Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a353430303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a353430303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          9oBO+W5GcC+Immt51FL/Qihz/UYzhrZww5ukL5vM0UA=
Subject key identifier:   87:D9:F8:67:B6:7A:56:D5:00:8B:24:D4:53:02:2C:DE:A3:5E:B8:BB
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       0A7E2AF197C96D347CBD9EF45EDFA1F6899FAB3B
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a353430303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:26 +0000
ROA not before:           Thu 03 Nov 2022 18:38:26 +0000
ROA not after:            Thu 02 Nov 2023 18:43:26 +0000
asID:                     269463
IP address blocks:        2804:6504:5400::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:7e:2a:f1:97:c9:6d:34:7c:bd:9e:f4:5e:df:a1:f6:89:9f:ab:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:26 2022 GMT
            Not After : Nov  2 18:43:26 2023 GMT
        Subject: CN=87D9F867B67A56D5008B24D453022CDEA35EB8BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7e:32:63:68:a8:8d:65:1c:94:07:3e:32:28:
                    f0:6d:05:4f:c7:d5:65:28:10:c5:c6:d9:bd:93:3d:
                    4c:24:6f:ad:db:5b:21:62:42:0b:68:51:ae:dd:7f:
                    45:48:95:2f:18:58:1f:29:c3:03:2e:4d:6c:7b:78:
                    2b:1f:62:5f:80:d7:6f:c8:8a:63:59:2b:d3:d5:37:
                    c4:72:ec:bb:6d:ba:43:1c:4f:c5:22:59:48:b7:65:
                    de:a8:52:30:f6:73:0d:e3:83:ed:21:6a:d9:5e:27:
                    04:09:b9:d1:a2:6d:89:b4:f1:86:5e:cf:fc:2c:58:
                    78:02:21:c2:f7:d1:5b:ba:b3:b5:6b:4f:47:13:69:
                    68:dc:1d:26:94:c0:63:fe:7d:b8:de:99:ba:b4:39:
                    8d:ae:d3:76:c3:e7:00:b8:0b:bd:fe:a5:b7:3a:2a:
                    15:fa:74:36:ae:57:28:10:9a:f1:54:54:11:9a:dd:
                    98:d8:39:0c:b8:33:53:5d:5f:2d:1a:4c:db:a7:35:
                    b3:f9:bb:ba:e8:05:14:46:39:01:88:53:a2:3e:df:
                    7c:35:f0:20:56:8c:58:f9:5e:1d:09:18:ed:33:ba:
                    09:8f:4c:a8:e6:9b:d9:7d:7b:97:c1:0e:87:55:e1:
                    91:ee:9e:52:05:83:17:56:f0:d5:95:bc:af:7d:5f:
                    06:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D9:F8:67:B6:7A:56:D5:00:8B:24:D4:53:02:2C:DE:A3:5E:B8:BB
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a353430303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:5400::/38

    Signature Algorithm: sha256WithRSAEncryption
         6f:4f:fb:b2:f8:a0:69:65:5e:3c:db:80:17:5b:2c:dc:3a:62:
         8f:ce:19:9a:1a:b1:10:65:9a:7b:34:22:8d:d6:ac:e0:17:86:
         75:9b:70:a4:d4:99:9d:dc:de:60:dc:65:b7:20:fb:18:ab:e9:
         72:b1:56:5d:51:9f:87:3c:f7:98:b8:7d:e6:17:e7:84:3f:d0:
         67:c0:90:21:31:28:d5:b2:7b:8e:92:8a:60:1c:ae:f5:5b:a4:
         2c:38:67:60:95:f1:31:15:60:3d:d8:43:45:10:5e:d8:d0:73:
         51:ec:32:c8:8e:69:3a:65:23:eb:b1:c5:d1:55:f2:5f:65:a9:
         d1:a4:c3:af:c4:64:72:fd:57:fd:d4:ba:76:54:2a:35:38:18:
         01:34:02:70:b0:1b:3e:14:90:16:29:ad:db:fe:93:10:54:38:
         9b:25:a9:21:5b:c2:aa:22:05:37:32:2a:a4:e9:29:87:14:77:
         e3:58:c8:72:3c:4d:5e:90:2e:bc:8a:75:e6:b2:e0:04:0d:62:
         a3:a6:b3:e7:8e:57:8f:69:3a:af:f2:07:f5:50:19:23:2b:de:
         76:c6:09:a0:0a:bc:3d:c1:38:3b:1d:79:8b:e7:35:b2:7f:85:
         86:8c:e4:fb:2c:24:e0:96:9a:9f:68:a6:b3:e7:2a:c7:59:13:
         38:ef:51:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org