Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/1/323830343a373266633a383030303a3a2f33332d3333203d3e20323730383838.roa
File:                     323830343a373266633a383030303a3a2f33332d3333203d3e20323730383838.roa (raw, json)
Hash identifier:          tMm6tdjQbK3H7BsernR3l7zSpAHYuAZykaXG2XDWUjc=
Subject key identifier:   38:8B:74:B0:2D:2A:CA:D3:2E:03:95:B8:54:93:3A:E2:70:1E:0F:0A
Certificate issuer:       /CN=F10BD3D20C72F845356C374F9C488E7BA0BADA8D
Certificate serial:       68B0876C750CDCA3EF0FD5C81A6C7DADE0CB2697
Authority key identifier: F1:0B:D3:D2:0C:72:F8:45:35:6C:37:4F:9C:48:8E:7B:A0:BA:DA:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F10BD3D20C72F845356C374F9C488E7BA0BADA8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/1/323830343a373266633a383030303a3a2f33332d3333203d3e20323730383838.roa
Signing time:             Tue 27 Dec 2022 19:13:40 +0000
ROA not before:           Tue 27 Dec 2022 19:08:40 +0000
ROA not after:            Tue 26 Dec 2023 19:13:40 +0000
asID:                     270888
IP address blocks:        2804:72fc:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b0:87:6c:75:0c:dc:a3:ef:0f:d5:c8:1a:6c:7d:ad:e0:cb:26:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F10BD3D20C72F845356C374F9C488E7BA0BADA8D
        Validity
            Not Before: Dec 27 19:08:40 2022 GMT
            Not After : Dec 26 19:13:40 2023 GMT
        Subject: CN=388B74B02D2ACAD32E0395B854933AE2701E0F0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ca:c2:88:91:5c:39:b6:d5:68:ad:bd:22:b7:
                    3c:1f:b4:78:c4:2f:20:f5:9a:f1:8d:5b:0d:2d:55:
                    8a:c2:5d:b3:34:03:d8:cf:79:a3:26:7c:73:9c:76:
                    d8:a9:cd:2a:95:af:44:34:ef:c0:07:7f:20:ec:e0:
                    95:01:bf:54:db:8f:8f:a9:38:e0:ca:fc:35:82:0e:
                    1b:c6:a0:63:7c:79:72:5e:38:ff:7f:d7:c1:c5:76:
                    57:5f:f3:5c:39:e3:6f:f0:74:6f:a0:df:1f:ae:7b:
                    33:9c:c5:7d:72:8c:ab:4d:cb:40:2f:ab:b9:bc:5b:
                    90:1e:be:9c:d5:1b:1e:eb:3e:d2:ba:c1:2a:df:8b:
                    f5:b1:7f:ff:90:6d:6b:92:06:67:c9:d5:72:c3:e2:
                    e1:23:43:71:67:9a:70:a7:48:4f:96:65:13:fc:33:
                    84:21:38:95:d1:43:6e:10:da:81:1d:d1:69:e9:bd:
                    cc:3d:13:2e:c5:94:ea:c0:60:3b:73:2e:a4:64:11:
                    59:a7:b2:43:09:80:f8:f8:ad:64:d9:b3:3f:22:27:
                    aa:6c:4b:4d:bc:e6:af:e3:d6:2f:4e:be:49:9d:5d:
                    b4:44:88:7a:45:6a:02:40:9e:33:d4:dc:29:b5:ef:
                    f7:a5:5f:6d:76:53:19:c7:43:cb:ea:1a:24:40:ac:
                    a4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8B:74:B0:2D:2A:CA:D3:2E:03:95:B8:54:93:3A:E2:70:1E:0F:0A
            X509v3 Authority Key Identifier:
                keyid:F1:0B:D3:D2:0C:72:F8:45:35:6C:37:4F:9C:48:8E:7B:A0:BA:DA:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/1/F10BD3D20C72F845356C374F9C488E7BA0BADA8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F10BD3D20C72F845356C374F9C488E7BA0BADA8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/1/323830343a373266633a383030303a3a2f33332d3333203d3e20323730383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72fc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         95:a2:14:27:19:6d:6b:c2:d1:76:dc:e9:c8:92:48:1b:b4:ef:
         1f:5d:d0:c0:b8:33:8e:5a:ad:3b:78:b4:19:f1:2a:6d:9e:a9:
         cd:08:da:24:ce:f4:62:9c:36:8a:f3:41:fb:4e:50:82:71:57:
         aa:4c:2f:d2:7f:ec:da:cf:de:10:60:bc:a9:b1:c7:30:ec:24:
         f3:14:54:a4:c9:f8:de:af:4a:bf:dc:d0:34:f0:1e:ad:77:db:
         0a:0e:31:f9:0d:0d:06:af:45:34:59:bc:83:ab:c3:2b:04:20:
         18:eb:9b:84:01:50:0d:20:61:30:ee:a5:de:26:e6:9b:63:42:
         32:d0:64:01:60:72:1b:d6:35:f1:e7:2e:33:72:90:60:e8:26:
         65:ca:6f:c0:ae:e4:c9:4a:b9:f9:ae:39:ff:8c:03:9e:7b:8a:
         a8:ea:51:53:d3:17:aa:7b:99:68:9a:b0:2b:a5:6e:b8:56:b5:
         f7:3a:cf:a0:e7:51:9b:b8:9b:7b:fe:fe:0f:9d:78:46:3c:8d:
         fc:10:66:fd:bb:c8:14:49:9f:3f:91:0b:d7:45:b8:93:fd:49:
         e2:24:e1:b0:7d:e4:65:0c:f5:bc:9e:ee:eb:24:35:b4:23:5d:
         05:4b:78:9c:09:22:a8:3e:2b:8e:03:17:19:4c:4b:12:c6:ce:
         ff:98:77:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org