Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a363830303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a363830303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          FqYSVqy5goPz5MD+v3ABqNpqWSvBHJs1RTjyQY+NWYE=
Subject key identifier:   5F:4A:3D:1D:75:25:07:99:5E:DC:D5:2A:68:9E:D0:CA:99:30:B6:65
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       69E72E5C2ED6EC08CF3F035964E30DCAF7AB300E
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a363830303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:24 +0000
ROA not before:           Thu 03 Nov 2022 18:38:24 +0000
ROA not after:            Thu 02 Nov 2023 18:43:24 +0000
asID:                     269463
IP address blocks:        2804:6504:6800::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e7:2e:5c:2e:d6:ec:08:cf:3f:03:59:64:e3:0d:ca:f7:ab:30:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:24 2022 GMT
            Not After : Nov  2 18:43:24 2023 GMT
        Subject: CN=5F4A3D1D752507995EDCD52A689ED0CA9930B665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bd:90:bc:53:ea:f6:b4:0e:32:a2:84:ae:d9:
                    c2:17:62:cb:35:c3:e1:c0:90:ad:09:9a:10:7a:09:
                    4e:eb:ac:e4:e3:4a:16:b3:91:d6:ee:b3:3a:c3:ca:
                    52:a8:48:99:a4:f7:43:d7:fe:95:cd:1a:8b:73:57:
                    bf:64:9d:fa:a2:c9:8a:f6:49:06:e8:b7:81:34:f8:
                    9b:c2:10:5c:f0:10:8b:7e:bd:93:c4:52:92:fb:cc:
                    61:3f:41:98:ca:87:61:06:47:b2:2c:a0:44:b4:8a:
                    9b:e6:38:48:92:0b:66:2f:12:b6:75:48:db:93:5f:
                    f7:5d:de:c8:bc:38:68:73:b4:56:6d:30:f3:0f:c3:
                    a1:7a:aa:f1:02:1b:c3:d1:f8:96:2c:b3:85:d8:f6:
                    3b:29:4f:4a:42:d5:c0:d7:13:ab:12:88:29:d7:fc:
                    a6:1c:cb:52:78:e2:f1:be:14:d9:21:d1:99:a2:9e:
                    75:2c:97:b3:d7:7e:db:d8:58:c2:d9:44:93:13:1e:
                    96:2c:aa:57:66:08:73:37:ed:2c:fa:0a:e0:6c:ed:
                    f9:d6:61:63:84:4a:6b:a8:1e:38:9a:db:52:6d:56:
                    1e:d9:79:a3:22:9b:72:a2:c7:4b:b6:98:c6:5d:dc:
                    ba:70:62:40:69:12:8d:ed:b7:88:28:26:2b:65:66:
                    bb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4A:3D:1D:75:25:07:99:5E:DC:D5:2A:68:9E:D0:CA:99:30:B6:65
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a363830303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:6800::/38

    Signature Algorithm: sha256WithRSAEncryption
         b4:e4:54:40:7d:c3:f3:a1:5a:fc:8d:36:fd:2e:9a:69:40:ed:
         3d:c3:42:dd:0c:1f:68:56:5d:17:95:18:14:40:8b:2b:71:c8:
         67:34:85:06:51:00:3c:c1:15:4c:5d:f2:2a:8f:07:0e:f0:94:
         79:c4:96:65:8f:12:c8:d4:46:cf:dd:ad:ec:db:26:d1:b3:eb:
         be:ad:47:ad:60:98:44:76:88:af:7a:20:89:d7:4b:33:d1:51:
         32:c0:76:9e:16:c2:33:7d:d4:d6:98:8d:bc:48:ae:af:28:78:
         27:23:77:9e:d0:a4:db:06:3b:e6:53:a7:b7:f0:3f:61:04:75:
         f6:38:29:35:f0:3a:b5:a0:31:ed:1c:60:f6:80:32:eb:a8:8d:
         b8:43:75:62:08:1c:9f:57:0e:bf:92:f4:d1:d2:48:5b:72:f4:
         fd:58:a5:d0:f2:82:16:6e:bc:10:c6:f3:48:7b:b4:d9:e5:71:
         19:b0:ce:ed:bf:3a:46:b2:e1:9b:32:f3:3c:68:97:13:a8:7a:
         80:eb:4e:4c:4d:cb:55:e8:31:40:41:ba:a4:92:9c:a8:99:65:
         e1:2d:56:07:0b:cc:37:5b:68:55:06:0a:4a:d7:4b:d2:c7:b6:
         97:03:5b:40:a6:61:58:00:ce:6a:bc:f6:32:07:19:13:9a:35:
         80:89:bd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org