Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e34302e302f32332d3233203d3e20323632383330.roa
File:                     3137372e382e34302e302f32332d3233203d3e20323632383330.roa (raw, json)
Hash identifier:          yDqxYwCtiRcUIypSIU14MKj+M2VOTstTxYbfp+Dfxvs=
Subject key identifier:   E1:4D:2A:E1:82:3B:D5:E2:5F:B7:B2:F7:DF:40:33:EB:78:5E:46:4D
Certificate issuer:       /CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
Certificate serial:       7DD8BCA456BC50466EDA9B4DB7536AA92B101A2D
Authority key identifier: 30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e34302e302f32332d3233203d3e20323632383330.roa
Signing time:             Wed 28 Feb 2024 00:56:00 +0000
ROA not before:           Wed 28 Feb 2024 00:51:00 +0000
ROA not after:            Wed 26 Feb 2025 00:56:00 +0000
asID:                     262830
IP address blocks:        177.8.40.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d8:bc:a4:56:bc:50:46:6e:da:9b:4d:b7:53:6a:a9:2b:10:1a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
        Validity
            Not Before: Feb 28 00:51:00 2024 GMT
            Not After : Feb 26 00:56:00 2025 GMT
        Subject: CN=E14D2AE1823BD5E25FB7B2F7DF4033EB785E464D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7b:c5:e8:00:20:7f:83:53:3f:45:39:cb:3d:
                    37:98:0e:95:7c:d5:6d:f4:18:1d:de:11:90:1a:6e:
                    53:da:05:3b:d7:87:6c:f4:98:be:32:b9:b0:4d:aa:
                    e7:4c:3e:a3:a5:b5:90:14:04:68:43:ac:a7:86:ed:
                    1c:22:f3:91:bb:43:8f:25:13:df:04:87:bf:85:8e:
                    88:81:8f:11:6b:0d:f0:bf:8b:d2:ae:bd:d2:dc:e4:
                    7c:1b:f5:2d:61:a6:72:a0:9c:19:1a:34:2a:c5:6f:
                    99:a7:71:a9:07:7c:23:80:1a:6d:96:c0:da:05:0b:
                    37:7f:53:3e:68:03:87:a2:ae:35:b7:6d:60:d0:06:
                    d4:ef:51:ac:bf:32:00:ac:8d:f8:bf:1a:4a:1b:54:
                    d4:32:76:2c:90:45:53:7b:c1:de:66:61:55:56:df:
                    a7:f5:fd:d6:06:ba:32:06:5a:f7:63:f5:fc:d6:e5:
                    5a:bd:f6:57:80:88:51:20:f7:15:08:d2:d8:cc:55:
                    0c:c5:38:67:25:bb:1f:08:fa:49:d1:58:e9:07:60:
                    cb:21:b8:c8:11:50:95:6f:a6:4e:4c:58:62:05:07:
                    43:e4:24:c4:49:b2:4a:4e:b3:58:1b:e7:cd:ec:17:
                    f0:11:5e:2e:7c:50:5f:90:5c:23:b3:a7:52:45:f2:
                    24:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4D:2A:E1:82:3B:D5:E2:5F:B7:B2:F7:DF:40:33:EB:78:5E:46:4D
            X509v3 Authority Key Identifier:
                keyid:30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e34302e302f32332d3233203d3e20323632383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:e5:76:82:1c:e1:d5:e9:5a:5f:6f:11:de:88:88:6a:4d:3d:
         02:3b:2e:3b:cd:ac:08:88:8c:ec:ed:48:4c:a9:f1:6b:4c:af:
         5c:15:f8:16:59:cb:04:4c:dd:ac:60:e9:6e:53:2c:1a:81:07:
         bd:14:58:3f:f9:39:93:a7:c9:b7:7f:73:8a:7b:c1:d4:80:6c:
         8a:ac:d9:a0:0d:94:76:df:bf:06:0c:49:42:e1:3e:5a:a2:7f:
         80:12:5a:10:31:d6:7f:34:5c:72:67:aa:85:4c:a8:7b:fe:ee:
         82:a4:9e:66:ed:c0:dd:d2:87:71:80:43:8f:9a:d5:75:3d:6a:
         b0:0b:57:d5:cf:8b:16:38:a8:c4:52:42:25:e7:1a:1a:85:67:
         c6:f2:9b:bd:e9:55:75:44:36:46:ea:a4:76:29:53:01:de:0d:
         da:8b:1a:da:a5:39:79:5d:5c:a5:29:d3:12:f8:93:64:ff:63:
         07:04:29:2d:ff:44:65:b5:d8:8e:03:00:b9:de:8e:a5:4c:69:
         05:18:0e:bd:eb:b6:76:98:04:e2:4c:16:81:61:b6:14:c8:f0:
         ad:1c:83:48:fb:5b:d3:f2:a0:bd:e1:81:d4:44:dc:fa:35:11:
         d6:b6:9c:e3:d9:d8:98:c9:61:72:d1:3b:83:61:1e:9d:5e:1c:
         df:79:29:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org