Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a363430303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a363430303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          ikvxK/AryFWid6Dd7UA5go+mS/cP2feKpw5CHVOK2jU=
Subject key identifier:   DF:79:78:09:6F:0A:16:8E:99:3F:F0:2B:2F:67:7E:47:F5:B5:EF:4D
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       799A39A379FEB48B166EF1654AF4E1AF8A0B45CF
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a363430303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:32 +0000
ROA not before:           Thu 03 Nov 2022 18:38:32 +0000
ROA not after:            Thu 02 Nov 2023 18:43:32 +0000
asID:                     269463
IP address blocks:        2804:6504:6400::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:9a:39:a3:79:fe:b4:8b:16:6e:f1:65:4a:f4:e1:af:8a:0b:45:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:32 2022 GMT
            Not After : Nov  2 18:43:32 2023 GMT
        Subject: CN=DF7978096F0A168E993FF02B2F677E47F5B5EF4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d8:e3:99:13:5c:78:71:b7:ce:3d:c9:da:9b:
                    58:9a:e3:e9:0b:bd:af:5c:a7:78:9c:1d:c8:44:09:
                    0c:79:66:e3:38:12:9c:20:76:4b:b6:2e:95:e2:4b:
                    c6:67:93:67:50:c0:61:d3:8c:36:d6:41:a0:bc:08:
                    b5:d6:e2:18:97:4b:15:01:2a:0a:3a:b7:75:34:ff:
                    38:ef:c7:9f:99:0f:dd:e5:c9:52:f8:f4:02:82:d2:
                    8a:80:57:3c:f6:c9:36:3c:83:76:a4:c0:07:38:78:
                    e6:be:8f:c3:4c:c4:09:2a:f4:5d:dd:5a:a0:c7:0c:
                    6c:db:7e:09:85:02:fb:84:da:fe:89:cd:31:d1:1a:
                    0d:13:73:53:54:a0:65:62:82:e5:c4:2f:7f:61:2e:
                    3b:a4:e7:b1:77:ce:13:9d:93:36:68:ed:3d:3a:fa:
                    e7:33:c1:b6:45:40:95:34:f2:bd:33:af:3b:cf:ad:
                    4a:7b:12:fc:41:a4:b2:44:a9:54:85:ad:2b:d2:dc:
                    45:f4:66:10:5d:72:ba:21:e6:97:02:fd:a3:6f:a6:
                    da:d4:9d:52:42:3f:34:83:0e:2d:89:fb:39:8a:c7:
                    61:f6:96:71:b2:25:30:29:39:17:97:a7:6f:a1:c3:
                    c8:94:00:ed:f4:64:1d:fc:69:6a:9c:9a:5d:3e:b7:
                    49:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:79:78:09:6F:0A:16:8E:99:3F:F0:2B:2F:67:7E:47:F5:B5:EF:4D
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a363430303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:6400::/38

    Signature Algorithm: sha256WithRSAEncryption
         08:3d:f2:52:dc:e0:a0:d3:75:66:15:f7:25:c2:08:72:93:ac:
         e9:5c:d4:a3:a3:19:f2:a4:7d:a7:d5:9b:b6:b8:d4:1e:0f:2a:
         17:e9:1f:f7:89:4e:11:da:5a:73:f7:0c:01:f4:7c:76:65:35:
         4a:94:63:f7:e3:11:7e:1a:61:48:75:a6:3d:06:b3:72:5c:78:
         cb:c2:68:e8:7f:c2:02:26:a0:39:62:d1:c8:25:47:e0:85:a5:
         6a:e3:b0:8f:25:f0:a6:6d:59:a5:8c:65:cf:fe:b1:54:b6:df:
         3f:06:36:82:55:1b:65:a0:86:0d:43:7d:4d:61:6d:92:93:9b:
         61:2f:fb:e0:21:29:0c:79:ea:0f:30:b8:2c:80:c5:31:fa:49:
         39:cb:2a:b3:c5:1f:52:2c:b1:b5:ec:d6:30:96:bd:70:0c:04:
         b8:cf:29:24:25:26:89:15:82:da:09:ad:9e:8b:ce:64:d2:88:
         e5:8b:34:a6:8d:31:81:c9:2a:e4:21:72:76:f6:01:43:bd:49:
         46:bf:cc:32:97:96:a9:e1:78:16:3f:e9:1a:08:a7:11:40:00:
         43:e8:34:ac:fe:6f:39:91:e2:c9:eb:84:7e:57:30:25:02:24:
         0f:26:88:6a:bc:07:3e:e1:19:ca:18:02:49:e7:39:5f:5c:7a:
         fa:fa:81:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org