Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e34372e302f32342d3234203d3e20323632383330.roa
File:                     3137372e382e34372e302f32342d3234203d3e20323632383330.roa (raw, json)
Hash identifier:          7TMU0nUHlfrHmEeFd3FA6FdsJpqH4kuw6DKtJcpPpzw=
Subject key identifier:   95:AB:E7:B2:77:82:68:4E:E7:0B:8A:31:E4:48:F5:BC:CF:45:90:48
Certificate issuer:       /CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
Certificate serial:       3D041719BEED0219B902058B9FC94AA286B4E038
Authority key identifier: 30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e34372e302f32342d3234203d3e20323632383330.roa
Signing time:             Wed 28 Feb 2024 00:56:02 +0000
ROA not before:           Wed 28 Feb 2024 00:51:02 +0000
ROA not after:            Wed 26 Feb 2025 00:56:02 +0000
asID:                     262830
IP address blocks:        177.8.47.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:04:17:19:be:ed:02:19:b9:02:05:8b:9f:c9:4a:a2:86:b4:e0:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F
        Validity
            Not Before: Feb 28 00:51:02 2024 GMT
            Not After : Feb 26 00:56:02 2025 GMT
        Subject: CN=95ABE7B27782684EE70B8A31E448F5BCCF459048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ba:91:df:d9:5e:a0:f7:e3:82:4a:8f:bf:fc:
                    78:d7:ef:a2:83:a3:be:14:69:00:5e:2a:a5:64:fc:
                    cb:07:2e:82:cc:7a:30:c3:0d:5a:d0:76:55:90:58:
                    ff:c4:c2:2e:65:46:b3:45:3f:03:33:a8:43:8a:3b:
                    f9:de:15:c1:ff:7f:14:83:eb:20:00:e3:95:cc:5d:
                    35:ee:a8:f5:1b:13:e6:9b:98:22:e2:53:6e:87:ba:
                    d0:ab:c1:9e:dd:ba:b0:d6:c2:b0:8c:f0:0e:55:43:
                    ca:f8:93:33:d8:46:71:a1:f9:a1:a6:33:d0:0d:6f:
                    7c:d7:62:f7:29:b3:f8:ad:0a:83:39:29:32:74:0e:
                    47:74:da:a4:90:68:a0:d7:78:40:3d:73:f8:66:a1:
                    24:d4:cf:22:9b:b8:3b:bb:41:b7:d6:71:f4:d3:5e:
                    13:3a:ee:4b:96:6e:8a:30:2d:6c:df:c9:b9:8c:cb:
                    13:36:f0:55:ae:27:c5:f7:a5:f4:d4:a0:bb:5c:fc:
                    20:3d:b4:a8:19:3b:05:99:67:0f:67:43:49:79:87:
                    8c:0e:7c:c6:92:1c:fa:97:40:31:1b:bc:79:a6:4e:
                    cf:6f:26:e2:63:f8:77:91:e1:dc:cc:de:b5:2b:df:
                    ba:2d:dd:0b:4c:45:98:d3:be:c2:ba:1f:b6:af:1c:
                    ef:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AB:E7:B2:77:82:68:4E:E7:0B:8A:31:E4:48:F5:BC:CF:45:90:48
            X509v3 Authority Key Identifier:
                keyid:30:BA:3D:2A:A1:C6:A4:07:AD:66:DB:B1:A7:69:46:8C:2E:5B:4E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30BA3D2AA1C6A407AD66DBB1A769468C2E5B4E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/3137372e382e34372e302f32342d3234203d3e20323632383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:d8:a6:3e:40:ee:3b:e9:70:fb:46:56:81:56:45:31:08:61:
         b7:87:e3:6c:66:af:90:9c:58:16:b8:62:93:89:1e:75:df:75:
         24:0d:10:85:ad:f6:fe:54:d1:b4:c5:72:be:6d:5a:18:cc:7b:
         c2:8c:42:31:c3:3d:9a:83:50:9d:81:fd:22:41:34:29:39:53:
         5b:bd:9e:34:c4:08:41:36:6f:3b:68:f4:1b:ef:6e:c1:60:b3:
         5f:57:42:56:dc:1e:4e:d2:75:b0:53:d4:e1:13:d8:75:5f:2f:
         6d:12:cc:00:10:74:39:f6:2b:69:69:55:d7:5b:58:37:b0:8a:
         ee:31:07:9c:4f:7a:73:a7:ae:28:a2:5d:9e:b8:96:db:8c:89:
         09:84:63:0b:1c:64:80:b3:18:f3:c2:78:de:68:78:a0:03:61:
         31:35:79:3e:cb:e4:1e:00:37:f2:c5:df:78:32:51:6f:70:e7:
         d2:4d:03:e2:4a:0f:30:de:33:bf:af:d7:4c:92:40:48:62:24:
         3d:58:43:2a:66:4c:bd:fb:db:a1:45:a7:bd:d8:89:73:6f:37:
         21:92:5b:71:18:4c:99:62:d7:d8:25:20:29:f5:2d:95:87:81:
         45:4f:93:61:a5:96:53:ed:39:ae:42:f5:32:4c:bd:b6:8e:91:
         8d:f8:a3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:50 2025 by rpki-client