Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a373830303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a373830303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          hIA9dAH1snpwwqjlyJ1qQ/L15KQOZTJdCprdaetEvkg=
Subject key identifier:   55:B2:00:31:5B:65:C7:2D:87:B6:97:24:8B:B7:CE:F8:69:1E:D7:33
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       79689B837E3C7AFEE45859A0B679F34DF0CA2033
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a373830303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:33 +0000
ROA not before:           Thu 03 Nov 2022 18:38:33 +0000
ROA not after:            Thu 02 Nov 2023 18:43:33 +0000
asID:                     269463
IP address blocks:        2804:6504:7800::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:68:9b:83:7e:3c:7a:fe:e4:58:59:a0:b6:79:f3:4d:f0:ca:20:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:33 2022 GMT
            Not After : Nov  2 18:43:33 2023 GMT
        Subject: CN=55B200315B65C72D87B697248BB7CEF8691ED733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9a:ea:8a:8b:e6:ca:2e:f3:a0:15:84:cd:b2:
                    d6:25:9e:ed:35:81:5a:e0:6e:14:47:3d:99:41:b9:
                    42:da:ff:2b:27:bb:68:d1:d6:ee:38:d3:ca:fc:0c:
                    d3:4d:c1:89:bf:87:47:cb:dd:66:02:a5:38:3e:16:
                    27:d8:eb:0c:8d:77:1f:54:83:48:36:03:3a:e8:8f:
                    78:20:29:49:f1:b2:f4:51:9e:59:9d:db:3f:1e:98:
                    52:48:05:fc:b2:84:c2:db:85:e9:83:4c:24:e5:09:
                    0e:ab:47:d3:75:0b:37:a9:fd:c2:ab:e9:57:fe:57:
                    fb:67:39:3d:ae:3e:85:c2:cf:5c:b4:d5:3c:c2:30:
                    2f:a7:ae:e1:5e:5a:fc:ae:5f:08:2f:22:37:8a:d0:
                    9d:fb:c0:3f:c4:19:82:d1:58:f7:5a:21:fb:1c:94:
                    b4:93:af:43:df:1b:1c:8e:84:8d:fa:e9:60:f0:37:
                    ba:ba:51:28:c1:11:74:84:e6:ae:c5:41:18:06:c5:
                    01:e3:61:46:db:8e:71:35:3c:85:16:22:e7:41:fe:
                    b8:4e:b3:23:ec:44:95:25:ba:64:81:50:ec:46:76:
                    8f:bb:33:7a:f4:b9:94:97:75:13:b9:13:73:68:54:
                    91:99:89:eb:d3:5b:0c:19:e8:fe:a0:bb:d0:6d:a8:
                    df:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B2:00:31:5B:65:C7:2D:87:B6:97:24:8B:B7:CE:F8:69:1E:D7:33
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a373830303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:7800::/38

    Signature Algorithm: sha256WithRSAEncryption
         83:5c:07:f1:8e:02:87:26:fd:5d:54:46:49:3f:d0:55:fb:a3:
         88:a3:49:e1:e0:e0:f2:26:9c:8a:7d:9a:fa:ab:5d:1d:16:d6:
         e5:7f:39:64:94:8b:38:40:c9:f6:48:32:01:7f:e8:1f:cd:1a:
         ee:a4:6f:f5:d3:16:a6:42:ee:9d:34:c1:b5:6b:7c:ee:82:cf:
         39:8f:46:08:6f:26:70:22:fe:57:d5:a4:34:7a:8d:0c:4b:3f:
         4c:f5:86:f6:01:aa:8e:5a:fb:0b:24:53:77:14:05:84:ec:ed:
         b1:23:ae:5d:ed:7a:f3:6c:ff:30:fe:c0:2c:e5:0c:94:92:7a:
         46:6f:da:b0:78:67:8c:64:1f:0f:0f:05:d4:86:86:50:b5:b8:
         b4:a2:04:c9:a6:17:af:58:df:e2:af:e9:9a:6e:3a:02:05:dd:
         62:bd:39:66:36:c3:b9:71:cb:53:af:34:c0:5a:f0:da:15:9c:
         7b:34:95:00:65:bf:9a:33:94:fb:8f:d8:f1:87:7b:3e:af:ce:
         b3:2a:81:f0:22:e6:17:b2:f0:42:ff:bd:4c:f0:c9:bd:46:c9:
         49:65:e4:4b:89:48:ba:19:fb:19:54:10:da:c7:b9:d4:00:3f:
         c4:14:cd:0b:f5:db:5e:11:7b:55:76:fa:57:c6:10:b9:8e:c1:
         c6:80:08:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org