Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a383030303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a383030303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          yLWWeYPhNz/o8qjk9jdtRN7YEX3NKTAfS20lbgY/QzQ=
Subject key identifier:   46:54:AA:C3:22:CD:B9:C3:4E:3F:39:A3:B6:E2:6D:23:AA:D1:A3:C4
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       0F42755A7A1D77A39AF1BDD04DD343851D57C00D
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a383030303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:33 +0000
ROA not before:           Thu 03 Nov 2022 18:38:33 +0000
ROA not after:            Thu 02 Nov 2023 18:43:33 +0000
asID:                     269463
IP address blocks:        2804:6504:8000::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:42:75:5a:7a:1d:77:a3:9a:f1:bd:d0:4d:d3:43:85:1d:57:c0:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:33 2022 GMT
            Not After : Nov  2 18:43:33 2023 GMT
        Subject: CN=4654AAC322CDB9C34E3F39A3B6E26D23AAD1A3C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:52:4d:1c:e4:f9:43:1b:41:b8:75:95:54:e8:
                    d5:b2:3b:c0:59:1d:d8:39:99:bc:d9:3f:fc:c5:ca:
                    31:2a:e4:dc:d5:ef:2a:f2:2b:49:72:71:23:b8:89:
                    98:6b:64:be:10:ec:fd:56:ac:eb:fa:8e:f7:6a:ad:
                    ea:26:9c:4b:c0:fd:ec:e6:04:97:6f:5c:a6:40:6a:
                    47:4e:e5:52:38:4b:35:25:14:56:3f:80:38:9b:ef:
                    60:af:d6:a5:91:1d:cd:53:d3:c0:ca:63:ec:88:a2:
                    00:c9:59:dd:d7:c3:df:0a:9b:39:42:ec:c3:fe:8f:
                    e2:04:16:67:be:07:b4:cc:4d:6a:d5:d5:f1:62:7b:
                    a5:75:c4:c2:86:c3:b7:82:9b:94:2a:1f:51:6f:de:
                    db:77:db:d7:a6:56:3c:b7:c0:4f:41:fb:a5:83:15:
                    ba:8f:16:eb:80:07:6b:f9:b3:e2:63:e9:70:e8:e2:
                    ac:cb:88:05:b7:1a:b8:74:ba:b9:62:e6:cd:c8:6e:
                    12:64:7b:c8:f7:3d:78:ac:85:3a:a5:87:ae:8b:b5:
                    b9:44:52:35:0d:0a:7e:2a:d5:ca:05:00:fa:2c:60:
                    e9:a1:21:07:85:40:8c:53:86:73:a1:5a:65:e5:5c:
                    49:64:e5:ab:21:1b:eb:c1:6e:e6:4e:76:0f:78:5a:
                    e7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:54:AA:C3:22:CD:B9:C3:4E:3F:39:A3:B6:E2:6D:23:AA:D1:A3:C4
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a383030303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:8000::/38

    Signature Algorithm: sha256WithRSAEncryption
         54:60:45:10:be:ab:20:81:dd:90:8f:61:ca:e1:8f:b0:63:4d:
         2c:6a:70:43:66:7f:68:4d:73:bf:76:aa:6c:99:53:fd:5e:9e:
         ba:35:bb:de:99:d1:3f:f6:ab:49:63:19:bd:6a:92:24:4a:4d:
         02:ad:52:2f:cd:27:f7:55:d4:ea:3b:4c:c6:e2:6d:5b:52:3f:
         11:99:af:a9:22:3b:fc:49:f9:75:4f:38:be:24:5f:cd:69:0a:
         d6:9c:24:4a:cb:09:e5:d6:c5:a1:aa:d8:de:71:64:9b:a6:aa:
         59:10:ef:5e:f2:1d:f6:0d:b3:f9:0c:78:67:17:bb:65:bd:5b:
         b3:31:ad:7c:18:1b:19:cb:1c:25:0e:92:90:b5:48:79:ff:cd:
         1d:91:4f:7d:39:56:21:ed:a9:bb:94:04:12:4a:f2:d0:04:4e:
         57:84:f0:88:23:5c:47:d0:09:ea:19:5c:87:a4:17:cb:9f:52:
         41:7f:3c:2a:c5:24:66:19:22:62:e5:a4:b1:8d:fa:36:54:a3:
         27:31:98:8b:56:9f:29:f9:02:5c:df:e6:02:b2:94:b9:21:0f:
         73:6a:ba:e8:29:01:c0:7a:d9:50:bc:51:f2:2d:04:fb:f3:90:
         8f:27:e2:8f:52:9d:b2:dc:d7:3f:3d:b4:ee:53:75:40:63:c5:
         cc:19:af:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org