Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/1/3137372e382e33322e302f32302d3332203d3e20323632383330.roa
File:                     3137372e382e33322e302f32302d3332203d3e20323632383330.roa (raw, json)
Hash identifier:          W9d8wFC3YiMo6Cl2gfD/OfWG0j0PDsccT3ug97cvuw0=
Subject key identifier:   E5:BA:24:4D:03:44:A9:6E:69:A0:B9:F5:03:7E:AE:A6:BA:BD:87:24
Certificate issuer:       /CN=D7357A5920DDE042D991790CBF01A42B93CC3D10
Certificate serial:       3873206957D77D45543C08F434911420CE792142
Authority key identifier: D7:35:7A:59:20:DD:E0:42:D9:91:79:0C:BF:01:A4:2B:93:CC:3D:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7357A5920DDE042D991790CBF01A42B93CC3D10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/1/3137372e382e33322e302f32302d3332203d3e20323632383330.roa
Signing time:             Wed 03 Apr 2024 20:09:59 +0000
ROA not before:           Wed 03 Apr 2024 20:04:59 +0000
ROA not after:            Wed 02 Apr 2025 20:09:59 +0000
asID:                     262830
IP address blocks:        177.8.32.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:73:20:69:57:d7:7d:45:54:3c:08:f4:34:91:14:20:ce:79:21:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7357A5920DDE042D991790CBF01A42B93CC3D10
        Validity
            Not Before: Apr  3 20:04:59 2024 GMT
            Not After : Apr  2 20:09:59 2025 GMT
        Subject: CN=E5BA244D0344A96E69A0B9F5037EAEA6BABD8724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:37:22:b6:e6:6d:ef:15:61:2b:92:0a:21:09:
                    43:73:18:53:59:46:2a:92:bc:d5:ad:a0:32:a2:cb:
                    05:d8:d9:1c:2b:41:3b:f0:e6:40:94:73:6a:5f:af:
                    8c:78:3e:1f:f7:7f:da:26:72:62:c2:48:d5:d6:25:
                    ef:22:30:5d:72:51:8e:74:3d:4a:5d:96:e5:cb:96:
                    96:23:4c:88:82:ac:32:ce:68:07:fc:d5:95:1e:e4:
                    97:88:f0:8e:50:e1:ac:dc:fc:2e:5e:dd:21:5b:d0:
                    46:83:2f:04:d9:13:07:26:26:47:82:ae:6a:cd:b0:
                    3f:f3:44:dc:16:01:33:4d:62:43:f3:b6:48:19:3c:
                    7e:ce:e9:45:53:c6:68:5f:38:d8:76:ac:0e:29:a7:
                    12:c1:0d:a6:1c:34:2e:f3:8e:55:9e:e5:a5:dd:05:
                    f1:2b:94:2b:22:b8:66:fd:6e:dc:dd:7b:e3:0c:51:
                    9d:95:d0:2e:3c:57:73:ba:72:d4:fc:8c:a3:96:23:
                    5d:c1:b4:04:cc:cd:90:07:dd:ee:5d:2d:10:34:e7:
                    5a:ca:41:1a:a7:56:6d:d0:83:fd:db:60:b7:55:5b:
                    d7:a8:64:0d:ff:07:13:fe:97:1a:fd:a4:c5:3c:06:
                    c2:b8:b8:fc:21:1b:38:bf:55:97:15:54:ba:24:d0:
                    ff:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BA:24:4D:03:44:A9:6E:69:A0:B9:F5:03:7E:AE:A6:BA:BD:87:24
            X509v3 Authority Key Identifier:
                keyid:D7:35:7A:59:20:DD:E0:42:D9:91:79:0C:BF:01:A4:2B:93:CC:3D:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/1/D7357A5920DDE042D991790CBF01A42B93CC3D10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7357A5920DDE042D991790CBF01A42B93CC3D10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/1/3137372e382e33322e302f32302d3332203d3e20323632383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7e:37:98:79:73:7d:1d:45:7f:b6:30:4b:c3:5b:fc:da:a1:c3:
         69:3a:99:9b:06:ba:38:6a:bc:ef:f1:72:81:c1:b4:5c:21:fb:
         06:6d:97:51:27:58:d2:9a:54:6a:d8:8e:e3:ba:28:02:02:67:
         d7:0f:fa:18:a7:91:a1:3c:59:c3:7d:4f:5a:36:4f:f1:6f:67:
         47:9f:cc:c7:66:18:17:31:9d:0e:34:f0:55:5a:17:4e:b4:63:
         e5:7f:0f:58:1a:97:7e:59:e3:9b:01:8a:0e:74:41:2b:eb:d6:
         ac:a4:7c:b2:3f:e9:6f:16:88:69:08:85:53:99:f5:d5:87:d3:
         f2:d5:03:7f:55:78:4a:c2:ab:63:b3:20:14:d2:b4:eb:0b:42:
         28:24:65:19:6c:85:47:bf:65:3f:b3:1a:d3:25:0b:1b:49:91:
         46:42:6a:ad:cc:bd:13:30:a3:fa:b2:03:1c:dd:17:4c:01:eb:
         9e:cd:9c:eb:c3:36:cb:a1:28:e3:86:c9:40:1b:86:f6:d2:ef:
         b4:c9:35:af:8e:15:07:df:a9:3c:ac:7d:32:45:10:b9:67:8e:
         a8:3a:24:71:03:b9:7c:85:72:93:a5:05:da:76:11:69:79:f3:
         b1:f1:26:e5:ba:d6:33:96:a4:61:e2:7a:56:0a:be:a2:82:02:
         9f:a3:ea:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org