Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a316330303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a316330303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          8i0wTEeYocVxVF5HHbS05THSC2xmEI1ehkbm1/Fd6Lw=
Subject key identifier:   FE:6F:D0:02:E1:2F:0D:65:B2:6D:3C:2C:6D:95:4D:B3:63:BF:CD:2C
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       77EE9E7989C67C42A62CD50518EFA694595E2B82
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a316330303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:28 +0000
ROA not before:           Thu 03 Nov 2022 18:38:28 +0000
ROA not after:            Thu 02 Nov 2023 18:43:28 +0000
asID:                     269463
IP address blocks:        2804:6504:1c00::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ee:9e:79:89:c6:7c:42:a6:2c:d5:05:18:ef:a6:94:59:5e:2b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:28 2022 GMT
            Not After : Nov  2 18:43:28 2023 GMT
        Subject: CN=FE6FD002E12F0D65B26D3C2C6D954DB363BFCD2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:01:ca:6f:36:4c:5c:9c:34:a3:2b:2b:e5:
                    1d:25:09:77:01:1b:48:24:08:f9:c7:fa:e6:58:37:
                    06:14:05:0a:fe:e7:2d:01:ec:d4:75:20:71:95:ff:
                    fa:2a:81:30:37:e6:c6:84:5f:bb:1b:75:c0:c0:80:
                    ab:67:b0:1a:c7:08:49:fb:b6:0c:ac:4f:1c:71:bc:
                    87:9d:54:7c:bf:ce:14:b4:53:75:4a:73:64:0d:d0:
                    6e:d5:73:ac:81:97:49:d2:20:72:b8:be:0b:9f:9a:
                    32:66:52:ab:5f:19:24:0a:5c:13:c7:03:a0:5f:b2:
                    01:bc:00:96:db:e6:8d:59:5d:05:dd:4b:95:0b:b8:
                    76:95:46:14:4a:1e:58:96:f7:e3:79:5e:e0:88:5a:
                    c5:12:41:66:d9:99:23:d9:44:43:94:43:d6:bb:59:
                    e7:01:29:4a:5c:ca:06:bb:e7:e3:8e:b8:47:8f:14:
                    00:76:b3:99:7d:bf:19:2b:be:60:a8:10:a7:06:5b:
                    f2:5a:6d:ba:26:82:ef:b8:c9:cf:54:5f:a0:35:62:
                    9e:e9:be:a7:48:0e:04:c4:69:e6:97:85:9d:f5:af:
                    a1:3f:dc:d4:f4:95:51:b9:c6:5b:4d:ce:db:9e:b6:
                    78:ba:3c:3e:3e:d3:72:f6:9f:cd:c5:27:6d:5b:30:
                    0f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6F:D0:02:E1:2F:0D:65:B2:6D:3C:2C:6D:95:4D:B3:63:BF:CD:2C
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a316330303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:1c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         6b:fb:23:e8:36:18:02:60:ba:81:f6:20:85:f3:85:e9:ad:21:
         f3:44:23:c2:c5:e3:6f:9e:66:09:63:18:30:ba:d7:30:f8:9b:
         2c:cb:e1:b6:a6:90:09:88:ed:1a:c3:9f:7b:f2:e5:0a:a9:fb:
         b4:e2:06:1f:39:a9:88:ee:7e:34:0d:3d:07:cb:fe:2e:42:32:
         a5:34:20:b8:46:90:18:35:54:66:4a:bd:5f:aa:8c:39:34:3d:
         01:62:4a:2d:32:cb:b2:1a:81:1c:c8:16:86:30:f2:43:e2:25:
         d3:a8:76:3f:cf:d6:fd:68:e6:a7:b4:a3:16:22:ea:0a:c1:c4:
         52:f2:7c:30:5d:00:2e:7d:7d:3e:73:09:08:71:7f:ad:a2:bb:
         ef:90:6a:f6:17:11:eb:51:55:15:e1:21:b7:6a:58:21:4f:01:
         89:24:e3:9b:ab:17:45:8a:ae:6e:e8:cf:7b:d8:fc:d3:87:b0:
         b6:71:c3:1f:11:93:e9:20:6e:93:1f:f7:3a:c5:69:bc:1b:a3:
         c7:4c:42:c1:0f:49:86:23:1b:f4:3a:13:be:39:73:d8:c9:72:
         aa:00:46:49:ed:e6:8b:98:9a:ef:d9:8b:6e:29:f9:de:5f:f0:
         b7:16:e8:6b:2b:ac:70:bf:81:69:7b:cb:bc:96:4c:2b:a8:4b:
         88:ed:6a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org