Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/323830343a373266633a383030303a3a2f33332d3438203d3e20323730383838.roa
File:                     323830343a373266633a383030303a3a2f33332d3438203d3e20323730383838.roa (raw, json)
Hash identifier:          BCNVvpHYC7/0jmGrRUcsiG7ZtLhqBxQhdxxAkXKLdbI=
Subject key identifier:   33:79:46:ED:48:F2:84:47:B5:B8:18:A9:49:5E:57:63:58:CA:42:77
Certificate issuer:       /CN=8AC235BC60EADB8095B935DFEE5FC7047348B33B
Certificate serial:       4D43BB3BD9F88C5CE2C95FE29053250DB3B15B58
Authority key identifier: 8A:C2:35:BC:60:EA:DB:80:95:B9:35:DF:EE:5F:C7:04:73:48:B3:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AC235BC60EADB8095B935DFEE5FC7047348B33B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/323830343a373266633a383030303a3a2f33332d3438203d3e20323730383838.roa
Signing time:             Tue 07 Nov 2023 20:56:40 +0000
ROA not before:           Tue 07 Nov 2023 20:51:40 +0000
ROA not after:            Tue 05 Nov 2024 20:56:40 +0000
asID:                     270888
IP address blocks:        2804:72fc:8000::/33 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:43:bb:3b:d9:f8:8c:5c:e2:c9:5f:e2:90:53:25:0d:b3:b1:5b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AC235BC60EADB8095B935DFEE5FC7047348B33B
        Validity
            Not Before: Nov  7 20:51:40 2023 GMT
            Not After : Nov  5 20:56:40 2024 GMT
        Subject: CN=337946ED48F28447B5B818A9495E576358CA4277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9b:3f:23:8c:cc:49:9a:a7:ef:3f:d2:8f:03:
                    13:e4:a0:4e:ea:51:69:f5:ac:b9:b5:1d:05:56:a3:
                    af:08:02:79:34:d0:fd:50:e6:7b:c8:f6:40:e8:38:
                    d3:f0:16:c8:09:28:ac:22:5f:c2:05:1b:14:83:5e:
                    00:ab:f0:ae:a8:81:50:4e:b0:af:80:93:d8:0c:59:
                    9e:8a:20:d2:34:8b:4c:18:ab:aa:37:d3:eb:b4:91:
                    19:f6:69:15:13:09:dc:a7:d9:07:37:96:74:60:1f:
                    55:a9:17:d6:ab:a7:77:d5:85:e6:a0:5c:86:1c:20:
                    2a:a1:a9:8d:ba:64:a3:d4:e7:83:23:fc:17:af:7e:
                    53:d1:d9:ad:c6:38:27:15:31:30:a4:9b:e9:26:39:
                    a4:8f:25:07:ba:1a:c1:3e:68:fb:d9:d8:1f:42:f9:
                    50:2e:8d:22:e5:fa:11:7e:24:46:62:19:ed:db:41:
                    e1:9d:bd:51:67:9a:c5:92:9d:ba:19:e4:91:10:28:
                    bd:c8:ea:e8:3f:68:73:3f:a9:c0:44:02:ad:9f:be:
                    8f:e9:b5:4a:3b:56:f6:00:fb:0c:b4:34:4c:be:bd:
                    32:ab:3f:6f:6e:b1:d6:be:95:d5:8d:ce:ed:3e:5e:
                    e3:5d:31:2f:07:bc:10:63:69:b3:48:bc:c4:36:30:
                    46:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:79:46:ED:48:F2:84:47:B5:B8:18:A9:49:5E:57:63:58:CA:42:77
            X509v3 Authority Key Identifier:
                keyid:8A:C2:35:BC:60:EA:DB:80:95:B9:35:DF:EE:5F:C7:04:73:48:B3:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/8AC235BC60EADB8095B935DFEE5FC7047348B33B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AC235BC60EADB8095B935DFEE5FC7047348B33B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/323830343a373266633a383030303a3a2f33332d3438203d3e20323730383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72fc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         42:a0:94:1c:12:bd:79:db:cc:5a:a6:c3:bd:b7:ad:2a:22:d6:
         2a:26:c7:26:95:df:60:04:b9:af:6f:02:8a:d7:12:f1:e8:66:
         be:87:eb:3b:2a:f7:40:7d:e9:20:fe:9a:d4:4a:c7:78:62:25:
         23:1c:2d:8a:64:18:c5:a4:09:7b:cd:fb:31:9f:d3:0f:e0:a9:
         4d:b6:35:18:65:ac:cf:4b:ec:75:15:83:d3:ef:5b:7e:bf:28:
         f4:78:d5:44:4f:05:92:e4:7e:9a:da:c6:1f:ee:b5:91:26:11:
         3e:95:d4:54:0c:0d:4f:db:2b:44:d4:dc:22:53:50:1f:0b:ca:
         a1:93:6e:a8:67:38:c8:86:3c:bf:ae:57:5a:b2:d8:a4:da:d4:
         79:fb:db:54:17:a7:1a:49:57:80:4d:ac:c7:7c:08:96:04:c3:
         af:94:73:b7:70:f8:7e:51:20:31:08:e0:cc:6f:d9:92:8b:ad:
         2d:9a:18:d6:27:05:6d:8c:f2:12:ea:0f:c6:b0:98:29:de:f4:
         eb:e6:bc:d5:02:b6:69:8b:41:57:d6:87:5d:09:a3:b5:4a:50:
         89:0c:33:67:12:45:99:b0:55:aa:1f:61:77:ef:d3:7f:99:cc:
         99:12:0c:fe:33:19:f6:f3:b7:28:6d:41:00:08:c7:f2:d2:06:
         fa:89:7f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:34 2025 by rpki-client