Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a373430303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a373430303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          G26d7A9eZFuTyGE+HTUrp0KnyofbyxRMUsbFuXVa3dc=
Subject key identifier:   6A:FB:F7:7C:0E:2C:8E:D2:1C:53:EC:17:32:5C:39:92:7F:5C:12:1F
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       487753E3D69015BF3DD122274507E145C7158802
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a373430303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:34 +0000
ROA not before:           Thu 03 Nov 2022 18:38:34 +0000
ROA not after:            Thu 02 Nov 2023 18:43:34 +0000
asID:                     269463
IP address blocks:        2804:6504:7400::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:77:53:e3:d6:90:15:bf:3d:d1:22:27:45:07:e1:45:c7:15:88:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:34 2022 GMT
            Not After : Nov  2 18:43:34 2023 GMT
        Subject: CN=6AFBF77C0E2C8ED21C53EC17325C39927F5C121F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:67:ea:58:b0:98:07:0a:25:4d:f5:05:c1:e6:
                    2d:4f:53:5d:19:15:d6:66:32:be:d1:fb:15:44:7c:
                    7e:be:54:7f:b0:ff:f9:ab:71:7f:7b:54:e7:0b:16:
                    05:3b:b0:1c:27:8a:d6:ea:18:77:d9:a0:41:41:6a:
                    0b:f3:25:a9:66:e9:e8:b9:36:49:18:31:9f:d5:c2:
                    a4:08:26:ec:81:02:dd:c5:92:2f:ee:0e:a4:8a:44:
                    a9:f6:6b:f4:b7:f8:89:22:bf:62:2a:32:e5:59:98:
                    c8:fb:63:a8:02:2c:88:d9:94:6e:64:40:af:db:1c:
                    68:af:36:38:85:7b:c2:fc:95:0f:12:ab:87:01:79:
                    e8:c5:d2:36:ec:53:73:01:e6:bc:92:3a:ae:6e:17:
                    a1:61:62:8c:16:15:a7:11:64:af:16:3e:08:21:ef:
                    cd:22:12:be:92:94:df:2e:e6:e2:2e:ad:49:25:17:
                    27:e4:2c:16:14:9e:19:77:2c:15:be:e9:b9:cf:28:
                    6d:2c:c0:67:c1:4e:48:c0:00:7c:b3:42:41:35:38:
                    11:90:e3:57:57:5e:9f:e4:8c:c3:cc:41:ee:cb:e2:
                    6d:ab:4b:29:44:7c:59:39:fb:ec:d4:60:8d:8c:47:
                    c8:01:e3:08:dd:96:cc:0e:d5:32:7c:ec:a6:b8:1e:
                    f6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FB:F7:7C:0E:2C:8E:D2:1C:53:EC:17:32:5C:39:92:7F:5C:12:1F
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a373430303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:7400::/38

    Signature Algorithm: sha256WithRSAEncryption
         8f:af:5e:38:7d:99:48:6f:4a:43:e5:41:94:f2:0c:21:f9:ed:
         8d:16:be:91:18:13:41:f0:79:79:c9:ab:3e:ca:99:b0:a5:18:
