Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a356330303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a356330303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          gCpAY9h5nwSemNdFqK65LM3+9unoKCUDp/pV2xQdDZk=
Subject key identifier:   A3:00:6B:A1:20:CE:3A:CE:73:FF:6F:28:5B:D7:BB:C3:A9:20:A9:18
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       7A5A28D6898FF3B92944309D10AE939FE7444146
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a356330303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:29 +0000
ROA not before:           Thu 03 Nov 2022 18:38:29 +0000
ROA not after:            Thu 02 Nov 2023 18:43:29 +0000
asID:                     269463
IP address blocks:        2804:6504:5c00::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:5a:28:d6:89:8f:f3:b9:29:44:30:9d:10:ae:93:9f:e7:44:41:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:29 2022 GMT
            Not After : Nov  2 18:43:29 2023 GMT
        Subject: CN=A3006BA120CE3ACE73FF6F285BD7BBC3A920A918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:80:d8:57:09:f7:21:56:67:0f:f1:da:41:52:
                    6b:fd:43:cd:17:7c:9f:3f:37:f3:70:e3:b7:28:3d:
                    f3:22:e8:ef:0e:90:e8:15:b6:fd:15:5f:e0:80:10:
                    af:e9:35:0b:3f:e4:fd:d4:fa:e1:c9:6f:9d:b4:05:
                    cc:04:89:80:65:91:18:5d:6e:5d:a4:8d:78:5a:05:
                    51:c4:48:22:ac:a9:b0:f3:00:63:08:f8:e1:ad:3d:
                    fb:ad:df:5b:2c:cc:18:ad:e9:1a:29:d8:40:65:9e:
                    0b:29:85:8a:b8:11:1d:f7:47:77:32:63:78:c4:22:
                    8a:01:03:c4:d0:8c:c1:c2:d9:1d:52:58:82:95:4e:
                    43:75:ed:29:41:13:42:21:7c:7c:9b:7e:5e:b5:b4:
                    a6:b8:1b:f6:8f:4e:be:63:7d:7b:96:48:60:4b:8a:
                    c3:9d:12:d6:f1:36:e4:86:99:a4:df:08:f1:72:43:
                    f1:8c:6b:5e:14:0d:cf:48:36:f4:c0:b1:cb:93:b3:
                    46:fe:5e:6e:7d:91:87:ae:c1:db:79:6b:4e:37:31:
                    28:06:ac:7e:10:d0:ee:c9:d6:50:06:f9:79:0e:89:
                    1e:d5:54:5b:d6:dd:f1:65:76:91:3c:b3:77:37:fa:
                    39:e0:fa:ab:37:28:c9:23:d2:38:62:d3:c7:56:95:
                    e3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:00:6B:A1:20:CE:3A:CE:73:FF:6F:28:5B:D7:BB:C3:A9:20:A9:18
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a356330303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:5c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         57:ca:c7:c9:d4:c2:76:a5:ec:4a:40:6d:51:2a:42:60:6c:04:
         27:a9:06:f0:f7:27:b2:eb:11:fd:17:b3:2a:be:7e:9b:d8:ea:
         2f:80:d3:ab:96:1a:1f:f8:52:70:60:d2:e8:5d:45:90:02:cf:
         c5:4c:9e:5d:6b:7a:63:40:3e:c7:a4:d7:55:f9:86:0b:1f:82:
         50:e8:36:99:16:97:eb:d3:e9:10:99:7c:cc:5c:58:26:55:53:
         da:23:2a:76:77:45:e6:0a:17:8a:0e:e4:6b:3c:9f:1b:d7:70:
         5b:a8:18:30:04:c4:ff:28:e6:30:bc:62:05:fb:d7:b6:61:5b:
         8c:03:8d:84:69:f0:ca:4a:3b:5f:8d:3c:85:f2:dc:e9:36:62:
         21:6e:13:5e:70:10:07:99:9d:f0:60:93:24:b6:be:8b:0a:81:
         df:36:a2:ce:ff:12:39:8d:10:c6:78:86:85:47:1d:d5:be:33:
         c2:70:4d:e2:07:a6:46:ad:1e:85:ff:13:04:51:7b:7e:9e:5a:
         e6:08:f5:92:15:e6:1e:44:fe:bb:b9:b7:7c:28:68:0a:ff:17:
         b9:d6:fd:82:bf:fb:fc:d8:a5:f1:6d:3f:a6:2c:67:99:d7:dd:
         54:8e:3c:38:73:11:bd:69:c5:fe:ae:71:2c:4c:d2:82:c9:32:
         3e:10:89:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:06:52 2025 by rpki-client