Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e34342e302f32322d3232203d3e20323632383330.roa
File:                     3137372e382e34342e302f32322d3232203d3e20323632383330.roa (raw, json)
Hash identifier:          dK0ihcvZoVXTGFQqhr2feLA6O3HfnyGwzhkHl8i1f6I=
Subject key identifier:   0F:57:3F:16:F8:35:E2:66:E4:32:F8:7D:EB:AE:91:52:DF:23:38:54
Certificate issuer:       /CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
Certificate serial:       4C78061010E3901978CAC57043BB2DE37F7F5A53
Authority key identifier: 30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e34342e302f32322d3232203d3e20323632383330.roa
Signing time:             Thu 01 Feb 2024 11:12:57 +0000
ROA not before:           Thu 01 Feb 2024 11:07:57 +0000
ROA not after:            Thu 30 Jan 2025 11:12:57 +0000
asID:                     262830
IP address blocks:        177.8.44.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:78:06:10:10:e3:90:19:78:ca:c5:70:43:bb:2d:e3:7f:7f:5a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
        Validity
            Not Before: Feb  1 11:07:57 2024 GMT
            Not After : Jan 30 11:12:57 2025 GMT
        Subject: CN=0F573F16F835E266E432F87DEBAE9152DF233854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8b:94:16:22:54:12:d4:b1:49:a1:db:1b:1e:
                    7a:5d:33:9e:be:b2:15:09:4e:14:a9:4f:12:46:1f:
                    a5:b3:db:11:86:f9:3c:7e:cb:d8:5b:25:b5:12:65:
                    02:90:5d:52:e6:24:63:ce:60:93:67:fd:05:0e:35:
                    c8:81:fb:7f:24:d5:05:bc:94:a3:0f:a9:f0:53:86:
                    05:04:96:fe:02:c5:62:1b:b3:f4:f1:71:48:c1:87:
                    d3:8a:6c:51:1c:aa:19:a9:08:a0:59:f7:b1:6a:19:
                    de:41:de:38:d2:0a:fb:5f:85:0b:36:8a:3f:de:d8:
                    4a:bf:fa:74:81:69:9a:6e:7b:6b:52:65:2e:c0:b6:
                    3a:32:b1:82:49:fc:38:f9:b9:ca:21:24:97:33:52:
                    f1:53:9d:24:cd:d9:5f:9e:ad:87:11:ab:d6:bd:f4:
                    8a:42:a3:9f:14:a6:08:0f:a1:69:13:37:60:4a:5e:
                    4f:05:4e:5c:b5:e2:9f:65:5c:ca:8d:13:0f:b5:68:
                    a4:1b:c8:1d:f2:ea:71:c9:3b:c1:e5:99:ff:5e:2c:
                    86:18:a1:5e:07:a9:bc:a9:4e:bf:ca:d5:f9:cf:1d:
                    a2:13:56:e8:d7:71:0a:23:a6:a2:52:43:d7:7f:44:
                    c9:93:e4:a1:9e:4e:7f:b8:0e:ab:b2:90:35:2b:b5:
                    f1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:57:3F:16:F8:35:E2:66:E4:32:F8:7D:EB:AE:91:52:DF:23:38:54
            X509v3 Authority Key Identifier:
                keyid:30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e34342e302f32322d3232203d3e20323632383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:2c:d9:3c:cb:3d:e6:3b:c9:9e:bb:3f:09:85:55:bd:11:85:
         a6:d1:14:a0:77:b8:75:68:2b:50:b0:f8:52:c6:ca:40:2c:de:
         db:46:79:b1:ad:23:0f:0b:fe:35:ce:93:9e:47:a6:20:e4:92:
         71:3b:b9:e4:4e:63:7c:ec:37:81:0f:4e:4b:e6:ee:16:a2:a8:
         c3:2e:db:70:80:eb:10:f7:5c:1b:a2:57:e6:ac:e4:b8:b1:ca:
         fc:e6:8f:d5:79:42:b8:cf:e5:f1:0c:76:a0:5c:61:05:77:54:
         cc:42:58:ea:5f:ee:08:3c:c1:06:36:2a:02:db:5c:4a:70:7f:
         69:a2:73:ed:73:79:31:18:aa:0a:e6:df:17:b3:0c:fd:d9:99:
         fb:76:a3:22:b5:bb:9a:44:fb:6b:56:ad:24:7f:27:1d:ac:21:
         23:f5:ae:2d:69:af:46:8b:c9:fe:a5:12:24:96:7f:4d:0d:14:
         19:7a:f9:44:a9:7f:1d:3b:a9:55:eb:c1:44:cd:ec:84:7a:03:
         b4:04:7f:6b:c8:c5:10:40:60:71:37:54:24:0d:3f:90:53:61:
         80:e9:d5:f2:93:40:ef:d3:a1:ad:07:1f:df:62:21:69:15:e4:
         2d:52:28:9c:e2:71:95:ef:85:0c:1a:f6:0d:e1:ab:99:e4:52:
         e1:1e:46:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org