Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a3a2f33322d3332203d3e20323639343633.roa
File:                     323830343a363530343a3a2f33322d3332203d3e20323639343633.roa (raw, json)
Hash identifier:          J1/eBrwsJyjKO2xLiIBH+0qnPgVTQTuP0LF87f0daWI=
Subject key identifier:   81:D3:2F:5B:56:E6:52:8A:0A:8F:92:81:D6:A9:C4:91:02:AE:1F:3F
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       1E0A5961C2ED55D158D0D7C208EAC68A229CE56F
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a3a2f33322d3332203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:28 +0000
ROA not before:           Thu 03 Nov 2022 18:38:28 +0000
ROA not after:            Thu 02 Nov 2023 18:43:28 +0000
asID:                     269463
IP address blocks:        2804:6504::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:0a:59:61:c2:ed:55:d1:58:d0:d7:c2:08:ea:c6:8a:22:9c:e5:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:28 2022 GMT
            Not After : Nov  2 18:43:28 2023 GMT
        Subject: CN=81D32F5B56E6528A0A8F9281D6A9C49102AE1F3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4f:4e:ae:32:df:8c:a7:67:fd:03:85:a0:c7:
                    88:77:49:83:2f:70:74:c6:9d:07:ea:70:c3:28:18:
                    1d:d1:f3:9e:b2:bb:48:75:bd:56:5c:d1:61:aa:54:
                    d7:46:87:27:67:3f:e2:67:17:d7:65:16:e4:08:02:
                    cc:6b:d8:ba:bc:4d:7d:c5:82:3f:c1:29:9b:74:4e:
                    89:7a:00:b0:f6:32:f0:ec:6f:a8:03:14:03:1e:45:
                    2a:1b:b9:c5:80:aa:5f:54:59:f6:a4:7c:8c:06:3c:
                    58:d4:52:63:41:a3:fd:3c:60:81:a1:22:02:f3:6b:
                    6e:a7:99:38:a9:fe:e7:35:b8:4a:c4:d7:20:b1:59:
                    44:9d:00:ae:0e:b6:0a:6d:6f:b4:c0:b1:c9:59:60:
                    65:ac:ab:ba:fc:ff:76:2d:d9:e5:cc:2c:f5:97:e8:
                    f1:79:99:30:4b:45:60:82:69:41:55:93:63:f8:72:
                    2f:97:b4:29:0b:fd:62:cb:8a:03:68:18:e0:a4:9a:
                    a9:9c:6f:54:91:8b:73:da:d8:5b:ea:5b:8f:82:bd:
                    6a:0a:dc:51:c1:24:a9:df:4e:81:23:e2:5e:fc:0b:
                    51:50:e1:f3:93:6a:6b:36:ac:26:b3:24:e8:ab:2a:
                    35:45:4a:de:ab:77:07:cf:68:38:02:cf:cf:f5:49:
                    a9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D3:2F:5B:56:E6:52:8A:0A:8F:92:81:D6:A9:C4:91:02:AE:1F:3F
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a3a2f33322d3332203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:60:4b:24:a6:6a:56:8a:36:2e:6a:15:fa:2f:8f:14:c5:9f:
         71:d5:88:fb:69:46:3f:5b:dc:a8:7d:73:8b:9a:06:9a:00:c0:
         fc:c3:95:31:19:e2:6d:20:2b:ac:0f:8c:dc:73:a5:ed:55:73:
         a5:02:cf:d1:a0:8b:a4:1a:11:13:61:c3:b7:75:f3:ad:10:a6:
         8f:db:9e:36:66:48:30:6c:c2:14:fc:e9:3c:f6:6b:8d:2f:62:
         34:05:8f:4a:2f:00:c3:83:35:d9:9d:45:54:bd:32:ab:03:9e:
         7a:a8:fe:b0:70:14:6a:10:0f:01:68:7b:a5:96:00:2d:e4:c3:
         54:11:3e:ae:17:31:8c:33:e8:75:6f:a1:ce:e7:65:a2:e1:3e:
         2b:5c:52:be:0a:49:a2:df:bd:12:66:91:8f:8d:0f:6b:44:57:
         43:a0:b1:99:0c:0f:31:66:1a:0d:47:1e:a4:62:17:63:32:48:
         0d:60:0a:bc:31:53:9e:a4:c7:71:dc:ff:fc:e6:ec:5a:2b:e1:
         f4:19:fd:f1:fb:35:93:9b:a8:f5:45:ac:92:da:c0:1b:ad:35:
         cb:70:31:5a:17:f4:df:c1:1e:39:a4:5e:95:90:59:3b:25:fb:
         dd:7d:74:d0:e8:2e:13:93:7b:8d:7a:16:cf:8b:35:b7:97:41:
         1b:98:4f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:59 2025 by rpki-client