55:59 2025 GMT
        Subject: CN=14D3EE5C4370F4B6F4519DCC4E191F69840B63A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c4:17:86:24:ae:99:ad:f6:f8:2e:6a:d1:dd:
                    da:c2:a3:64:72:8d:a7:1a:66:15:29:85:66:a7:17:
                    01:e7:78:9b:dc:d7:0f:3c:06:e7:fd:b6:28:e7:8a:
                    71:bf:19:bd:95:8d:08:b2:04:34:98:c7:6c:9e:3b:
                    e4:4f:cb:53:d9:bc:f7:b5:5c:b6:ac:50:66:bf:62:
                    fb:19:df:f3:34:98:1b:df:d0:ec:c8:c3:99:62:5b:
                    c2:eb:51:74:7f:4a:0a:bb:88:a8:09:06:8b:1c:11:
                    49:6b:33:1f:73:53:42:13:02:bf:c3:f9:ec:b8:f3:
                    9b:42:de:08:5a:f8:fd:9a:f9:f5:6a:6e:ff:65:fe:
                    21:01:82:dd:02:7b:85:0d:46:4e:c4:d8:75:83:42:
                    43:11:b6:6a:24:b5:1c:ab:d4:78:8b:79:4b:41:45:
                    0e:52:05:de:5b:6b:f9:51:e2:fc:f5:a3:46:11:40:
                    8e:72:8e:4d:c8:4b:e9:d7:37:dc:cf:f3:5a:72:5c:
                    97:12:3d:e4:b5:2a:cc:46:84:4a:e9:43:6a:6e:0f:
                    af:9a:aa:44:65:98:6e:19:b5:dd:27:00:70:a1:f8:
                    4c:76:6c:37:c8:6d:df:18:6f:90:4c:1e:33:9a:e9:
                    8d:67:d7:dc:83:f3:e4:78:2d:f6:15:4f:44:70:48:
                    c1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D3:EE:5C:43:70:F4:B6:F4:51:9D:CC:4E:19:1F:69:84:0B:63:A1
            X509v3 Authority Key Identifier:
                keyid:30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33362e302f32332d3233203d3e20323632383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:ba:84:35:60:18:08:08:38:ba:66:2f:de:f5:ac:c1:fe:a0:
         83:e7:25:72:81:5c:32:3a:e9:85:3f:f8:5d:f6:39:8f:52:20:
         f7:5d:08:d6:7e:a7:f7:68:18:0f:3b:07:b0:9c:78:61:df:4c:
         32:2b:14:f3:53:4e:55:67:b6:1e:2b:fe:63:dc:94:22:fe:df:
         6f:6b:22:c6:bd:9d:72:91:b7:93:d0:8f:ca:88:c1:66:46:53:
         e8:9c:fc:cb:36:b7:29:b6:77:26:b7:3b:c3:4c:a0:68:75:d0:
         0f:19:f2:af:1e:aa:7e:e6:5f:11:59:79:4f:1b:24:8c:ed:38:
         e0:d0:93:dd:73:27:ae:27:aa:84:fe:92:4f:67:0e:b9:6a:ba:
         aa:bd:91:64:01:44:28:67:3e:35:4c:31:a2:1b:59:26:3a:e8:
         cf:3f:d9:f1:a7:0f:d6:b9:be:65:3f:97:01:87:53:5f:fc:a4:
         04:6b:4c:cb:42:1b:fa:7a:f2:92:de:47:ea:f5:c7:49:0c:17:
         ee:eb:89:59:3c:fd:84:49:90:de:38:f1:0b:73:94:31:b5:4f:
         42:e1:5a:b4:53:13:2c:fe:c4:b7:7e:ed:02:d3:13:ca:d6:81:
         18:a5:1d:52:be:d9:18:0e:b7:5b:02:bb:0a:23:9f:ad:f0:9a:
         20:3e:39:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org