Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e34332e302f32342d3234203d3e20323632383330.roa
File:                     3137372e382e34332e302f32342d3234203d3e20323632383330.roa (raw, json)
Hash identifier:          7afFkfgyOgPK/e3dOKbKjrVTD9Mh7ifJ6OFWIgFxrJM=
Subject key identifier:   4E:34:4E:11:2D:25:0C:6A:3E:6C:F7:DC:32:19:13:A2:52:FD:E0:D7
Certificate issuer:       /CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
Certificate serial:       7864BF5728BCE6700FA8DD9F0FC60DC65B8B9D47
Authority key identifier: 30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e34332e302f32342d3234203d3e20323632383330.roa
Signing time:             Wed 28 Feb 2024 00:55:54 +0000
ROA not before:           Wed 28 Feb 2024 00:50:54 +0000
ROA not after:            Wed 26 Feb 2025 00:55:54 +0000
asID:                     262830
IP address blocks:        177.8.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:64:bf:57:28:bc:e6:70:0f:a8:dd:9f:0f:c6:0d:c6:5b:8b:9d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
        Validity
            Not Before: Feb 28 00:50:54 2024 GMT
            Not After : Feb 26 00:55:54 2025 GMT
        Subject: CN=4E344E112D250C6A3E6CF7DC321913A252FDE0D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:02:7e:6e:06:5c:50:a9:7a:27:cc:11:a9:39:
                    51:a6:d9:de:eb:19:05:07:53:00:85:60:70:17:61:
                    0e:99:82:f5:7f:bb:7a:c3:88:30:9c:79:13:33:d3:
                    80:6d:0d:0d:bd:4b:ca:70:39:62:46:5b:fa:3c:b7:
                    fe:2c:79:61:24:2c:a2:a9:60:47:7d:2f:95:f5:cf:
                    58:7e:01:c4:81:83:27:23:2f:8d:0a:21:92:59:42:
                    41:15:fc:ba:76:b9:2a:c0:50:28:af:e9:46:41:de:
                    22:48:a5:31:72:d9:88:07:49:8e:b6:ca:01:85:30:
                    6a:f7:18:98:51:2e:cb:80:70:87:35:89:37:f7:04:
                    b1:56:ed:e6:34:94:a8:57:c3:b4:10:f9:b6:8a:f2:
                    e6:a7:5f:10:e5:ac:01:f6:9a:39:34:fe:fc:30:f7:
                    ae:a0:63:8b:a0:f0:bf:80:f1:a6:03:e9:95:8c:4d:
                    ac:e7:44:07:e6:cd:63:9d:fc:50:21:14:8f:8f:4c:
                    b9:8a:6f:26:e9:b2:42:ce:9b:02:82:fd:33:5a:f9:
                    f4:f0:e5:e0:6e:f2:7e:1b:a1:c9:bd:d5:0d:9d:7e:
                    a0:17:5b:5d:96:2d:73:7e:08:26:10:20:5a:4f:14:
                    f8:cc:fe:c2:3e:8f:a2:a3:2c:e1:e2:84:d3:b0:25:
                    63:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:34:4E:11:2D:25:0C:6A:3E:6C:F7:DC:32:19:13:A2:52:FD:E0:D7
            X509v3 Authority Key Identifier:
                keyid:30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e34332e302f32342d3234203d3e20323632383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:d8:8c:98:93:ff:41:ca:00:95:38:5a:71:d5:74:53:fc:40:
         63:e0:ca:d3:1d:ea:f0:28:e4:d0:01:ed:90:61:e6:48:97:30:
         c0:f2:eb:3f:54:d8:84:af:f3:18:44:7b:98:03:27:e2:5f:23:
         53:f9:5b:54:d6:aa:b4:45:63:90:c6:cb:bd:8f:62:fb:5c:64:
         b6:05:4d:dc:6b:90:ba:d9:aa:64:ed:24:f0:93:0e:fb:9a:03:
         2a:40:01:94:41:a6:fb:9a:83:66:31:ae:8b:58:1c:b5:a9:7c:
         72:b8:aa:62:44:d4:8f:f3:a0:98:09:d9:10:4d:ed:6e:c6:04:
         5b:2d:9c:96:2d:88:e2:05:7d:21:40:6f:d4:ea:72:f9:b4:a1:
         7e:0d:54:b7:04:f4:7b:1b:41:3a:3b:89:a9:f4:7e:18:e7:7b:
         ed:1a:1b:e7:43:9d:ec:98:26:7d:ef:9b:52:f2:10:81:8a:d6:
         6f:d2:ca:39:94:a1:7f:c6:c5:6d:9a:81:22:35:70:f9:56:75:
         3d:2a:dc:2d:4d:31:36:00:27:e4:dd:0d:db:72:54:e5:23:35:
         d6:e6:3d:d8:09:99:00:fa:e3:6c:a5:48:7e:09:fb:5f:3b:91:
         56:11:13:b5:77:6c:0a:8f:a5:14:ce:fb:01:6c:56:3e:ff:04:
         16:23:b1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org