Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e34302e302f32342d3234203d3e20323632383330.roa
File:                     3137372e382e34302e302f32342d3234203d3e20323632383330.roa (raw, json)
Hash identifier:          LgLUO5hb9zhTFmKKNBa+b34mYT8JKZi80m7e9qTtE/Q=
Subject key identifier:   88:16:C5:BF:33:3D:E4:48:EF:C9:13:50:D9:EA:72:D8:D6:00:3C:F2
Certificate issuer:       /CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
Certificate serial:       6601AEE8C8B616C60B696C443DB91A353208B576
Authority key identifier: 30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e34302e302f32342d3234203d3e20323632383330.roa
Signing time:             Wed 28 Feb 2024 00:56:00 +0000
ROA not before:           Wed 28 Feb 2024 00:51:00 +0000
ROA not after:            Wed 26 Feb 2025 00:56:00 +0000
asID:                     262830
IP address blocks:        177.8.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:01:ae:e8:c8:b6:16:c6:0b:69:6c:44:3d:b9:1a:35:32:08:b5:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
        Validity
            Not Before: Feb 28 00:51:00 2024 GMT
            Not After : Feb 26 00:56:00 2025 GMT
        Subject: CN=8816C5BF333DE448EFC91350D9EA72D8D6003CF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:da:82:04:40:99:06:0d:c7:00:61:50:42:9c:
                    73:12:2e:cc:fb:b8:ea:d5:83:8b:d6:73:0d:e7:56:
                    22:92:48:4e:13:a6:a5:d2:7c:96:3a:7a:e1:ff:a6:
                    b8:a5:38:ea:a2:de:af:27:11:c0:c0:c5:9b:d6:6d:
                    ae:1b:15:cb:90:62:8f:a0:51:02:f3:e4:0c:9f:a5:
                    0f:c3:ab:32:51:e6:b1:2c:32:ed:3a:61:30:20:42:
                    6d:f6:8e:11:d5:d1:e9:93:d1:bf:b9:eb:f1:2f:28:
                    8e:29:6e:ea:bb:96:f4:ea:0b:6a:1c:74:9b:cf:43:
                    ef:49:e0:3d:eb:f8:fb:e9:34:30:3a:e3:ad:ba:32:
                    69:6c:33:07:11:a5:b7:37:da:4f:20:50:7a:f2:4d:
                    f8:3f:e2:e3:ab:6a:60:52:61:bc:ab:d5:95:73:6a:
                    34:6b:c9:c3:5b:c2:fb:a5:2a:95:df:f0:7f:0a:e7:
                    d3:c1:f8:46:02:96:ad:19:ea:36:25:a3:fd:65:56:
                    fd:19:59:ba:e0:9d:77:85:63:79:01:2a:11:8c:72:
                    a6:e5:ad:21:17:3a:35:b1:ea:26:f2:a9:ac:2a:80:
                    0a:75:78:0b:bb:60:13:3b:cf:72:d4:3e:7d:75:ff:
                    94:50:16:02:8e:1d:6f:1b:2f:4f:8a:34:a0:62:2f:
                    0f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:16:C5:BF:33:3D:E4:48:EF:C9:13:50:D9:EA:72:D8:D6:00:3C:F2
            X509v3 Authority Key Identifier:
                keyid:30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e34302e302f32342d3234203d3e20323632383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:96:e5:1e:e1:d8:45:91:29:2d:85:dc:c3:1c:74:4a:c2:0d:
         35:ab:0d:7f:e6:4e:d9:4d:5c:cc:86:89:26:eb:6b:41:00:9f:
         39:4d:36:6c:56:5f:a8:24:dd:44:31:8f:75:66:67:a6:c9:73:
         e8:6e:3a:bf:d8:25:6d:57:59:ad:ef:66:84:3d:c7:38:40:11:
         4a:50:11:d2:7a:0f:45:e6:26:a6:19:49:a5:89:46:83:de:bd:
         37:43:21:b7:27:28:84:8f:61:dc:54:d3:d4:5c:de:e1:63:2d:
         a1:41:84:95:da:e4:11:de:42:8e:66:ec:8e:01:00:9f:ef:ca:
         eb:bf:b7:53:6f:d4:a3:dc:95:d9:64:f9:07:12:2b:13:28:73:
         e7:93:28:a8:2e:ed:69:ad:fc:d9:ae:f2:14:83:43:e5:09:1d:
         24:c8:92:f7:7b:7e:e4:b1:3f:bb:06:26:54:98:b7:f0:18:8f:
         8f:5d:0e:1c:82:f4:62:8c:2f:6e:65:1d:76:67:33:9f:1e:06:
         c8:5d:9b:69:a7:a8:dd:91:b6:76:98:f9:e1:41:c7:77:8a:cb:
         9e:65:52:7b:5a:6e:5c:36:85:62:69:fa:fc:4f:3c:5a:6f:4a:
         92:c6:ee:87:90:93:f8:9c:3a:3a:86:3c:1f:d5:31:19:7d:09:
         0c:5a:2b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org