Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a393430303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a393430303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          iILlnZnuxDkbwJwQZ5vND72aUlfDWlA5xF4O9Rxlrss=
Subject key identifier:   C8:79:94:7A:45:C2:E3:89:3F:FA:78:E1:96:40:E6:B4:93:59:F1:D2
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       47A46B416D7AA6FACA35BE8ECFD5118C0A96E6F8
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a393430303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:23 +0000
ROA not before:           Thu 03 Nov 2022 18:38:23 +0000
ROA not after:            Thu 02 Nov 2023 18:43:23 +0000
asID:                     269463
IP address blocks:        2804:6504:9400::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a4:6b:41:6d:7a:a6:fa:ca:35:be:8e:cf:d5:11:8c:0a:96:e6:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:23 2022 GMT
            Not After : Nov  2 18:43:23 2023 GMT
        Subject: CN=C879947A45C2E3893FFA78E19640E6B49359F1D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:82:3d:df:d9:d6:68:8a:8a:f6:dd:43:75:f1:
                    5f:de:35:c5:dc:45:1a:9c:63:80:a7:96:00:a3:dd:
                    2e:d2:da:57:6f:78:f4:cf:b7:69:0e:06:89:7d:62:
                    9c:db:ed:1d:63:28:95:0b:76:80:31:41:49:cd:98:
                    bf:29:4a:18:95:2b:eb:fc:9d:05:59:a5:be:02:5b:
                    78:7c:f4:5a:91:d1:37:68:a7:54:1d:5e:e4:20:f4:
                    44:24:3b:d6:66:1b:3d:ea:51:21:32:60:55:ea:59:
                    cc:b9:23:39:f0:e5:05:28:81:96:3c:9f:20:e6:4d:
                    67:77:64:81:88:22:a8:23:9f:9b:0a:86:b9:18:47:
                    15:c2:06:42:c6:85:8a:61:fa:b4:d6:8e:e7:ba:b4:
                    d5:64:9c:c4:21:ad:16:7c:54:6a:b1:30:20:ef:86:
                    7f:0d:c8:4b:24:19:40:ba:c2:6b:0b:77:ec:8c:a4:
                    a5:2e:76:98:19:83:dc:07:a8:7d:ef:ca:06:23:a6:
                    f4:c4:80:1a:0d:ad:68:c1:80:6a:72:5f:7c:42:2f:
                    45:52:ec:09:40:5e:7c:9e:42:42:6a:6c:3e:39:f2:
                    87:b7:22:89:c2:a2:37:d8:b9:19:4a:be:63:81:0c:
                    50:ae:58:59:1e:43:3d:9e:e1:e8:a0:b7:39:82:d6:
                    b5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:79:94:7A:45:C2:E3:89:3F:FA:78:E1:96:40:E6:B4:93:59:F1:D2
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a393430303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:9400::/38

    Signature Algorithm: sha256WithRSAEncryption
         2b:21:40:ee:16:cc:fd:13:82:3c:12:08:b0:dd:83:88:e4:90:
         44:3a:f7:12:ec:5b:f0:85:73:3b:f5:b6:98:2b:1d:eb:de:a7:
         41:c9:75:02:7e:b4:3d:01:c4:3f:8d:8c:4f:a3:79:95:c4:5c:
         16:a9:ba:69:03:8d:d8:6e:55:84:47:28:a8:63:52:91:37:68:
         0e:96:bd:79:41:d6:f5:6a:15:64:b1:ea:a2:5d:dc:47:c6:03:
         e9:55:82:f1:26:b6:b7:90:c4:a8:8c:7b:99:c0:98:ce:54:44:
         b3:55:53:7a:8a:02:01:ff:67:7c:fa:88:51:5d:a0:b1:0e:80:
         80:74:de:2d:44:1d:c3:fa:f1:c6:19:46:81:fd:fc:28:9d:5a:
         62:74:83:1d:54:c3:2f:31:6a:89:15:c7:cd:da:bf:3c:45:dd:
         06:cd:11:7c:c6:45:46:9c:c0:72:d3:6f:ae:21:8a:ba:3f:cf:
         5b:08:19:55:ab:41:59:ca:2b:e1:85:29:ac:27:8f:dc:ad:c6:
         4f:3b:8a:dd:35:43:22:66:c9:4a:e5:10:55:b1:51:1f:c6:31:
         33:72:0d:90:56:d7:13:45:af:f2:0d:14:47:d3:3e:cb:be:0f:
         4a:ec:6c:ba:80:d8:dd:41:9a:e1:16:66:82:7a:c3:de:d6:fa:
         d3:ff:d9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org