Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a313830303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a313830303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          DivJef/T2s+PZ62mN8Pj/GyuqWTdQEBh+kIN4a+2zRE=
Subject key identifier:   55:F6:D5:EA:90:1D:E0:5C:91:59:E1:E0:F5:EC:33:7F:AD:B9:EA:CC
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       4D42AB89C937073F291F076BEB9AF0DA1FABCC6A
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a313830303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:25 +0000
ROA not before:           Thu 03 Nov 2022 18:38:25 +0000
ROA not after:            Thu 02 Nov 2023 18:43:25 +0000
asID:                     269463
IP address blocks:        2804:6504:1800::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:42:ab:89:c9:37:07:3f:29:1f:07:6b:eb:9a:f0:da:1f:ab:cc:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:25 2022 GMT
            Not After : Nov  2 18:43:25 2023 GMT
        Subject: CN=55F6D5EA901DE05C9159E1E0F5EC337FADB9EACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6b:80:75:6c:f1:b4:e7:9e:69:0b:d4:34:14:
                    a3:ac:42:f6:eb:82:c3:00:7a:4f:dd:4d:e2:a8:5f:
                    47:8a:7f:9d:5e:1a:0e:9a:d6:68:11:5c:28:8f:bf:
                    24:e4:be:42:6f:d8:b9:92:ac:a6:a3:82:ee:47:b7:
                    0f:76:d8:94:da:6c:a9:4a:38:30:39:e6:ca:4b:c4:
                    ee:93:34:67:f3:f0:33:37:c7:e5:c3:2a:d7:5f:8a:
                    dc:bc:0a:8a:c4:61:5b:dd:a7:19:17:fb:c8:66:c2:
                    10:b3:ac:fb:aa:03:06:48:4b:2b:1a:38:79:df:43:
                    64:b1:51:8a:08:00:2e:ba:22:11:58:5c:fd:a7:cb:
                    14:69:89:fb:3b:87:03:67:df:64:c6:84:82:d3:d0:
                    ba:9f:13:62:37:f0:df:18:ad:58:81:7c:03:dc:94:
                    ff:1f:ad:dd:a9:75:87:6e:e0:e4:29:26:d4:61:c4:
                    e9:af:da:55:98:40:42:16:76:58:8e:b0:ce:b1:82:
                    10:cd:f8:0f:73:ba:ef:bd:9e:0d:57:98:9d:c3:7c:
                    dd:79:1f:01:93:7f:32:17:d3:df:a9:97:19:ce:15:
                    96:17:bb:02:5f:cc:a3:d4:d5:fb:05:ad:03:3b:bd:
                    78:ce:64:65:b4:b7:ee:be:ed:43:3d:a8:71:af:0b:
                    09:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F6:D5:EA:90:1D:E0:5C:91:59:E1:E0:F5:EC:33:7F:AD:B9:EA:CC
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a313830303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:1800::/38

    Signature Algorithm: sha256WithRSAEncryption
         47:e8:97:49:06:6a:a2:cb:5d:c2:5f:44:98:36:6b:0c:91:8e:
         22:7f:df:eb:99:fb:39:98:df:c3:65:2d:64:ea:2f:9c:db:2b:
         6e:b0:45:1d:08:24:88:54:54:9e:b1:89:0f:16:0d:22:22:09:
         66:a8:5b:f1:81:d8:95:95:48:93:10:bd:1e:d9:4d:99:21:e1:
         71:9e:9f:26:15:a6:e5:b8:10:8a:fd:f9:60:6e:4b:51:16:eb:
         61:ab:e9:db:6e:9b:2e:05:a7:4a:97:25:eb:c3:45:e6:2c:1d:
         ec:a5:7f:d3:f3:c7:b4:01:58:eb:62:fd:36:7a:92:dc:31:f1:
         0d:f6:3c:d7:5f:d8:e1:42:08:63:74:94:86:e8:d4:f7:28:f8:
         89:ac:47:bf:36:dd:23:f4:18:26:46:a2:85:9c:e9:47:32:64:
         63:7c:09:8c:d9:e8:3f:83:b1:55:52:c9:1b:a5:76:04:bf:5d:
         70:5f:80:fb:2d:f4:1b:cd:b2:ac:bc:a0:24:1c:95:97:a7:a4:
         6c:64:3c:db:1f:f7:0c:a3:32:04:ab:34:b2:21:07:83:cd:06:
         73:88:9d:6f:14:af:1a:86:5a:e3:d3:79:15:2d:71:3a:11:11:
         bf:00:18:ab:cc:21:5b:06:33:3e:e3:36:39:a0:de:d3:ec:01:
         30:89:a4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org