Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a346330303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a346330303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          7zBslpgj1rs2IX/kV78ZnJUe4bLlfQXbN+WJDpkC8oc=
Subject key identifier:   95:C3:94:BD:07:92:6C:BF:01:46:48:CF:1F:D7:09:68:16:3A:98:85
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       29169B4EF99DAC5F755A9EF051178E3344638E2B
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a346330303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:33 +0000
ROA not before:           Thu 03 Nov 2022 18:38:33 +0000
ROA not after:            Thu 02 Nov 2023 18:43:33 +0000
asID:                     269463
IP address blocks:        2804:6504:4c00::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:16:9b:4e:f9:9d:ac:5f:75:5a:9e:f0:51:17:8e:33:44:63:8e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:33 2022 GMT
            Not After : Nov  2 18:43:33 2023 GMT
        Subject: CN=95C394BD07926CBF014648CF1FD70968163A9885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8f:33:ce:6d:17:9c:53:4f:6d:e9:69:67:bf:
                    26:8b:3d:87:43:ad:9a:48:f6:b7:d9:8f:dc:ca:77:
                    30:ff:bc:c6:5f:7a:fc:72:98:60:4d:ff:07:23:30:
                    1d:d3:aa:ec:6a:9e:f9:f7:76:d1:57:2d:a1:a5:39:
                    b7:d3:d1:c6:06:70:99:0d:18:ca:56:45:b2:c2:9e:
                    18:5f:c0:af:d3:b9:68:ef:4a:4f:a5:95:df:41:90:
                    47:50:30:69:21:3e:90:46:bd:be:52:80:ad:af:3e:
                    15:2c:3e:76:a6:b5:76:74:46:e7:70:c5:29:5d:b8:
                    b7:db:9d:d8:d7:9c:ed:59:25:20:20:68:2f:8e:81:
                    8e:2f:28:25:86:db:0d:f5:59:70:37:4f:cf:4e:bf:
                    f4:8a:90:81:07:c3:af:93:ad:d2:ff:75:86:3f:2b:
                    c6:a3:79:b3:e3:83:e5:0f:0b:55:5f:76:ac:f3:27:
                    05:e3:43:0d:0e:73:b3:fa:29:e0:17:4b:94:73:cf:
                    1f:33:06:0d:f6:62:fb:3d:19:0a:35:d6:56:40:30:
                    18:e3:c0:b2:f0:5e:b8:b7:40:af:d3:ff:ed:43:a3:
                    87:63:10:35:35:73:c5:f9:71:79:69:8a:c9:60:ca:
                    70:c5:9d:84:ea:f8:d2:a4:f0:95:b2:5d:89:37:1a:
                    23:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C3:94:BD:07:92:6C:BF:01:46:48:CF:1F:D7:09:68:16:3A:98:85
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a346330303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:4c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         28:46:d6:db:64:7a:a0:a3:81:76:62:64:27:36:d7:ba:74:19:
         d1:6e:b1:64:eb:ac:4e:1d:3b:5c:5c:e7:65:f1:6d:a4:ff:2b:
         8c:fd:27:1f:c9:ec:91:96:71:e8:af:d4:71:44:06:b2:d2:38:
         81:32:1d:c1:92:b2:b7:01:2d:0c:dd:8e:a0:9f:a8:8c:1e:4f:
         1e:35:dc:12:17:68:4a:63:c5:5a:44:40:44:f2:2f:82:04:f1:
         5a:39:94:64:7d:00:c5:a0:2e:4f:0d:0a:a8:0b:92:29:c1:d1:
         27:64:c4:2f:81:58:98:6c:d2:29:f2:bc:b1:76:7d:d5:f9:c3:
         f8:1e:5a:75:15:da:7f:43:fa:81:9d:57:65:6c:56:e6:9f:60:
         3e:29:a2:7f:4c:b0:bd:21:6b:41:f0:53:85:ad:08:65:4c:9d:
         86:5c:f2:ba:ad:4f:38:54:55:97:42:2d:1e:03:2d:c2:7b:80:
         6e:91:6b:b4:2c:f8:7e:fd:6a:a6:d5:bb:d3:06:f9:1f:5a:86:
         91:a1:f8:cd:2b:59:d4:07:62:89:7f:69:12:f4:ac:4b:4b:f1:
         cf:2e:cf:bb:f3:60:21:28:15:87:a6:3c:db:09:1c:2b:4d:9d:
         72:ee:77:a6:0a:10:e8:79:8b:f0:a6:64:f4:78:10:75:6f:1c:
         94:b5:7e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org