Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e34352e302f32342d3234203d3e20323632383330.roa
File:                     3137372e382e34352e302f32342d3234203d3e20323632383330.roa (raw, json)
Hash identifier:          deYcUWGVM+DblasuwMiu7vYMCD8chRCxhR9zDnV3gp4=
Subject key identifier:   13:5E:8E:3E:D1:E2:B3:A4:41:3D:8C:FE:82:09:87:F4:FD:66:CB:02
Certificate issuer:       /CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
Certificate serial:       41F6E300BBAAD8466685A54A0AB48ED7BE63619E
Authority key identifier: 30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e34352e302f32342d3234203d3e20323632383330.roa
Signing time:             Wed 28 Feb 2024 00:55:55 +0000
ROA not before:           Wed 28 Feb 2024 00:50:55 +0000
ROA not after:            Wed 26 Feb 2025 00:55:55 +0000
asID:                     262830
IP address blocks:        177.8.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f6:e3:00:bb:aa:d8:46:66:85:a5:4a:0a:b4:8e:d7:be:63:61:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
        Validity
            Not Before: Feb 28 00:50:55 2024 GMT
            Not After : Feb 26 00:55:55 2025 GMT
        Subject: CN=135E8E3ED1E2B3A4413D8CFE820987F4FD66CB02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:de:6b:8b:b9:52:35:56:03:49:a1:da:db:a9:
                    32:57:62:d7:d1:c9:1e:31:3c:79:d8:7b:15:81:e4:
                    68:53:26:34:8c:d9:f0:b3:33:f5:57:f9:ac:31:8f:
                    fa:3e:76:88:8d:ac:36:fb:b7:af:b3:16:db:bc:f9:
                    e8:82:64:3c:b8:84:67:d2:36:1e:96:99:cf:9d:3c:
                    35:fe:0c:9b:17:2d:80:26:da:79:65:9d:6d:05:2f:
                    2b:2d:e1:83:a3:db:74:58:72:e8:52:74:2f:c9:2e:
                    81:fa:ee:04:33:85:c3:b9:ca:f9:dc:e7:63:69:8c:
                    11:a9:db:13:ed:1f:ab:1e:66:ec:59:81:9c:09:03:
                    bb:6e:ad:2d:ff:b8:eb:32:31:74:ca:68:1d:10:a9:
                    cc:80:79:6a:1e:f6:69:88:31:52:47:dc:b6:67:b6:
                    e9:5d:62:d5:d7:f9:8e:3a:32:87:27:e3:8f:11:a3:
                    b6:9a:24:53:2b:fb:5b:ce:16:cb:a4:ed:0b:18:42:
                    7e:bf:8c:e4:4d:c6:96:58:20:e2:28:92:38:16:c7:
                    19:dc:39:d0:ab:3e:70:f8:81:39:35:d3:fb:68:44:
                    16:7b:9f:ae:92:4b:de:98:2c:e7:cd:61:f5:b6:2c:
                    dc:72:07:c1:d5:b8:13:79:6e:9e:ec:e0:ff:6d:8b:
                    07:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5E:8E:3E:D1:E2:B3:A4:41:3D:8C:FE:82:09:87:F4:FD:66:CB:02
            X509v3 Authority Key Identifier:
                keyid:30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e34352e302f32342d3234203d3e20323632383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:25:92:ba:fa:03:a6:c8:d7:13:19:5a:6b:a4:0c:30:86:3e:
         cd:bd:0c:fc:3a:51:1d:a1:78:46:d5:23:df:63:0a:6f:57:04:
         38:01:53:2b:8d:84:d2:48:c3:fe:91:e7:b5:9d:f2:48:68:24:
         e9:c6:03:63:55:12:6d:b0:13:45:c0:af:28:54:85:ea:9b:5d:
         57:b0:d2:c9:3f:61:b6:35:47:c7:28:82:66:46:2a:e1:01:38:
         b9:7c:b4:a7:d9:4f:e3:5a:d4:62:e5:60:32:c4:73:e5:0b:92:
         77:ba:4e:72:04:3f:09:d9:3e:d4:c6:c8:14:df:78:fd:a8:04:
         8a:c5:de:f8:77:95:15:ca:68:40:e6:4c:d5:40:49:8e:32:59:
         9c:88:56:cd:89:1e:f3:2b:a7:77:8d:ed:c4:f0:0e:5b:0a:10:
         89:05:38:19:2f:5e:e6:79:01:5d:ed:44:04:2a:1a:15:06:47:
         55:38:6a:21:36:02:20:85:d8:a9:4d:88:76:e3:75:10:94:44:
         d5:90:d6:20:e7:7a:29:a3:3b:18:26:2c:83:66:fb:e2:a6:b6:
         66:72:20:a4:f2:6c:d9:ba:93:26:be:b6:41:0d:21:66:ae:a8:
         ec:ff:78:40:0e:f5:f6:9b:1d:07:72:82:ff:3a:80:be:8b:2b:
         32:50:e6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org