Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33362e302f32342d3234203d3e20323632383330.roa
File:                     3137372e382e33362e302f32342d3234203d3e20323632383330.roa (raw, json)
Hash identifier:          /UTsgmP7tjilIiY35lYvwsuZnY50ybOkL939htr6hwE=
Subject key identifier:   4A:EA:82:9C:FF:EC:C1:11:9F:57:AC:F0:61:34:4C:A7:07:2D:D5:CF
Certificate issuer:       /CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
Certificate serial:       132E29BE6C2A5A98C5E16C2B38FD76A18D071EF0
Authority key identifier: 30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33362e302f32342d3234203d3e20323632383330.roa
Signing time:             Wed 28 Feb 2024 00:55:55 +0000
ROA not before:           Wed 28 Feb 2024 00:50:55 +0000
ROA not after:            Wed 26 Feb 2025 00:55:55 +0000
asID:                     262830
IP address blocks:        177.8.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2e:29:be:6c:2a:5a:98:c5:e1:6c:2b:38:fd:76:a1:8d:07:1e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
        Validity
            Not Before: Feb 28 00:50:55 2024 GMT
            Not After : Feb 26 00:55:55 2025 GMT
        Subject: CN=4AEA829CFFECC1119F57ACF061344CA7072DD5CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5b:08:60:93:d0:25:d0:fc:4b:09:af:04:c1:
                    26:a3:87:d7:c6:ea:5f:13:28:e0:89:ed:b8:62:94:
                    e2:aa:c9:35:13:95:c3:3c:2f:91:1b:87:d7:35:7e:
                    de:10:4d:5e:fc:39:ee:a4:cd:07:48:17:e7:e7:b5:
                    2a:17:1c:e4:df:02:bc:f8:34:a3:61:90:18:42:48:
                    c1:05:c4:9f:8d:ab:c4:47:ce:d0:0e:64:88:b5:76:
                    fc:d8:75:c1:9a:f2:58:4a:5b:4e:2d:51:1c:34:e7:
                    3a:38:23:91:96:87:1b:82:90:cc:b2:34:58:cd:a7:
                    5a:e2:80:f5:af:a4:a6:86:1a:43:57:fb:7a:b1:d5:
                    84:72:36:25:a6:c9:f5:67:9d:6f:f9:5d:45:49:46:
                    d8:c3:34:9a:c6:4d:95:2e:ba:3f:51:bd:b3:50:6f:
                    1c:95:9d:20:73:07:3d:b1:16:5d:04:bb:f0:85:ba:
                    17:e8:af:25:b7:2a:6a:30:ee:47:f2:c3:c1:51:27:
                    52:4a:9a:4d:9a:7c:17:2c:59:3e:7f:25:23:b3:89:
                    da:e1:d7:7e:ff:01:83:91:cb:66:79:7a:fc:97:89:
                    9b:80:80:6e:d1:52:aa:5b:44:69:24:5b:8d:9b:be:
                    26:3d:a3:ad:c4:30:d8:e6:6e:23:0e:a4:5b:64:1e:
                    cb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:EA:82:9C:FF:EC:C1:11:9F:57:AC:F0:61:34:4C:A7:07:2D:D5:CF
            X509v3 Authority Key Identifier:
                keyid:30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33362e302f32342d3234203d3e20323632383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:e4:25:ce:bf:8b:17:37:0f:c6:f6:eb:0c:fb:84:94:8a:2c:
         e8:60:e2:96:c9:4f:1b:65:9e:af:4a:8c:b5:92:0a:14:4d:8f:
         25:e4:9c:2c:7e:dc:ad:70:52:83:88:1d:26:6d:7d:3b:bc:24:
         dd:11:9f:f5:42:11:b0:3d:ed:9b:21:7d:9a:1a:c3:f7:3a:b0:
         f3:2e:48:c0:6e:a5:2c:d1:ee:ec:5d:60:65:6f:1a:15:d3:7b:
         61:eb:00:47:79:af:80:9e:8c:33:99:97:a5:f5:e2:df:3a:a1:
         1d:3a:32:3c:97:27:8a:5a:fe:70:58:21:a5:d6:ba:87:fe:20:
         be:f2:ac:bf:3a:dc:ab:49:b8:6c:ad:b2:91:d2:99:3d:77:dc:
         9d:76:63:91:40:ab:3c:59:82:81:22:19:c5:61:c7:20:8d:21:
         7d:66:86:a0:bf:df:a6:ac:ce:a5:9d:c3:57:44:21:99:ed:b1:
         1b:00:d1:be:e4:d2:5c:c4:7e:fa:4d:db:63:9d:79:15:f4:f5:
         06:c0:cd:d1:b5:02:d7:a6:15:f0:12:d9:5e:28:bb:d5:85:45:
         6a:76:a2:d8:80:53:b1:a0:35:ed:b6:f0:26:fa:59:e6:86:22:
         58:ab:c3:06:b6:92:fa:97:41:37:8a:42:e9:b5:df:f4:fd:4c:
         5c:1e:48:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org