Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33392e302f32342d3234203d3e20323632383330.roa
File:                     3137372e382e33392e302f32342d3234203d3e20323632383330.roa (raw, json)
Hash identifier:          GxU9xtWNbP7s3GKsC9WWQVGvTWwOmTQhfrRINKQM1wA=
Subject key identifier:   B0:CA:8F:82:19:E3:7A:EB:43:8A:6F:E8:6C:3D:66:7C:4B:C0:82:93
Certificate issuer:       /CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
Certificate serial:       65CEDF78B689B90135E256A9F7F82342DBD282B6
Authority key identifier: 30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33392e302f32342d3234203d3e20323632383330.roa
Signing time:             Wed 28 Feb 2024 00:55:56 +0000
ROA not before:           Wed 28 Feb 2024 00:50:56 +0000
ROA not after:            Wed 26 Feb 2025 00:55:56 +0000
asID:                     262830
IP address blocks:        177.8.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ce:df:78:b6:89:b9:01:35:e2:56:a9:f7:f8:23:42:db:d2:82:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
        Validity
            Not Before: Feb 28 00:50:56 2024 GMT
            Not After : Feb 26 00:55:56 2025 GMT
        Subject: CN=B0CA8F8219E37AEB438A6FE86C3D667C4BC08293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d3:35:a2:06:37:bd:cd:3a:3f:55:2f:5b:3f:
                    e4:3f:cc:0a:cf:ce:69:fe:38:44:e1:0e:c7:9d:fa:
                    be:22:aa:72:83:99:3c:18:c1:ba:72:5b:a2:6c:00:
                    a1:ad:9a:a7:b1:10:18:a5:6c:03:3f:ed:6b:42:ac:
                    4e:5c:60:c7:8e:b2:f4:43:40:32:45:a6:a7:a2:63:
                    6e:8d:59:c7:f9:2a:5b:a3:f0:42:fe:e2:1f:7e:1d:
                    79:7f:50:d8:b6:de:54:71:8c:a3:be:0c:a0:8c:2a:
                    39:d7:03:4a:30:f1:bc:8f:de:a6:cd:cc:74:7d:53:
                    9a:19:ec:cf:30:6b:16:b8:99:38:97:c4:fd:b3:0a:
                    3e:f6:34:82:2e:65:c5:18:eb:eb:3e:fd:11:82:11:
                    b6:44:c2:75:81:75:22:9b:ca:60:b7:06:c7:44:3e:
                    b7:45:2f:4b:b9:18:ac:91:2e:e0:cf:d2:cc:f6:cb:
                    87:c5:8c:a0:c3:3d:b5:71:14:2c:ff:f5:fb:0e:6c:
                    fc:3f:02:fe:a2:f6:f4:73:a1:0c:4e:4b:c1:ef:54:
                    3f:a8:af:97:3e:15:7d:28:cf:80:43:e1:ec:3a:73:
                    98:bb:e2:1d:4b:76:96:c1:82:ee:fb:71:7b:bd:e1:
                    20:e4:a3:7b:4e:58:66:40:39:07:82:fd:22:e2:96:
                    c0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CA:8F:82:19:E3:7A:EB:43:8A:6F:E8:6C:3D:66:7C:4B:C0:82:93
            X509v3 Authority Key Identifier:
                keyid:30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e33392e302f32342d3234203d3e20323632383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:84:90:b5:53:6b:a9:5c:8c:4c:05:90:90:9b:c6:ac:3d:61:
         91:11:57:7e:57:b0:3d:48:e4:97:f2:fe:3c:ec:bc:a4:43:48:
         36:ee:07:ef:69:aa:41:53:58:e4:36:50:01:e6:3c:a2:cd:52:
         6c:21:b1:72:21:ee:47:60:22:4d:6c:e7:f0:b8:07:0b:ac:4b:
         24:22:c5:36:7e:c1:4e:68:53:45:9e:23:07:54:d7:27:c4:44:
         e7:67:3a:93:59:de:1f:37:c2:55:ef:ba:a9:b3:69:61:0a:86:
         74:bd:6b:43:b2:54:51:a0:d0:06:74:25:df:d0:d3:18:04:dc:
         a9:9d:18:2a:98:f6:cb:7b:20:42:f7:62:dc:6c:b7:c7:dd:3a:
         5d:4a:7d:38:f7:14:89:99:bf:d4:25:02:bf:92:87:44:75:09:
         e3:07:a4:07:dd:d4:14:a5:9f:1d:07:4f:c3:f0:77:46:52:0f:
         ee:bf:8a:d6:3b:33:a3:49:33:3e:10:81:30:b3:a5:cd:45:c3:
         ce:38:bb:27:14:e1:89:8c:5d:51:01:bf:9e:32:42:4c:e5:74:
         03:e8:1d:1a:13:b5:f1:d0:38:ff:9c:58:75:54:0b:58:09:9e:
         f8:4a:fa:dd:a3:f5:0c:ac:f4:ac:34:18:5c:9e:39:90:0e:06:
         b9:df:44:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org