Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a353030303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a353030303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          gDXtRtWwYSk3ewz0rjQ7/YllEH+VD191aH4zOBgKQtc=
Subject key identifier:   E8:D5:24:D8:33:1B:C7:BE:E5:ED:B4:28:F0:69:DE:67:F3:89:33:C8
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       249DEE23F0809C30A0A5FD70392C825DCED68D4D
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a353030303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:29 +0000
ROA not before:           Thu 03 Nov 2022 18:38:29 +0000
ROA not after:            Thu 02 Nov 2023 18:43:29 +0000
asID:                     269463
IP address blocks:        2804:6504:5000::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:9d:ee:23:f0:80:9c:30:a0:a5:fd:70:39:2c:82:5d:ce:d6:8d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:29 2022 GMT
            Not After : Nov  2 18:43:29 2023 GMT
        Subject: CN=E8D524D8331BC7BEE5EDB428F069DE67F38933C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1f:14:bb:7c:46:6a:1b:77:48:79:cb:66:b3:
                    f7:db:b3:1d:f9:45:90:45:ae:90:41:c2:12:48:c9:
                    f5:ac:4b:54:87:17:4e:93:bf:e1:a3:3b:48:49:44:
                    df:b5:62:ac:8d:ac:39:3b:9c:cb:04:27:db:67:92:
                    8e:d8:2f:80:da:5e:08:ab:ff:3d:33:71:13:51:ce:
                    57:c8:02:99:cc:c3:41:e3:76:2d:fe:99:d9:03:6f:
                    e0:92:94:a7:b0:c3:b3:d3:60:cf:78:8a:9c:1b:3f:
                    8d:84:1d:af:cd:e7:b0:e3:76:38:e5:29:44:df:14:
                    a0:3f:90:11:6f:4a:24:7d:61:15:e6:97:93:76:a0:
                    33:de:81:a0:da:a4:f8:db:85:53:6a:be:34:22:0d:
                    15:d6:c2:e8:11:7d:ef:6c:04:0b:21:b5:39:c9:99:
                    8c:99:46:66:58:f8:14:1d:d7:a1:56:83:5d:2b:05:
                    a7:3d:06:2f:69:aa:39:0a:60:2d:1c:d7:c0:07:af:
                    4a:a4:12:b4:f6:55:f5:2c:7d:a2:33:cb:8b:38:f4:
                    c9:5e:6e:69:33:b8:2a:c1:41:26:b5:a2:8d:53:b0:
                    8c:26:59:65:2d:62:ee:b7:95:93:7d:b8:1e:c5:05:
                    e3:f7:f9:a7:b7:d1:d6:aa:46:53:69:0f:48:cb:bf:
                    8e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D5:24:D8:33:1B:C7:BE:E5:ED:B4:28:F0:69:DE:67:F3:89:33:C8
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a353030303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:5000::/38

    Signature Algorithm: sha256WithRSAEncryption
         26:5e:94:f1:50:a4:0f:a7:17:8e:d9:4a:3d:72:93:1a:b4:58:
         92:39:ab:30:18:c7:83:13:f9:e0:d6:c5:e5:2a:22:f9:7b:47:
         0b:cc:73:82:7c:c9:72:0a:6e:80:c2:64:c2:fa:11:72:ed:ac:
         08:ab:d3:46:01:cb:3e:87:3c:8b:f2:7e:68:4d:bc:c4:37:be:
         12:bd:4e:4a:c6:84:30:20:d6:52:ef:2b:d6:6c:5b:5e:2d:9c:
         34:82:20:17:8e:92:ba:f0:91:c6:ba:b2:cb:01:e6:41:63:08:
         a7:d2:33:1f:ad:5d:90:5b:34:d5:23:47:6f:99:23:5f:16:73:
         02:21:df:ed:b2:08:31:3a:44:55:68:bc:98:ce:11:59:28:45:
         3f:c2:82:33:5a:ce:a1:6c:cb:05:41:dc:63:0a:cb:2a:d7:1b:
         13:75:da:4d:e3:81:de:c0:86:5d:a6:fa:56:71:12:22:8a:b3:
         f6:2c:cf:1a:32:02:77:3a:9c:f1:f5:18:43:7a:18:46:13:ee:
         bc:b1:46:84:7a:f8:df:65:cc:cf:7c:98:6e:03:a9:51:a2:e4:
         c9:42:cb:81:6b:9f:73:53:1f:86:33:96:5d:c8:9a:7f:b6:9d:
         81:42:af:30:36:93:33:1c:2b:91:e7:9e:9e:bd:c5:e0:2f:01:
         db:10:61:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org