Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a393830303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a393830303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          9armfZhbgqpt5sI8rl5eABpytCw5ld0iN713Imhnly0=
Subject key identifier:   3E:C6:8F:CD:36:D0:88:2E:EE:7C:28:F7:38:6B:43:5E:1C:C4:AE:0B
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       1C6E277E030B76C2BCE9D3F3AAFA671CBF697261
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a393830303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:26 +0000
ROA not before:           Thu 03 Nov 2022 18:38:26 +0000
ROA not after:            Thu 02 Nov 2023 18:43:26 +0000
asID:                     269463
IP address blocks:        2804:6504:9800::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:6e:27:7e:03:0b:76:c2:bc:e9:d3:f3:aa:fa:67:1c:bf:69:72:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:26 2022 GMT
            Not After : Nov  2 18:43:26 2023 GMT
        Subject: CN=3EC68FCD36D0882EEE7C28F7386B435E1CC4AE0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ef:7f:04:42:a0:c7:a4:26:71:0b:1c:3e:d5:
                    e4:c2:50:c0:3e:cd:42:62:f6:d6:30:d7:92:d1:5f:
                    f3:29:c2:19:c6:63:32:e4:6b:a4:ff:bf:cc:c3:2d:
                    ea:9b:aa:9f:41:81:2d:80:ca:2a:d5:4d:85:ff:d6:
                    14:ca:9b:ea:46:ed:de:3f:a6:98:b6:37:c8:36:7b:
                    da:60:1a:cd:be:5d:30:a1:e0:07:58:01:9e:bd:fa:
                    45:4b:bf:84:d1:61:7b:41:ed:fd:45:b6:16:bb:12:
                    a2:c0:cf:35:d5:42:89:7f:be:2a:8a:81:3b:6f:33:
                    1a:96:82:6a:22:82:b6:68:65:73:15:8b:25:32:d4:
                    c4:cf:c3:a0:5f:e5:be:49:06:90:c9:5a:0b:c1:d9:
                    7f:8e:f1:31:1b:d0:3d:4e:dc:27:bf:f6:89:b0:7f:
                    e6:62:37:30:01:c9:6b:6f:9e:34:73:51:96:bf:01:
                    00:93:12:62:84:21:1d:da:1c:c2:73:1f:5f:d4:a1:
                    b0:88:90:bb:03:ba:93:80:ff:87:82:d6:e4:dd:99:
                    81:e0:7e:b3:ae:4a:67:d0:29:e0:ad:e9:30:89:17:
                    b7:2b:df:20:32:b5:c8:88:b2:11:75:d7:e5:ba:c1:
                    fd:56:a4:09:0f:72:75:54:7b:8c:b2:b2:c9:ae:75:
                    3c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C6:8F:CD:36:D0:88:2E:EE:7C:28:F7:38:6B:43:5E:1C:C4:AE:0B
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a393830303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:9800::/38

    Signature Algorithm: sha256WithRSAEncryption
         0f:33:07:c7:1b:cf:36:7d:a4:94:9f:09:1b:06:22:52:fc:ab:
         b2:bc:12:42:c8:09:9c:63:5a:af:f4:77:8c:a5:c2:fe:24:1e:
         c4:94:a2:d0:50:04:fd:b3:f5:fe:97:8f:cb:25:89:a3:07:a4:
         a7:45:74:11:2b:43:ab:54:26:1d:56:13:c7:35:19:e4:1c:ca:
         58:fc:3c:18:11:2a:7d:fb:8e:f7:1b:8c:6e:93:c8:d1:b1:b9:
         63:94:24:e0:2e:2a:7a:25:8e:bc:e3:1e:6a:9d:05:66:f4:17:
         51:c6:2d:d9:8e:e4:22:8f:19:96:bc:e1:09:81:72:12:53:9b:
         ef:6c:ec:ad:e6:87:0f:d7:ec:31:48:79:8a:77:e7:e9:15:30:
         c1:af:bc:9e:31:35:04:f5:19:16:ff:e1:63:ab:2c:02:f8:20:
         50:e5:df:2b:e0:b5:fc:9d:05:02:3d:2d:93:3e:7f:16:04:38:
         d7:cc:39:df:90:2a:48:fc:26:fc:eb:ff:ae:5a:e3:26:f7:4a:
         f2:1f:db:8b:e8:da:4e:37:98:c6:56:71:dd:a3:a3:19:b4:bb:
         07:0d:f7:8b:86:5d:f5:55:f2:31:cf:98:13:8b:de:6c:4d:18:
         9f:2c:7a:0a:9d:d2:9e:85:83:7a:85:da:f3:2c:9a:6a:6f:98:
         af:43:c1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org