Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e34322e302f32332d3233203d3e20323632383330.roa
File:                     3137372e382e34322e302f32332d3233203d3e20323632383330.roa (raw, json)
Hash identifier:          NpOKhmz3YDr8/qKp/RubxoJLI+khfQjzyHMJ9+7uBlM=
Subject key identifier:   50:81:A2:E6:51:AE:B3:54:84:8D:10:65:92:46:6B:E1:D1:3E:0E:59
Certificate issuer:       /CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
Certificate serial:       01971BAE4876CBF566CD4B1FCC42F2B253E17152
Authority key identifier: 30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e34322e302f32332d3233203d3e20323632383330.roa
Signing time:             Wed 28 Feb 2024 00:55:59 +0000
ROA not before:           Wed 28 Feb 2024 00:50:59 +0000
ROA not after:            Wed 26 Feb 2025 00:55:59 +0000
asID:                     262830
IP address blocks:        177.8.42.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:1b:ae:48:76:cb:f5:66:cd:4b:1f:cc:42:f2:b2:53:e1:71:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
        Validity
            Not Before: Feb 28 00:50:59 2024 GMT
            Not After : Feb 26 00:55:59 2025 GMT
        Subject: CN=5081A2E651AEB354848D106592466BE1D13E0E59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9d:1d:8c:fb:36:cf:fc:61:3e:fe:54:ed:25:
                    fe:ba:8f:7c:25:cc:23:52:64:f5:ea:e1:ba:20:f8:
                    07:fd:3c:ae:c1:17:a8:ea:40:ec:60:e3:07:3e:44:
                    c3:25:9c:4c:ed:9c:d8:e9:5f:9e:88:e1:a9:36:70:
                    12:80:21:10:57:dc:eb:6c:5a:7b:e1:e9:4d:36:fe:
                    4b:44:43:9b:b1:3d:a0:b8:34:60:cc:ef:a8:4f:e3:
                    01:92:27:df:78:32:d0:21:94:85:8c:92:c6:e9:14:
                    57:65:02:52:74:37:67:f8:80:2c:d9:09:8a:80:a3:
                    e6:56:6d:f2:05:a4:9f:6b:be:aa:72:92:ef:0f:23:
                    8e:d5:92:4e:79:a3:49:8b:b8:f5:5c:00:2e:c6:53:
                    9d:15:73:de:ca:e6:6d:53:bb:63:cb:98:61:9f:d8:
                    e1:e8:82:6a:b8:66:6c:d8:b8:7d:18:e5:b2:cd:46:
                    b7:b7:34:fe:99:29:23:61:9d:3d:69:fe:09:e1:ec:
                    55:d0:90:46:fe:bf:23:cf:b1:4a:a3:40:2a:f8:e1:
                    80:0e:1e:d5:b3:5f:77:4b:63:46:28:cc:88:6f:18:
                    18:d4:59:aa:b5:d7:d4:a7:98:3e:73:0a:88:65:ff:
                    c2:a3:5a:b5:0e:59:5e:7c:41:e4:f2:08:5a:f8:b2:
                    12:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:81:A2:E6:51:AE:B3:54:84:8D:10:65:92:46:6B:E1:D1:3E:0E:59
            X509v3 Authority Key Identifier:
                keyid:30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e34322e302f32332d3233203d3e20323632383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:46:82:4f:0e:65:ac:6d:b5:5b:ca:35:fe:70:04:f4:d4:27:
         77:98:2c:6b:dc:6a:4c:01:bf:a1:d6:46:6f:f5:73:ab:08:b9:
         ad:0b:91:8e:f5:0d:3c:57:32:3b:7e:6c:05:28:e2:18:4b:d7:
         e7:fb:bc:04:dd:71:bd:9c:eb:41:4e:0e:fa:9a:fc:9f:d9:ac:
         a9:02:44:81:8e:db:b5:75:98:63:f5:be:f6:68:2e:c0:87:f1:
         27:fd:1c:4c:05:90:9a:82:b4:c6:aa:d9:d3:c2:1f:33:63:59:
         f9:47:d5:12:28:f6:7d:ca:9e:7f:f6:20:18:68:6b:be:5d:0b:
         7b:33:5e:c4:ca:2b:fb:2c:a3:55:b7:39:35:98:c6:70:55:d6:
         d2:af:a4:7b:61:63:0c:18:a6:84:4f:ff:a2:fa:0d:6a:39:20:
         2a:26:2c:f8:b0:ef:f8:14:dc:1c:89:14:4e:24:dd:18:02:70:
         bd:38:fc:25:d8:3b:3c:ed:f5:63:4b:69:83:7c:c8:30:5d:08:
         8f:00:86:6f:bb:0c:37:fd:1a:d1:d1:4a:cb:03:9c:e5:db:3d:
         c1:2c:bd:26:82:7b:2b:ae:08:82:96:06:32:53:74:e2:bf:ff:
         20:95:2d:a9:cd:3c:4e:d7:c5:a9:fc:e4:e2:62:e1:74:cb:d4:
         dd:af:7a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org