Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33382e302f32332d3233203d3e20323632383330.roa
File:                     3137372e382e33382e302f32332d3233203d3e20323632383330.roa (raw, json)
Hash identifier:          GM/DqVu5XtYKSmtSgVlROASFRQL5q2fQmyKVslIFG4c=
Subject key identifier:   7D:68:6B:CF:C9:05:DE:09:70:12:32:47:E2:8E:46:23:71:50:75:23
Certificate issuer:       /CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
Certificate serial:       260634B3E809CCD4B171AFB043FF5E8D2AAB769C
Authority key identifier: 30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33382e302f32332d3233203d3e20323632383330.roa
Signing time:             Wed 28 Feb 2024 00:55:57 +0000
ROA not before:           Wed 28 Feb 2024 00:50:57 +0000
ROA not after:            Wed 26 Feb 2025 00:55:57 +0000
asID:                     262830
IP address blocks:        177.8.38.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:06:34:b3:e8:09:cc:d4:b1:71:af:b0:43:ff:5e:8d:2a:ab:76:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
        Validity
            Not Before: Feb 28 00:50:57 2024 GMT
            Not After : Feb 26 00:55:57 2025 GMT
        Subject: CN=7D686BCFC905DE0970123247E28E462371507523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:27:c7:85:e6:15:31:c1:d3:d0:51:62:9f:04:
                    68:a8:ff:c6:d5:f9:6b:de:5c:c9:2a:ed:28:7b:19:
                    7d:b6:d4:b9:9d:34:7f:93:a7:ba:6d:8c:f5:bd:60:
                    e2:07:84:5e:1e:05:dc:b0:a4:c0:71:13:14:a5:0c:
                    c3:66:1c:62:82:b0:c4:9f:b5:4e:93:42:10:d7:ff:
                    b9:16:dc:b7:1e:4d:85:88:97:4a:a8:03:72:2f:47:
                    52:b5:60:53:d5:9a:91:3f:ca:08:82:40:43:52:7c:
                    7d:f2:0f:0a:70:0b:2e:1c:8a:3c:33:39:28:30:1a:
                    88:36:b9:ab:be:09:42:13:c1:bd:dc:50:6b:fd:ca:
                    ef:f2:5b:97:9a:d6:c4:d3:f0:28:6f:4a:ab:34:99:
                    ae:5b:c7:76:d2:a7:4b:bc:02:ae:be:7f:26:02:9b:
                    94:bc:da:54:46:b2:f3:c3:14:e5:4f:8b:13:7d:f9:
                    9f:06:7a:85:d8:db:26:e2:96:c0:3b:af:a6:f8:2c:
                    35:ce:3f:ab:5d:7f:51:85:7b:7e:04:bb:f8:36:a4:
                    86:cd:7b:20:db:70:a4:31:12:3f:49:36:8e:85:71:
                    6d:70:76:b4:56:8d:d8:92:04:90:8c:03:c9:9d:66:
                    f1:ac:c5:02:c2:0e:f7:21:92:6d:d7:92:a4:9b:b9:
                    8a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:68:6B:CF:C9:05:DE:09:70:12:32:47:E2:8E:46:23:71:50:75:23
            X509v3 Authority Key Identifier:
                keyid:30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33382e302f32332d3233203d3e20323632383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:05:34:3b:b2:9d:c0:a0:53:85:3d:13:70:33:5b:32:ec:3e:
