Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a333030303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a333030303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          c268g6FxeXhHEiSFLsouS3TYQXZ96fLXGHIcdfc9R80=
Subject key identifier:   72:F7:96:18:09:44:74:3F:A3:A0:D8:C8:F0:B9:D9:8F:30:01:7B:C9
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       6B3E60300B5F0F3CDE36755DCDAE512B2A173301
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a333030303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:27 +0000
ROA not before:           Thu 03 Nov 2022 18:38:27 +0000
ROA not after:            Thu 02 Nov 2023 18:43:27 +0000
asID:                     269463
IP address blocks:        2804:6504:3000::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:3e:60:30:0b:5f:0f:3c:de:36:75:5d:cd:ae:51:2b:2a:17:33:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:27 2022 GMT
            Not After : Nov  2 18:43:27 2023 GMT
        Subject: CN=72F796180944743FA3A0D8C8F0B9D98F30017BC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2e:18:7d:7c:7c:c1:e0:d8:bd:ce:04:1d:f9:
                    fc:26:e6:76:39:31:57:83:71:a0:50:e7:72:fb:61:
                    eb:ef:fe:e7:6d:5e:b2:47:2e:4c:9e:6e:8e:ca:c4:
                    3c:26:e2:8e:8e:b6:80:6d:87:b2:9d:ef:00:3e:4f:
                    cc:66:06:1a:23:01:7e:71:ee:2b:f7:ca:8e:41:34:
                    eb:bf:0f:4c:2f:f6:33:40:a5:59:80:e6:8c:8d:b4:
                    63:16:73:fb:a2:2d:f6:13:7a:49:a5:14:df:16:a2:
                    a2:a7:ab:c5:48:83:03:f5:f4:d1:a5:05:e8:74:ab:
                    aa:7d:7c:04:e9:bb:9b:6a:ba:26:d3:34:b0:f5:72:
                    a4:2b:38:96:06:c9:d3:00:ad:bc:7b:ee:3f:a2:39:
                    a9:ea:bb:1d:1e:c8:49:fb:bf:ff:2e:47:14:90:81:
                    9e:fd:2c:12:33:47:db:94:a9:72:6f:a9:fd:0c:06:
                    da:a6:56:4b:f7:7e:46:a9:0c:d9:27:24:70:70:6a:
                    be:d2:bf:56:dc:ee:cc:be:93:f4:44:0e:0f:09:06:
                    88:6e:98:96:e9:11:23:b3:f2:45:92:63:b5:2d:7d:
                    b0:5f:ab:d6:d8:e2:e7:83:7d:d0:fa:6e:f3:75:5b:
                    31:a0:3c:b9:4a:ea:23:a0:32:6d:ad:48:75:bf:20:
                    56:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F7:96:18:09:44:74:3F:A3:A0:D8:C8:F0:B9:D9:8F:30:01:7B:C9
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a333030303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:3000::/38

    Signature Algorithm: sha256WithRSAEncryption
         49:09:6a:d6:37:4c:26:18:9a:fe:ba:3a:fa:db:6e:75:39:56:
         08:42:5f:d1:29:fc:f1:27:83:3a:e4:bc:da:34:b2:73:7c:c5:
         55:b9:ce:5c:27:58:df:f0:93:4f:27:a7:28:c4:12:e8:82:b5:
         cd:9a:50:3d:8d:59:73:d0:c5:f6:1a:4c:da:18:d1:9d:a1:41:
         0f:e8:fd:4c:10:1e:3e:99:a8:fc:73:bf:52:c5:b5:de:f2:8b:
         1e:aa:d4:4e:6a:76:a5:c4:a0:27:dd:b9:13:a8:7a:6e:21:eb:
         e3:78:77:8e:45:59:49:d3:e4:d5:f5:5d:1f:48:bb:f1:0f:d6:
         bd:a1:2c:49:87:d0:45:e8:db:28:16:b5:ea:6c:f3:61:8d:d0:
         25:1f:ee:b5:e1:31:d4:3b:cd:17:9e:52:2b:35:2f:e3:10:6c:
         51:35:ac:2e:49:bc:a3:80:95:d4:7c:b2:6f:c5:d8:8c:7d:2c:
         19:05:30:ad:07:23:e5:98:54:df:3a:7b:69:cf:15:94:df:4b:
         c5:8d:e5:93:77:9a:d1:2c:90:9c:69:9d:ad:84:fc:7d:93:9d:
         4d:f3:6b:7d:42:4c:fa:b8:90:da:00:9f:2c:7c:41:41:53:a9:
         d0:f4:e3:67:9a:fe:04:f0:6b:bc:06:9e:85:8c:c7:d9:fa:d7:
         38:ea:62:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org