Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a383830303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a383830303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          431GPVfXd2e0F9JeGnJAWbjmtS4LjJ/78sv2beMxjYM=
Subject key identifier:   A6:54:C9:A9:1D:C2:AA:36:A8:D5:58:DC:85:EF:CC:DA:0F:E1:00:FD
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       49B6E6B8C660EEDDFE17F95C08E6F8B730FA6870
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a383830303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:31 +0000
ROA not before:           Thu 03 Nov 2022 18:38:31 +0000
ROA not after:            Thu 02 Nov 2023 18:43:31 +0000
asID:                     269463
IP address blocks:        2804:6504:8800::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b6:e6:b8:c6:60:ee:dd:fe:17:f9:5c:08:e6:f8:b7:30:fa:68:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:31 2022 GMT
            Not After : Nov  2 18:43:31 2023 GMT
        Subject: CN=A654C9A91DC2AA36A8D558DC85EFCCDA0FE100FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:97:bf:40:d8:fa:a3:26:8e:2c:0d:e4:7b:84:
                    7d:03:2a:d6:e7:62:1e:2d:96:75:5a:73:fd:f4:5d:
                    cf:77:37:ee:19:51:0b:7a:35:16:cc:66:82:39:41:
                    32:6c:d4:db:60:a6:16:00:cd:19:5c:f4:f8:d8:c0:
                    18:48:c7:c9:fb:44:63:8e:de:2f:90:13:de:a1:2e:
                    85:43:47:ba:35:18:7f:2f:80:53:2c:a0:8f:7e:4d:
                    6d:5d:ea:09:6e:48:c0:c7:70:b9:0f:4e:65:d6:78:
                    76:8c:1e:65:cd:44:e5:7a:0c:8e:da:d4:f9:e7:fb:
                    f5:61:02:dc:2f:a3:17:30:92:e3:29:66:57:f3:ee:
                    dd:e7:82:eb:20:18:a2:65:02:4f:3e:a9:35:92:9a:
                    74:77:ae:35:9f:2c:1a:f5:ec:8f:9e:f6:11:3d:6f:
                    2e:5e:32:1f:d6:d7:83:c8:32:b0:c5:f9:6b:57:7a:
                    1d:98:c5:f1:23:dc:db:7d:ae:a4:b8:91:c9:bb:3a:
                    b5:99:5c:bb:0f:4c:a0:55:99:6e:53:bf:ac:78:16:
                    03:ff:1e:0d:6a:48:9d:c6:3b:fd:83:cc:01:5c:2a:
                    42:8f:2a:9b:8c:00:b6:d1:f3:36:49:5c:2e:6b:9c:
                    6c:1d:71:46:0a:38:62:41:0e:14:3d:98:55:2e:2c:
                    bb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:54:C9:A9:1D:C2:AA:36:A8:D5:58:DC:85:EF:CC:DA:0F:E1:00:FD
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a383830303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:8800::/38

    Signature Algorithm: sha256WithRSAEncryption
         21:b1:f2:90:ac:e9:37:59:9b:56:62:d1:9e:23:33:9e:6a:68:
         24:49:30:bd:b2:83:d5:6b:41:6f:ac:4a:c1:d5:23:b7:a3:76:
         ca:d5:a0:18:90:bd:f4:12:5a:df:b4:d1:92:60:3b:45:de:28:
         60:1f:64:de:6b:74:cc:f9:ae:43:a8:48:40:df:91:0c:ba:78:
         d5:5d:a8:4d:43:84:d2:73:8d:ac:a0:c8:aa:95:96:19:6b:f6:
         be:60:01:5d:7b:2e:01:c5:5c:15:f9:a9:c7:fd:32:01:51:25:
         21:5e:98:16:d2:bf:39:5e:30:76:22:fd:05:fc:ac:a2:6e:bc:
         92:0b:a4:39:bb:bd:d8:d7:d8:a1:5c:05:fc:8f:98:0c:54:43:
         91:19:8c:8a:24:06:e1:94:e7:cd:58:94:40:57:d1:87:4a:58:
         0c:07:b9:9d:59:3d:01:e3:75:7d:88:36:df:cb:b7:d4:67:bd:
         fd:4d:1a:7d:42:b6:07:1e:b6:9e:5b:66:ed:6f:5e:a4:e6:e7:
         26:fb:2a:bc:e1:a4:db:6c:1a:27:09:7d:f5:f1:78:47:c4:85:
         bf:bb:7b:dc:0d:f8:f3:66:92:bb:01:23:68:a7:60:84:61:c3:
         f8:f6:14:a1:a5:27:1b:95:0b:34:f2:fd:c6:64:a9:f5:5f:0d:
         c9:3a:59:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org