         38:ec:58:8e:02:1e:3f:a9:32:7e:55:af:2c:e3:91:d2:2c:83:
         aa:73:e9:d0:44:e1:d3:c3:d3:94:6e:b4:21:b7:fc:d9:d7:e3:
         a6:c7:19:9a:6c:cc:ef:01:55:b7:ff:e4:fe:9b:a2:07:7b:2d:
         6e:6d:c2:6f:6f:b9:87:22:20:cc:fe:21:8f:0e:35:ce:4a:d4:
         27:f5:ee:8a:2c:b9:1f:97:bd:d5:cc:ee:06:33:95:20:89:1f:
         02:02:6d:ae:04:3c:d7:5c:76:6b:65:71:17:dd:e6:79:3a:a6:
         c5:27:7e:97:e9:15:e1:8e:84:b0:3e:f9:af:14:2f:95:d7:53:
         cc:40:cc:fc:a8:e8:71:62:80:2e:6b:30:f5:76:ea:33:58:7e:
         74:4e:56:96:ba:18:ce:d9:f8:47:d9:ed:d3:3f:02:1b:74:1d:
         b0:6a:96:8f:96:9f:dd:0d:09:52:63:ba:e2:69:81:d1:2a:78:
         33:10:aa:e4:b9:b7:6d:3b:31:7b:86:53:c9:98:18:b8:2b:18:
         4b:6c:92:da:ea:4f:65:7f:d5:14:ab:ba:4c:4a:21:83:d8:61:
         d2:29:ed:01:36:3f:93:52:7e:87:58:b8:1b:d0:fe:ec:1e:34:
         75:aa:68:46
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUJgY0s+gJzNSxca+wQ/9ejSqrdpwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCQTNEMkFBMUM2QTQwN0FENjZEQkIxQTc2OTQ2OEMy
RTVCNEU1RjAeFw0yNDAyMjgwMDUwNTdaFw0yNTAyMjYwMDU1NTdaMDMxMTAvBgNV
BAMTKDdENjg2QkNGQzkwNURFMDk3MDEyMzI0N0UyOEU0NjIzNzE1MDc1MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJ8eF5hUxwdPQUWKfBGio/8bV
+WveXMkq7Sh7GX221LmdNH+Tp7ptjPW9YOIHhF4eBdywpMBxExSlDMNmHGKCsMSf
tU6TQhDX/7kW3LceTYWIl0qoA3IvR1K1YFPVmpE/ygiCQENSfH3yDwpwCy4cijwz
OSgwGog2uau+CUITwb3cUGv9yu/yW5ea1sTT8ChvSqs0ma5bx3bSp0u8Aq6+fyYC
m5S82lRGsvPDFOVPixN9+Z8GeoXY2ybilsA7r6b4LDXOP6tdf1GFe34Eu/g2pIbN
eyDbcKQxEj9JNo6FcW1wdrRWjdiSBJCMA8mdZvGsxQLCDvchkm3XkqSbuYoXAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUfWhrz8kF3glwEjJH4o5GI3FQdSMwHwYDVR0j
BBgwFoAUMLo9KqHGpAetZtuxp2lGjC5bTl8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVZuOGpQdHk5clppR2ZOanc2WmlmR041ZXBHYTRlQlk0dTZaZXM3akpk
enQvMC8zMEJBM0QyQUExQzZBNDA3QUQ2NkRCQjFBNzY5NDY4QzJFNUI0RTVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwQkEzRDJBQTFDNkE0MDdB
RDY2REJCMUE3Njk0NjhDMkU1QjRFNUYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VWbjhqUHR5OXJaaUdmTmp3NlppZkdONWVwR2E0ZUJZNHU2WmVzN2pKZHp0LzAv
MzEzNzM3MmUzODJlMzMzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzMjM4
MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAbEIJjANBgkqhkiG9w0BAQsFAAOCAQEAJQU0O7KdwKBT
hT0TcDNbMuw+OOxYjgIeP6kyflWvLOOR0iyDqnPp0ETh08PTlG60Ibf82dfjpscZ
mmzM7wFVt//k/puiB3stbm3Cb2+5hyIgzP4hjw41zkrUJ/Xuiiy5H5e91czuBjOV
IIkfAgJtrgQ811x2a2VxF93meTqmxSd+l+kV4Y6EsD75rxQvlddTzEDM/KjocWKA
Lmsw9XbqM1h+dE5WlroYztn4R9nt0z8CG3QdsGqWj5af3Q0JUmO64mmB0Sp4MxCq
5Lm3bTsxe4ZTyZgYuCsYS2yS2upPZX/VFKu6TEohg9hh0intATY/k1J+h1i4G9D+
7B40dapoRg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org