Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          cy8gqqalZckGb1k64Hxk8a/hE1Q/sdcvwnd29wQrbuE=
Subject key identifier:   83:AA:DF:65:79:5F:A6:73:A0:79:5A:44:A3:C4:41:54:65:B9:4A:D9
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       5DEACB3B0D3205349863B7DE9C81E50975C5627A
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:23 +0000
ROA not before:           Thu 03 Nov 2022 18:38:23 +0000
ROA not after:            Thu 02 Nov 2023 18:43:23 +0000
asID:                     269463
IP address blocks:        2804:6504::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ea:cb:3b:0d:32:05:34:98:63:b7:de:9c:81:e5:09:75:c5:62:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:23 2022 GMT
            Not After : Nov  2 18:43:23 2023 GMT
        Subject: CN=83AADF65795FA673A0795A44A3C4415465B94AD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f8:92:04:63:16:e9:c7:9c:42:9d:cd:10:51:
                    fb:f6:b9:31:9d:c4:34:6e:13:3c:f7:92:0e:9c:e4:
                    36:07:58:e1:81:96:2f:d6:c7:2e:46:0c:f4:f1:c0:
                    3e:7c:7e:8e:c0:e4:72:16:83:01:ed:34:06:d5:a1:
                    b8:b5:33:0f:22:79:f9:64:4d:24:5a:d4:b4:63:e0:
                    6e:78:bd:33:b6:32:5d:50:4d:d3:02:19:4f:13:7e:
                    87:da:7b:dd:9f:d7:25:39:ad:0b:67:f1:2c:97:4e:
                    e7:b5:70:71:a0:04:98:b3:cd:d6:90:30:12:0b:74:
                    f5:46:7c:3c:85:41:91:3a:c7:d8:47:b2:0b:fb:1e:
                    bf:b8:15:d7:80:83:dc:7d:de:c6:88:9d:5d:f9:c6:
                    0f:f0:2b:73:41:87:4a:2a:81:bb:4d:95:0c:09:9c:
                    d0:ac:63:97:8f:69:bf:cb:8e:b8:80:d4:a5:0e:cf:
                    0e:5a:eb:ce:0e:01:75:28:fe:c7:2d:87:08:b1:04:
                    d0:ed:f2:8b:0a:42:0a:dc:83:f7:c8:7c:55:df:12:
                    af:91:39:7d:80:bb:1b:92:34:46:48:3a:b5:7c:80:
                    58:db:2c:01:60:8a:df:ff:2b:97:74:3a:1d:c0:73:
                    48:8e:2b:77:aa:65:6b:45:10:e3:e0:17:30:de:31:
                    be:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AA:DF:65:79:5F:A6:73:A0:79:5A:44:A3:C4:41:54:65:B9:4A:D9
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504::/38

    Signature Algorithm: sha256WithRSAEncryption
         b1:5c:9e:24:96:b3:ba:d6:7e:e2:1d:ea:a8:d6:c3:ef:8d:b1:
         df:63:93:27:a1:9b:c8:70:ae:21:a8:96:2e:ad:b0:20:9d:12:
         5b:7a:9a:92:95:7b:11:73:57:67:af:9f:38:9e:d5:16:b2:ab:
         04:84:1b:68:55:87:ad:9d:c3:db:ec:1b:9d:23:7b:2b:63:66:
