Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a3830303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a3830303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          ZEClGYrqQnj0Sg3Lujr7WtlB1LvuXbq8LFiXHKiCahw=
Subject key identifier:   8F:BF:AB:C9:43:70:9F:3D:E0:13:BE:55:4F:A5:73:0B:79:4D:08:55
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       1DC9FE5AF80B1B00818DB26A1AA2DE7E203228D0
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a3830303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:30 +0000
ROA not before:           Thu 03 Nov 2022 18:38:30 +0000
ROA not after:            Thu 02 Nov 2023 18:43:30 +0000
asID:                     269463
IP address blocks:        2804:6504:800::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c9:fe:5a:f8:0b:1b:00:81:8d:b2:6a:1a:a2:de:7e:20:32:28:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:30 2022 GMT
            Not After : Nov  2 18:43:30 2023 GMT
        Subject: CN=8FBFABC943709F3DE013BE554FA5730B794D0855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:90:3f:5b:90:67:8f:d3:74:ef:8d:99:69:27:
                    be:db:24:29:50:1a:92:af:c8:a9:9f:4b:d4:c1:c9:
                    3c:74:6b:fa:d4:ec:bc:fe:49:0b:04:21:b9:a3:47:
                    4c:e5:e6:ad:69:23:3b:82:72:fd:d7:c2:23:6e:26:
                    07:8b:53:64:b4:9b:e6:fc:9e:73:02:56:6a:81:24:
                    67:94:21:16:79:18:f2:3e:98:9c:22:09:6b:35:ca:
                    1c:04:ee:1f:7b:59:1c:48:19:a6:9d:5d:bd:de:c4:
                    60:59:d1:1b:1e:f3:ce:01:e0:33:f9:67:66:57:51:
                    b6:8f:e1:06:26:e0:e5:cd:25:64:96:e0:15:b1:af:
                    fc:36:79:61:bf:18:75:63:f7:73:04:39:fe:cd:b7:
                    9f:cf:f0:ef:e5:fe:88:aa:ed:c0:2a:d8:fe:9b:cc:
                    43:e9:0c:78:22:5c:ac:41:11:46:49:4c:cf:39:7c:
                    00:20:64:d4:e0:2a:7e:8d:ce:79:11:ce:be:7d:e3:
                    87:84:df:17:ba:d7:8f:36:fb:68:a7:07:7c:41:2e:
                    ae:2f:f6:83:df:6e:9e:18:64:dd:95:33:6d:1c:68:
                    64:b9:a9:63:62:73:f4:28:09:0b:02:ee:0f:10:63:
                    66:13:27:3e:35:18:dc:a5:81:5b:12:59:26:f1:13:
                    c0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BF:AB:C9:43:70:9F:3D:E0:13:BE:55:4F:A5:73:0B:79:4D:08:55
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a3830303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:800::/38

    Signature Algorithm: sha256WithRSAEncryption
         63:bb:82:3c:8e:dc:d3:cb:71:d6:47:49:77:ec:a3:b9:ef:0f:
         d0:82:b6:68:6e:64:24:01:ce:bc:2c:27:f9:a2:82:88:20:ac:
         35:eb:35:dd:de:75:25:3c:a5:7f:b0:02:9e:26:62:c1:e1:0b:
         22:dd:7f:9d:3a:39:af:cc:35:06:5d:d3:12:8d:90:e8:72:00:
         75:b0:14:7c:32:86:df:a1:fe:3e:7a:f0:71:c2:4e:4c:a4:a1:
         78:43:67:a0:c4:91:7d:6e:5e:96:51:37:dd:f6:1b:4f:f0:fd:
         e9:6d:4c:e9:dd:24:96:62:b8:3f:2d:d4:be:b0:84:03:d2:31:
         a8:09:cf:b9:ec:7d:c7:18:ea:c4:5e:e1:43:6d:a4:35:35:ac:
         0c:23:fb:5c:98:da:1e:9c:87:a7:c5:81:0a:c1:44:69:e2:dd:
         82:c7:69:c4:ff:9c:80:9d:0e:80:62:1e:18:2f:d0:e4:55:ef:
         fd:f4:24:5f:16:78:e4:6d:88:00:10:f6:ae:67:b6:84:dc:3b:
         b0:6c:2b:72:5b:fa:64:c2:80:c2:36:52:b1:18:c2:dc:ff:71:
         d4:1c:8f:a9:8c:6f:d1:6a:91:73:ea:27:f2:b9:3d:76:db:44:
         ae:87:94:c4:c7:6c:ed:f2:e1:ec:2f:03:d8:10:e5:b1:04:a7:
         4b:c1:fd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org