Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a353830303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a353830303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          SmETkhlCcid4SDoNXnavsryQE/LKkXxK4znFsCP1gQw=
Subject key identifier:   A5:64:50:2F:67:B9:0D:1E:73:C0:18:5D:C2:B6:4D:43:7F:4D:DB:D7
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       616F24F3E1FFC234B50A744064683D4B796C5551
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a353830303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:30 +0000
ROA not before:           Thu 03 Nov 2022 18:38:30 +0000
ROA not after:            Thu 02 Nov 2023 18:43:30 +0000
asID:                     269463
IP address blocks:        2804:6504:5800::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:6f:24:f3:e1:ff:c2:34:b5:0a:74:40:64:68:3d:4b:79:6c:55:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:30 2022 GMT
            Not After : Nov  2 18:43:30 2023 GMT
        Subject: CN=A564502F67B90D1E73C0185DC2B64D437F4DDBD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0d:d6:b4:76:39:a1:44:70:0e:87:e0:ca:cf:
                    a6:29:31:ab:f0:a0:e1:33:32:a7:cf:40:3e:53:9e:
                    6c:bd:cf:a1:3d:9d:65:76:c4:a1:97:19:e1:9c:5f:
                    0b:47:06:b3:70:af:27:be:c4:7d:9f:4b:b4:59:74:
                    cb:04:8a:17:7f:75:42:97:ee:5a:c5:94:e6:6d:d9:
                    17:44:5b:a0:cf:19:8e:62:92:78:03:f2:47:75:20:
                    67:43:25:b5:50:b1:3d:40:80:b4:76:5c:0c:3d:1a:
                    88:03:81:28:17:22:25:80:26:dc:93:f8:db:5e:5e:
                    17:3b:8e:b6:70:1c:4a:99:18:2a:60:3f:c5:fc:c4:
                    18:62:9f:fa:e5:db:ad:a6:1e:c0:6c:48:58:84:65:
                    58:c8:59:6b:6d:5f:66:18:02:87:28:18:b1:57:09:
                    7d:51:d3:29:77:bb:bf:07:ed:74:c0:f5:a7:85:fe:
                    ed:a6:47:06:9e:a6:c6:e3:a6:01:bf:2a:12:54:14:
                    4f:61:13:b7:63:5d:cd:ba:3f:83:88:29:c2:cd:ac:
                    fc:65:09:86:98:1e:b0:8b:a8:6c:20:08:0d:f8:c0:
                    fe:da:c9:51:0c:55:39:80:f5:c6:c7:22:a7:f2:20:
                    e0:67:48:5f:c5:a8:f1:a5:8a:8e:c2:2a:57:78:65:
                    70:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:64:50:2F:67:B9:0D:1E:73:C0:18:5D:C2:B6:4D:43:7F:4D:DB:D7
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a353830303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:5800::/38

    Signature Algorithm: sha256WithRSAEncryption
         ba:dd:37:8b:84:d1:28:20:da:7e:ce:39:71:96:cb:46:a8:4f:
         e5:18:bb:c6:d0:ab:e3:29:70:0c:c6:6f:eb:36:69:68:07:ad:
         39:98:3d:67:d0:1a:b0:0f:bb:80:6f:3b:da:3c:1d:b9:c4:45:
         75:85:3d:e5:1f:36:8b:cd:71:49:c4:1e:17:48:48:65:66:05:
         8f:c8:61:f0:b0:25:ed:2f:94:eb:dc:dc:bc:db:e0:00:f7:db:
         0a:8e:86:af:7a:e4:10:b4:ba:50:9c:e3:39:75:b8:a9:e3:ef:
         60:3c:c7:d4:51:87:9e:6b:5c:2c:b5:12:60:ff:57:c4:10:af:
         9f:c6:f1:8c:f0:c0:64:98:5d:44:9f:4c:b7:6c:8d:33:26:06:
         d2:38:73:40:ce:0d:2e:83:b3:7f:45:a1:21:47:f1:3d:5a:c3:
         a0:80:7f:69:e4:f0:26:74:0d:d3:ab:75:3b:2b:64:6b:dd:55:
         e8:62:45:2e:75:1c:1e:65:1b:98:0d:f1:28:6a:fc:9c:ab:2e:
         cc:44:a6:ae:67:bc:26:aa:85:d5:8a:50:c9:6e:cc:98:95:1b:
         9d:7f:e5:3e:48:d4:75:d4:2d:06:82:ee:b1:20:87:f4:30:d5:
         52:be:03:88:55:b2:69:43:4c:26:54:76:3f:53:fe:97:10:3b:
         5d:3d:85:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org