         ee:7e:2b:43:c9:10:cc:ad:7b:9b:3a:fc:ce:f3:c7:3e:fe:bd:
         40:8b:64:ed:1b:b6:52:b3:7b:c3:8e:99:c0:bf:36:ff:fa:5e:
         19:57:91:5d:82:28:3d:60:6f:e2:55:c6:35:e9:20:41:4d:37:
         7a:af:03:c3:d2:88:21:ee:29:4b:4d:b0:cc:26:0b:04:76:ff:
         d1:16:8a:10:d9:71:3e:23:ba:00:96:e8:e5:ea:d3:7d:b9:5c:
         89:96:34:8e:52:07:f9:4c:78:bc:01:5d:9b:e1:96:21:13:0a:
         08:7e:1c:cd:5a:e8:40:3f:8f:9b:0f:60:af:24:e6:c5:92:12:
         ab:10:cc:02:29:2a:4f:6c:b5:20:20:1b:47:e4:66:c7:e8:b5:
         f6:8d:97:61:5b:03:9e:58:ba:b2:e3:ce:82:ad:ee:b7:d6:6f:
         d2:5d:b0:ae:b0:9f:ec:92:bb:75:e1:3c:4f:3c:8f:f5:2c:49:
         62:e6:d4:a9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXerLOw0yBTSYY7fenIHlCXXFYnowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg1RUZDQTYxRkYxRkJGQUU5QzBEMUMzQ0IzOUIwNjMw
MDJDM0M1OTAeFw0yMjExMDMxODM4MjNaFw0yMzExMDIxODQzMjNaMDMxMTAvBgNV
BAMTKDgzQUFERjY1Nzk1RkE2NzNBMDc5NUE0NEEzQzQ0MTU0NjVCOTRBRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy+JIEYxbpx5xCnc0QUfv2uTGd
xDRuEzz3kg6c5DYHWOGBli/Wxy5GDPTxwD58fo7A5HIWgwHtNAbVobi1Mw8ieflk
TSRa1LRj4G54vTO2Ml1QTdMCGU8Tfofae92f1yU5rQtn8SyXTue1cHGgBJizzdaQ
MBILdPVGfDyFQZE6x9hHsgv7Hr+4FdeAg9x93saInV35xg/wK3NBh0oqgbtNlQwJ
nNCsY5ePab/LjriA1KUOzw5a684OAXUo/scthwixBNDt8osKQgrcg/fIfFXfEq+R
OX2AuxuSNEZIOrV8gFjbLAFgit//K5d0Oh3Ac0iOK3eqZWtFEOPgFzDeMb5TAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUg6rfZXlfpnOgeVpEo8RBVGW5StkwHwYDVR0j
BBgwFoAU2F78ph/x+/rpwNHDyzmwYwAsPFkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2lDd2JBUzFMbmc1TG9UY3F5RHJKY3FCbnY3ZVdmcXVMakRqN1gxTmhN
Mk0vMC9EODVFRkNBNjFGRjFGQkZBRTlDMEQxQzNDQjM5QjA2MzAwMkMzQzU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q4NUVGQ0E2MUZGMUZCRkFF
OUMwRDFDM0NCMzlCMDYzMDAyQzNDNTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dpQ3diQVMxTG5nNUxvVGNxeURySmNxQm52N2VXZnF1TGpEajdYMU5oTTJNLzAv
MzIzODMwMzQzYTM2MzUzMDM0M2EzYTJmMzMzODJkMzMzODIwM2QzZTIwMzIzNjM5
MzQzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYCKARlBAAwDQYJKoZIhvcNAQELBQADggEBALFcniSW
s7rWfuId6qjWw++Nsd9jkyehm8hwriGoli6tsCCdElt6mpKVexFzV2evnzie1Ray
qwSEG2hVh62dw9vsG50jeytjZu5+K0PJEMyte5s6/M7zxz7+vUCLZO0btlKze8OO
mcC/Nv/6XhlXkV2CKD1gb+JVxjXpIEFNN3qvA8PSiCHuKUtNsMwmCwR2/9EWihDZ
cT4jugCW6OXq0325XImWNI5SB/lMeLwBXZvhliETCgh+HM1a6EA/j5sPYK8k5sWS
EqsQzAIpKk9stSAgG0fkZsfotfaNl2FbA55YurLjzoKt7rfWb9JdsK6wn+ySu3Xh
PE88j/UsSWLm1Kk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org