         e1:dc:b2:1b:97:fc:3e:a3:a9:5b:29:7f:b3:3b:4f:d0:99:ea:
         2d:52:9b:7b:c1:a0:a1:34:e7:c8:c6:37:19:8e:99:dd:e7:90:
         4c:b1:90:24:fb:5e:f3:a1:a3:10:75:fe:40:83:74:60:75:db:
         d9:7a:b0:ec:c3:0b:d5:17:38:58:a5:53:52:69:a7:78:83:40:
         25:6d:06:4d:2a:35:df:56:35:0b:94:a3:ed:f3:9b:bb:5b:05:
         c6:53:a8:60:51:83:a9:5f:c4:8a:7a:45:d2:7f:1e:90:55:16:
         ee:d8:d3:24:d4:f8:a8:7e:3d:c5:7d:3a:5e:0a:b9:01:19:29:
         9e:08:f9:f3:91:f6:65:d3:47:ae:b1:3f:a4:b4:48:42:89:24:
         ba:ac:e3:5c:d5:ef:e9:ae:36:30:c8:cd:d5:99:82:9f:27:9d:
         c1:86:20:a7:c0:82:93:2f:20:68:74:7c:8f:99:6c:60:0b:ab:
         e9:d5:57:b6:e0:95:b3:f0:1b:29:90:6d:3b:16:d1:ab:34:52:
         8c:05:cf:36:12:ba:c9:d2:86:c8:c9:20:55:d9:2c:3d:c1:56:
         89:4c:c0:7e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUSHdT49aQFb890SInRQfhRccViAIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg1RUZDQTYxRkYxRkJGQUU5QzBEMUMzQ0IzOUIwNjMw
MDJDM0M1OTAeFw0yMjExMDMxODM4MzRaFw0yMzExMDIxODQzMzRaMDMxMTAvBgNV
BAMTKDZBRkJGNzdDMEUyQzhFRDIxQzUzRUMxNzMyNUMzOTkyN0Y1QzEyMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOZ+pYsJgHCiVN9QXB5i1PU10Z
FdZmMr7R+xVEfH6+VH+w//mrcX97VOcLFgU7sBwnitbqGHfZoEFBagvzJalm6ei5
NkkYMZ/VwqQIJuyBAt3Fki/uDqSKRKn2a/S3+Ikiv2IqMuVZmMj7Y6gCLIjZlG5k
QK/bHGivNjiFe8L8lQ8Sq4cBeejF0jbsU3MB5rySOq5uF6FhYowWFacRZK8WPggh
780iEr6SlN8u5uIurUklFyfkLBYUnhl3LBW+6bnPKG0swGfBTkjAAHyzQkE1OBGQ
41dXXp/kjMPMQe7L4m2rSylEfFk5++zUYI2MR8gB4wjdlswO1TJ87Ka4HvbPAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUavv3fA4sjtIcU+wXMlw5kn9cEh8wHwYDVR0j
BBgwFoAU2F78ph/x+/rpwNHDyzmwYwAsPFkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2lDd2JBUzFMbmc1TG9UY3F5RHJKY3FCbnY3ZVdmcXVMakRqN1gxTmhN
Mk0vMC9EODVFRkNBNjFGRjFGQkZBRTlDMEQxQzNDQjM5QjA2MzAwMkMzQzU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q4NUVGQ0E2MUZGMUZCRkFF
OUMwRDFDM0NCMzlCMDYzMDAyQzNDNTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dpQ3diQVMxTG5nNUxvVGNxeURySmNxQm52N2VXZnF1TGpEajdYMU5oTTJNLzAv
MzIzODMwMzQzYTM2MzUzMDM0M2EzNzM0MzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNk
M2UyMDMyMzYzOTM0MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAigEZQR0MA0GCSqGSIb3DQEBCwUA
A4IBAQCPr144fZlIb0pD5UGU8gwh+e2NFr6RGBNB8Hl5yas+ypmwpRjh3LIbl/w+
o6lbKX+zO0/QmeotUpt7waChNOfIxjcZjpnd55BMsZAk+17zoaMQdf5Ag3RgddvZ
erDswwvVFzhYpVNSaad4g0AlbQZNKjXfVjULlKPt85u7WwXGU6hgUYOpX8SKekXS
fx6QVRbu2NMk1Piofj3FfTpeCrkBGSmeCPnzkfZl00eusT+ktEhCiSS6rONc1e/p
rjYwyM3VmYKfJ53BhiCnwIKTLyBodHyPmWxgC6vp1Ve24JWz8BspkG07FtGrNFKM
Bc82ErrJ0obIySBV2Sw9wVaJTMB+
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:08 2025 by rpki-client