Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a313030303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a313030303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          EKfueVUbr6fyF08U+Iac7IbY4aFPBhgwPsrcvbGK/Ho=
Subject key identifier:   2E:35:F4:79:64:16:F9:CC:90:59:BC:29:26:A6:EA:5C:80:8A:60:2F
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       7FD4C84BE228C83C1E001089D2593EADEA7DFAB2
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a313030303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:31 +0000
ROA not before:           Thu 03 Nov 2022 18:38:31 +0000
ROA not after:            Thu 02 Nov 2023 18:43:31 +0000
asID:                     269463
IP address blocks:        2804:6504:1000::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d4:c8:4b:e2:28:c8:3c:1e:00:10:89:d2:59:3e:ad:ea:7d:fa:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:31 2022 GMT
            Not After : Nov  2 18:43:31 2023 GMT
        Subject: CN=2E35F4796416F9CC9059BC2926A6EA5C808A602F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c5:28:bd:7b:69:fb:7f:c8:e5:ac:e5:eb:5a:
                    31:df:65:f4:0b:74:70:59:7b:c6:80:67:bf:de:d8:
                    d0:1d:23:f2:dc:8a:0d:b1:5d:45:ba:91:e9:3c:29:
                    0a:2a:7d:a1:c7:a0:dc:7a:5d:eb:d2:e9:80:20:04:
                    1d:81:32:f9:e9:fa:d3:3a:3b:53:8a:4c:0b:30:e3:
                    28:07:b3:76:a9:52:5f:77:d3:9a:5a:ba:30:5c:e5:
                    3e:e9:e1:37:1f:ae:19:7d:59:19:bd:94:25:da:78:
                    de:82:c6:b3:10:95:17:e0:55:a0:97:03:d0:69:d1:
                    61:91:e6:10:d1:31:ae:bd:9f:b0:87:a3:92:1a:45:
                    92:4c:51:b2:67:f1:a0:45:e5:05:cf:df:5f:09:89:
                    40:f6:84:10:61:70:87:9a:6b:12:1b:80:90:69:33:
                    f0:5d:84:0d:54:3e:c0:33:82:df:cd:f5:73:48:33:
                    74:6d:10:d9:af:d2:a5:ec:b3:c7:0e:60:9a:14:e1:
                    69:16:eb:43:9f:56:dd:65:1d:2a:d2:2d:23:54:49:
                    af:07:cf:78:9d:62:fe:33:09:b8:72:eb:8c:69:10:
                    91:64:0f:9f:e0:e6:d1:90:06:d8:de:98:71:f8:0f:
                    3d:23:07:07:80:d5:be:d9:ee:bb:af:ae:46:c1:f0:
                    3a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:35:F4:79:64:16:F9:CC:90:59:BC:29:26:A6:EA:5C:80:8A:60:2F
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a313030303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:1000::/38

    Signature Algorithm: sha256WithRSAEncryption
         45:09:cf:8b:80:83:bc:f8:51:52:0f:e4:be:39:bf:80:8b:59:
         c6:3d:e9:0a:b0:96:ec:4f:58:89:3c:50:6e:2e:7e:8c:07:17:
         f8:33:82:a5:70:87:dc:8d:3e:8a:1a:48:24:0f:82:4a:2d:45:
         d1:d2:93:1b:8d:ec:34:26:df:ae:ee:bb:40:20:69:c0:00:04:
         fd:89:f0:df:f5:32:c6:fb:df:44:c5:46:03:04:b1:f6:a2:66:
         79:09:db:10:fa:0a:85:6c:5a:40:a7:87:61:d6:7e:71:fa:6a:
         72:da:75:43:e0:79:87:2a:1a:4e:f4:68:03:0f:61:cf:5f:fb:
         9b:9a:1a:cd:6d:e7:3a:1b:16:64:00:70:e1:95:0e:a6:ac:09:
         ae:8a:58:fb:66:ec:46:08:8f:bb:36:8d:c5:b9:9c:3a:11:05:
         cc:3c:d2:6e:b0:86:87:e0:b0:92:ef:e1:d6:d6:18:53:b7:51:
         ba:26:dc:90:a6:15:1b:37:af:47:92:83:48:9d:ba:a2:36:e4:
         1a:81:d6:90:22:56:ec:8e:93:7d:3f:eb:c9:d9:c7:fb:1a:7e:
         89:6e:55:6e:5c:47:cd:84:3e:89:32:6a:96:63:f2:6d:6b:56:
         a9:d8:8b:42:d3:aa:ef:33:f5:f5:ee:c9:59:46:eb:ef:8c:90:
         fb:13:9f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:04:13 2025 by rpki-client