Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e34302e302f32322d3232203d3e20323632383330.roa
File:                     3137372e382e34302e302f32322d3232203d3e20323632383330.roa (raw, json)
Hash identifier:          ovWO2wFbAvP6o6DTZmrzbE9qiNb0L7qnHG/DwoXbs1w=
Subject key identifier:   EA:B9:70:59:00:0E:A8:48:92:8D:52:94:A1:42:02:39:82:DD:F4:F4
Certificate issuer:       /CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
Certificate serial:       75BF76633784C70AA3FA4C9F3417208A321D5663
Authority key identifier: 30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e34302e302f32322d3232203d3e20323632383330.roa
Signing time:             Thu 01 Feb 2024 11:12:59 +0000
ROA not before:           Thu 01 Feb 2024 11:07:59 +0000
ROA not after:            Thu 30 Jan 2025 11:12:59 +0000
asID:                     262830
IP address blocks:        177.8.40.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:bf:76:63:37:84:c7:0a:a3:fa:4c:9f:34:17:20:8a:32:1d:56:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
        Validity
            Not Before: Feb  1 11:07:59 2024 GMT
            Not After : Jan 30 11:12:59 2025 GMT
        Subject: CN=EAB97059000EA848928D5294A142023982DDF4F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3a:3f:85:48:de:aa:5e:ec:8e:32:73:49:ef:
                    f2:36:ab:65:49:83:1b:f4:e9:82:fa:fe:cc:57:71:
                    2f:17:e4:1f:bd:fa:25:ee:06:17:9e:89:4f:2c:5e:
                    96:52:a5:4e:94:66:5b:d1:25:de:4d:59:d8:5d:a1:
                    ee:b7:86:3b:71:0f:f6:7a:ff:00:16:8c:7a:43:48:
                    b8:89:db:58:55:72:78:36:94:42:44:d4:af:8c:c9:
                    1f:29:2b:e4:3d:23:31:8b:c2:c9:e4:61:1f:b8:28:
                    37:16:f9:8f:de:01:df:15:b4:61:7d:ff:3b:12:d9:
                    53:ef:dd:0f:3d:2d:2b:5a:05:3d:b8:88:9b:76:5b:
                    e2:d2:f4:08:b7:6e:0a:53:b4:32:df:f8:0d:76:d1:
                    b6:1a:a3:45:57:b1:7c:c1:01:e8:05:2d:25:9b:a3:
                    e0:cc:da:d2:be:97:d4:dc:2e:83:bf:25:85:bd:9f:
                    be:58:86:14:e4:c2:49:89:db:b6:e0:34:ed:4b:03:
                    e0:e7:31:ac:83:53:a1:61:ec:ae:6f:30:60:75:10:
                    74:bc:eb:a0:95:3b:60:86:79:26:aa:0a:94:b2:39:
                    44:5e:c8:e8:54:5c:11:5f:4e:b7:66:14:4b:f6:32:
                    96:17:8a:4d:3d:94:b1:9d:b5:39:f1:19:27:7f:55:
                    a8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B9:70:59:00:0E:A8:48:92:8D:52:94:A1:42:02:39:82:DD:F4:F4
            X509v3 Authority Key Identifier:
                keyid:30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e34302e302f32322d3232203d3e20323632383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:25:3c:73:38:44:17:90:03:68:05:8e:fc:65:f9:32:3d:a9:
         46:f9:c9:6d:ae:db:50:17:ab:e7:62:27:20:b0:e2:c8:a6:2e:
         9b:49:2e:5e:f6:e2:c0:ce:4a:df:ad:e9:49:44:57:6c:5d:c9:
         16:5c:6c:56:b2:59:4d:e3:5c:d2:10:0f:cd:d5:bb:d6:42:95:
         1c:c9:2b:99:5f:96:9f:bb:4a:0c:31:4f:83:ac:30:e8:f1:3c:
         cf:b9:5e:70:d8:3b:0b:d2:8d:8d:42:22:bb:97:f6:7d:9c:a0:
         24:e9:bb:93:8b:c2:f5:c0:93:c9:85:b1:9a:eb:00:01:a4:8a:
         2c:d2:45:41:04:78:87:50:07:f3:fd:8c:80:69:7d:b9:51:9b:
         6d:f5:b5:41:f7:4d:b8:1f:0d:2c:a3:06:f2:c6:d8:3f:2a:8e:
         91:47:0a:be:bb:6d:10:0f:c4:4b:78:2c:57:3b:c1:c4:d6:48:
         67:fd:5c:6e:17:c5:a1:83:c7:e9:06:27:82:14:e5:05:50:5f:
         92:c7:e7:f0:2c:99:ac:4e:47:5a:da:7c:19:79:77:6c:f7:a1:
         80:99:d1:6f:e6:6b:3d:a4:f5:dd:e7:51:fd:fc:57:db:1e:18:
         1f:37:0a:8b:e3:6f:ca:7a:b3:bf:7d:39:4a:24:e9:4b:44:1d:
         7e:c1:cf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org