Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33382e302f32342d3234203d3e20323632383330.roa
File:                     3137372e382e33382e302f32342d3234203d3e20323632383330.roa (raw, json)
Hash identifier:          5SsLQO/AaRtgsE6i3XBTqVovPp3L18tC6lAyVi+Et14=
Subject key identifier:   8F:66:59:DA:B7:66:8F:BC:C8:4C:7C:23:A7:01:43:EE:48:71:A9:BA
Certificate issuer:       /CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
Certificate serial:       52BA950D9DFEE1762ED55E3A3F075173E642CA79
Authority key identifier: 30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33382e302f32342d3234203d3e20323632383330.roa
Signing time:             Wed 28 Feb 2024 00:56:02 +0000
ROA not before:           Wed 28 Feb 2024 00:51:02 +0000
ROA not after:            Wed 26 Feb 2025 00:56:02 +0000
asID:                     262830
IP address blocks:        177.8.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ba:95:0d:9d:fe:e1:76:2e:d5:5e:3a:3f:07:51:73:e6:42:ca:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
        Validity
            Not Before: Feb 28 00:51:02 2024 GMT
            Not After : Feb 26 00:56:02 2025 GMT
        Subject: CN=8F6659DAB7668FBCC84C7C23A70143EE4871A9BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6e:1c:8b:da:c1:49:b2:d5:06:82:9a:27:58:
                    8a:e7:d8:75:77:ce:0b:5a:ae:09:fd:68:f4:a6:74:
                    cd:62:d1:5f:ee:59:8d:ac:a3:1e:44:06:9d:11:46:
                    f0:90:45:6f:c8:40:34:0f:a4:9d:81:ca:d5:41:c1:
                    75:59:87:71:9f:26:63:0c:0c:eb:ce:d4:ae:25:d8:
                    96:61:3d:e2:e0:2a:31:55:14:7f:d0:64:5e:d0:9e:
                    ce:21:b0:26:1d:a7:54:19:b2:16:cb:6e:53:a1:21:
                    23:71:6a:9f:73:14:0b:28:db:97:84:70:6d:75:37:
                    61:67:00:2c:f0:c1:ed:b1:2b:92:02:f4:07:ff:e0:
                    b0:f3:37:41:cb:aa:c5:be:6d:55:0a:88:e4:d7:18:
                    80:d8:0a:08:72:1a:39:5d:b9:9a:da:fc:db:a5:ab:
                    cd:c1:14:93:52:21:66:e6:c0:79:29:70:29:9e:ed:
                    9d:28:0a:72:f4:46:c4:ce:f5:15:7b:23:d6:d9:62:
                    89:e6:87:a0:7c:f6:a1:9e:1a:4e:d3:d7:d7:cf:03:
                    16:ea:46:be:15:63:ca:b3:37:37:ed:27:ee:16:49:
                    30:d7:b6:cb:59:86:1a:e6:c2:76:9d:82:7a:f5:e0:
                    e4:8c:2e:50:d7:a0:ed:fb:40:39:59:e2:3f:94:3a:
                    b0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:66:59:DA:B7:66:8F:BC:C8:4C:7C:23:A7:01:43:EE:48:71:A9:BA
            X509v3 Authority Key Identifier:
                keyid:30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33382e302f32342d3234203d3e20323632383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:83:80:dc:f2:e0:40:9b:be:ec:15:13:fa:9c:73:98:9f:f0:
         32:2a:41:83:5e:af:36:9f:b5:b9:a5:85:6b:c4:44:94:56:7c:
         fa:af:b3:30:ed:fd:ba:4c:ae:fb:d7:39:cb:81:36:e2:b0:5c:
         51:49:75:93:53:c3:51:be:31:b2:54:2f:e8:38:ef:0a:9e:47:
         b1:80:59:54:34:f0:63:02:b0:4d:77:ca:cb:c8:0f:5d:73:93:
         f5:84:df:c8:9f:67:73:58:d5:3c:bf:1f:aa:65:37:c2:48:2f:
         a8:b7:d2:7d:5a:0a:df:5a:fe:4d:01:f7:99:c7:10:e6:56:08:
         21:b3:45:31:a3:15:2d:3e:7c:41:b9:10:a4:f0:ae:0c:33:5d:
         53:82:8f:ce:da:ac:89:00:2f:72:c8:2a:22:1e:62:a6:b0:01:
         70:22:ec:e6:33:97:b0:2c:7d:01:20:9b:03:eb:87:a8:a3:40:
         96:07:08:14:a5:b0:be:2c:11:e7:c7:b4:2b:6b:19:1b:7d:e6:
         65:8b:64:81:24:4b:dd:c5:b6:56:f7:f7:86:15:29:8b:4b:6b:
         c7:77:4b:1c:51:8e:db:f5:2f:47:32:5a:91:93:0c:68:5a:2d:
         e7:1c:bd:dd:11:63:66:3f:9f:bc:fe:33:78:c0:15:1d:f9:26:
         b8:70:51:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org