Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/1/3137372e3132392e3234302e302f32332d3233203d3e20323730383838.roa
File:                     3137372e3132392e3234302e302f32332d3233203d3e20323730383838.roa (raw, json)
Hash identifier:          6G7PNswLTx2/BQDbmqeXcYABXLEL8ezQDV09B36cybs=
Subject key identifier:   15:62:A6:3B:81:0E:CC:A5:30:2B:A6:DF:F3:F0:C8:92:1B:28:9E:75
Certificate issuer:       /CN=F10BD3D20C72F845356C374F9C488E7BA0BADA8D
Certificate serial:       4A3C5D0DFEA57B4009035FDF3D02B09479489711
Authority key identifier: F1:0B:D3:D2:0C:72:F8:45:35:6C:37:4F:9C:48:8E:7B:A0:BA:DA:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F10BD3D20C72F845356C374F9C488E7BA0BADA8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/1/3137372e3132392e3234302e302f32332d3233203d3e20323730383838.roa
Signing time:             Tue 27 Dec 2022 19:13:53 +0000
ROA not before:           Tue 27 Dec 2022 19:08:53 +0000
ROA not after:            Tue 26 Dec 2023 19:13:53 +0000
asID:                     270888
IP address blocks:        177.129.240.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:3c:5d:0d:fe:a5:7b:40:09:03:5f:df:3d:02:b0:94:79:48:97:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F10BD3D20C72F845356C374F9C488E7BA0BADA8D
        Validity
            Not Before: Dec 27 19:08:53 2022 GMT
            Not After : Dec 26 19:13:53 2023 GMT
        Subject: CN=1562A63B810ECCA5302BA6DFF3F0C8921B289E75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:36:69:e1:8e:a6:d6:1c:58:b0:90:c8:8a:53:
                    dc:0a:36:f4:93:f6:cf:9f:75:77:4f:9b:d0:81:54:
                    f5:3c:d9:f3:bc:79:26:c6:67:f9:a6:7b:3a:a4:7b:
                    3f:6c:a9:61:90:e0:af:4e:33:22:a1:db:ec:d0:34:
                    c0:3c:3a:b2:3d:f6:1d:c3:6d:aa:54:30:14:34:99:
                    c4:38:db:78:69:99:95:aa:56:58:e7:34:0b:61:d8:
                    69:3a:25:b9:82:d6:2d:e3:be:87:90:ba:1a:c6:67:
                    2b:7b:05:8d:f9:37:bd:a3:46:27:77:71:d6:88:51:
                    dc:72:69:b9:37:a9:65:3b:22:ad:25:22:fa:f0:cd:
                    3d:17:34:b5:71:60:a9:8d:f4:fa:04:b0:f6:5b:19:
                    92:89:cc:49:ba:69:96:a7:f2:55:da:39:79:79:07:
                    1e:4b:ed:f2:ff:19:33:1b:2e:76:a3:43:9c:6d:43:
                    63:af:b1:85:e6:20:dd:90:91:f1:00:40:01:ce:3e:
                    c8:30:69:d6:a7:ff:5a:3d:96:4d:f6:2c:d9:a5:65:
                    24:8d:cd:bb:29:02:87:d3:30:39:89:ff:b5:4c:f0:
                    bd:97:ca:c9:25:da:ff:63:a9:03:f4:ee:af:25:3e:
                    73:5c:2c:91:df:2b:c7:7c:c3:ed:92:9f:02:93:fe:
                    54:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:62:A6:3B:81:0E:CC:A5:30:2B:A6:DF:F3:F0:C8:92:1B:28:9E:75
            X509v3 Authority Key Identifier:
                keyid:F1:0B:D3:D2:0C:72:F8:45:35:6C:37:4F:9C:48:8E:7B:A0:BA:DA:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/1/F10BD3D20C72F845356C374F9C488E7BA0BADA8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F10BD3D20C72F845356C374F9C488E7BA0BADA8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/1/3137372e3132392e3234302e302f32332d3233203d3e20323730383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:cf:47:79:c5:b9:97:3f:b3:28:2f:4e:41:82:cf:c7:ef:ce:
         08:a6:19:8b:f0:fe:03:36:b5:9e:11:a1:b8:e7:90:d5:39:7b:
         7f:0d:ac:1f:75:63:09:6e:48:bf:51:c8:33:42:51:fe:48:67:
         c9:d7:ca:9a:84:f2:4d:08:7b:25:a3:98:34:eb:7f:fc:37:e5:
         b8:d6:af:78:62:88:4e:b1:03:b9:15:69:50:11:88:aa:ea:ec:
         24:e9:aa:27:25:6e:74:d3:16:d0:ab:d7:e3:6f:65:5f:bf:4d:
         57:af:b2:18:4b:c0:0d:05:54:98:70:1a:d2:97:66:0c:e4:6e:
         dd:2c:2a:06:0e:cb:d0:0f:2f:48:e5:dc:f6:90:0f:6f:68:06:
         16:d5:b5:e2:6d:aa:dc:60:44:2d:da:d4:1e:c2:2d:32:07:5e:
         fc:d3:3d:e0:92:bb:3b:b1:f0:2a:1f:fb:8e:41:c0:1e:e1:6f:
         30:6c:49:76:5f:b0:e1:69:b5:f2:75:43:aa:11:c3:e5:b1:e1:
         1c:3a:28:6a:14:e0:ef:0b:72:6e:df:4c:20:71:45:01:20:43:
         d4:2a:22:92:7e:35:9d:ae:88:4b:fa:e7:77:50:3a:59:31:0f:
         37:76:d9:40:09:a7:8f:a1:1f:bc:b1:82:25:f1:f2:af:49:85:
         74:42:15:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org