Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a3430303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a3430303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          KqrfMq19I43heihhAVeN/9gQTXV5Gq1vA13vpcvfyi0=
Subject key identifier:   11:86:29:5D:B7:88:EE:38:0F:51:3E:B6:45:D9:39:64:36:CB:6A:02
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       337032E6FCB38EB2024883C4FB004FA295410374
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a3430303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:30 +0000
ROA not before:           Thu 03 Nov 2022 18:38:30 +0000
ROA not after:            Thu 02 Nov 2023 18:43:30 +0000
asID:                     269463
IP address blocks:        2804:6504:400::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:70:32:e6:fc:b3:8e:b2:02:48:83:c4:fb:00:4f:a2:95:41:03:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:30 2022 GMT
            Not After : Nov  2 18:43:30 2023 GMT
        Subject: CN=1186295DB788EE380F513EB645D9396436CB6A02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b1:ef:9b:4e:8d:bd:03:c7:c7:55:0a:b0:06:
                    aa:59:af:06:20:85:83:7e:12:0d:60:85:2d:32:db:
                    80:1d:44:26:9a:d1:02:ba:42:79:7f:97:26:1d:82:
                    88:05:5a:c6:91:32:ae:8e:77:53:bc:ac:98:be:55:
                    9d:73:5b:c0:e3:19:d9:c7:5c:be:8e:fc:86:10:0b:
                    37:e7:9d:ed:67:e2:3e:a1:8c:66:6b:a0:4b:1e:49:
                    01:bd:8c:5b:53:e2:77:dd:38:3a:e2:d0:6b:77:38:
                    75:97:8f:98:06:5b:82:9a:cd:8f:0c:e6:39:6a:0b:
                    de:c6:9e:30:bd:ab:bf:6d:31:05:f3:76:96:f4:4f:
                    c7:62:5c:9c:d2:86:48:06:ab:99:42:8f:17:9d:b0:
                    2f:3b:eb:9a:e8:e3:78:41:7e:60:f1:71:c7:40:90:
                    5e:47:5f:32:a4:9a:ce:d8:de:0f:c2:11:d8:20:ef:
                    84:48:a9:22:f4:48:be:9b:e1:e9:e7:5e:37:68:ae:
                    1b:d1:04:ce:e4:b6:06:88:e2:78:30:fc:78:d7:ce:
                    ee:11:bf:7b:0b:16:8e:c9:77:49:ef:66:7b:91:dd:
                    6f:8a:be:e5:53:48:3d:03:33:0c:19:0b:38:61:b2:
                    ba:bd:75:77:fc:05:74:1b:bb:0a:07:ff:8b:3f:82:
                    6b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:86:29:5D:B7:88:EE:38:0F:51:3E:B6:45:D9:39:64:36:CB:6A:02
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a3430303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         86:62:c4:cf:82:87:05:5f:07:f5:25:78:85:92:df:b6:20:18:
         60:3d:4c:dc:cb:4b:07:05:4a:90:ca:4d:cf:33:e7:04:a3:04:
         b2:bf:46:04:46:f5:d9:c4:05:22:ad:64:e6:24:66:10:fd:00:
         75:3b:40:74:7c:24:3b:8c:d1:e2:c6:92:d9:14:50:97:a6:cf:
         f8:fd:b3:13:10:98:4a:5b:ab:15:fa:07:48:a3:cd:24:76:84:
         e5:ba:15:5f:d3:b0:5c:fe:15:94:7d:89:ab:1c:5d:17:54:d2:
         94:01:2e:f3:a6:9c:91:e6:d3:f5:d1:84:8e:53:3c:cb:d4:88:
         e3:3f:d5:37:39:2a:d8:74:78:a4:9b:4e:40:84:83:5e:b2:5d:
         13:9e:4c:74:e4:21:a7:f2:5a:0b:8e:76:bb:98:d5:2a:fc:f5:
         b1:d7:4a:0d:1e:0e:5b:61:cf:6f:ef:8c:48:f9:d3:6a:e9:5e:
         77:75:ec:38:d2:27:18:6d:6b:a2:40:f5:c5:e3:28:f2:27:78:
         cb:32:20:3b:e2:6a:c7:e9:b8:a3:63:7c:bf:a6:61:84:b0:37:
         90:18:5e:75:fe:ab:30:13:2f:8b:11:a2:57:9a:e5:c3:4b:b3:
         42:e4:46:43:d7:2b:11:39:48:e8:57:41:cd:f0:d2:40:f4:10:
         b1:1e:10:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org