Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a393030303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a393030303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          SzmjKTH4N9SGbZ1WrpAzWd8TNxiftxsgGSlzChC4zRc=
Subject key identifier:   3A:64:89:BC:0B:8E:CF:AA:04:72:A3:64:9F:37:57:44:09:9F:9D:11
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       52AB903590B31F5CB9C6E9742FA4177694D02962
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a393030303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:32 +0000
ROA not before:           Thu 03 Nov 2022 18:38:32 +0000
ROA not after:            Thu 02 Nov 2023 18:43:32 +0000
asID:                     269463
IP address blocks:        2804:6504:9000::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ab:90:35:90:b3:1f:5c:b9:c6:e9:74:2f:a4:17:76:94:d0:29:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:32 2022 GMT
            Not After : Nov  2 18:43:32 2023 GMT
        Subject: CN=3A6489BC0B8ECFAA0472A3649F375744099F9D11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:18:24:cb:87:fb:16:28:d1:39:a4:74:ac:dd:
                    08:51:3e:64:e1:c7:a9:e1:7f:2d:83:b8:d9:3a:a4:
                    6a:05:b7:dd:7c:e8:ba:e2:44:db:bc:9e:55:a8:c8:
                    2a:f6:09:b1:f1:69:7a:fb:6a:b6:7a:67:f3:85:76:
                    5a:29:57:f2:e4:1e:cb:2d:3c:5f:9d:c5:e6:eb:b5:
                    1b:08:73:60:7f:6f:9e:cb:d5:98:b1:3a:05:49:4d:
                    4a:93:4f:cc:b2:be:86:e8:82:ad:91:72:1d:c6:69:
                    96:07:47:bf:27:28:3c:fb:53:dd:61:c4:d4:e3:3d:
                    d6:14:3a:ee:f6:4e:70:ff:d9:f8:4a:9c:31:20:09:
                    5a:6e:90:18:2e:16:16:68:f9:d4:71:1c:d0:f4:fc:
                    76:fb:60:2e:f2:cb:72:20:81:83:a0:80:87:76:b8:
                    7d:1b:1a:d2:a6:db:49:c3:db:65:43:bc:af:20:cf:
                    90:91:58:07:0b:82:be:fb:0f:38:62:4e:07:79:47:
                    d9:c5:cf:8a:04:22:6c:b5:7c:24:af:3a:5f:6f:34:
                    6f:19:0b:e3:a7:a9:6b:71:ec:4c:97:50:07:7d:05:
                    64:a0:c1:72:42:da:53:e7:c0:35:b6:e7:a1:47:0d:
                    84:e9:e6:e7:24:4e:c5:77:f7:5e:be:43:af:63:f2:
                    20:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:64:89:BC:0B:8E:CF:AA:04:72:A3:64:9F:37:57:44:09:9F:9D:11
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a393030303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:9000::/38

    Signature Algorithm: sha256WithRSAEncryption
         53:fd:3b:3c:ba:76:8f:aa:b4:57:73:4f:20:e0:75:60:fb:2d:
         9f:05:11:e8:18:82:42:65:86:50:c4:b1:20:04:0a:b8:d5:3e:
         ec:bf:e8:cf:06:8b:05:94:bd:89:8f:d3:ab:e3:f1:d6:b6:d8:
         ad:84:15:59:ae:9d:72:c1:3e:d9:28:8d:81:2e:5a:f7:0c:62:
         83:de:cd:28:eb:dc:19:a6:ed:8f:27:56:c5:59:0a:5c:8a:fe:
         d2:a1:9b:12:10:0a:82:d2:0e:30:db:ae:dc:75:70:9e:07:27:
         f7:d6:c3:d1:cd:32:cc:06:34:65:5b:47:ca:81:f2:d0:e9:65:
         c9:a7:ee:c9:b4:01:3f:78:28:22:06:6e:61:d9:7f:24:86:c2:
         04:7a:9b:56:af:37:40:1c:67:2f:71:7d:a3:ca:6c:97:3b:e0:
         1b:af:55:c5:c1:7c:3b:5f:44:40:fd:21:dc:81:04:14:fc:d6:
         09:ab:8d:c1:e4:af:38:24:cc:f7:21:28:7c:2e:92:dd:45:a6:
         82:72:3b:fa:07:65:3f:5f:8f:c7:34:a8:6f:e4:45:b0:86:3c:
         42:c9:c2:e7:12:0b:ef:16:f0:47:6e:e7:b0:fd:42:d8:07:03:
         88:92:96:5b:ff:50:1f:3b:f2:75:06:dc:72:18:84:ec:21:a6:
         57:cf:1d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:03:53 2025 by rpki-client