Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a613030303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a613030303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          v0oypcMY0G08CH0+rxpqk2G+r6pz6mwVtal7CfuDmyo=
Subject key identifier:   7B:94:09:12:C7:3A:3B:B3:3A:2B:2D:E9:CD:BB:0A:B9:4B:EF:79:BA
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       196716AFA4A5F88AD798B5CBE1BA435DF130E048
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a613030303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:26 +0000
ROA not before:           Thu 03 Nov 2022 18:38:26 +0000
ROA not after:            Thu 02 Nov 2023 18:43:26 +0000
asID:                     269463
IP address blocks:        2804:6504:a000::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:67:16:af:a4:a5:f8:8a:d7:98:b5:cb:e1:ba:43:5d:f1:30:e0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:26 2022 GMT
            Not After : Nov  2 18:43:26 2023 GMT
        Subject: CN=7B940912C73A3BB33A2B2DE9CDBB0AB94BEF79BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:13:33:03:43:d5:36:d2:4d:11:4b:51:6e:50:
                    f9:26:31:9f:ac:25:69:8b:e4:71:e3:ea:08:fa:20:
                    f6:f0:3a:d4:4b:4c:b5:ef:6b:d8:05:7b:c1:4a:0d:
                    69:a0:33:8d:1f:25:5a:bc:04:78:72:69:73:4a:29:
                    2e:94:bf:aa:a0:42:71:25:74:31:03:8e:ee:3c:06:
                    36:b5:ef:1c:5f:36:20:56:be:22:28:ae:83:e2:a6:
                    0a:ac:68:0b:1f:de:44:85:e4:ef:4f:f8:d7:26:c9:
                    26:7e:4d:da:81:86:4c:c0:84:be:1f:26:ad:27:a4:
                    66:93:35:a7:c5:5c:b3:4d:6e:ff:0b:af:3b:17:15:
                    82:6b:9d:b8:d6:e9:d8:67:aa:f4:f5:99:5f:75:e7:
                    c7:cf:de:45:88:32:b5:56:0d:28:d0:e6:bd:f4:37:
                    ff:64:76:db:f9:57:bb:cb:28:f3:dc:13:9e:8c:85:
                    68:20:c0:90:e3:29:80:90:af:88:59:3a:f3:c5:49:
                    2a:11:37:06:04:c2:2a:cc:80:ef:a6:d4:65:b3:fe:
                    f8:bc:61:cb:d7:53:40:14:d3:c8:6d:42:ff:05:53:
                    94:38:a2:ab:7e:72:9c:f6:39:99:6f:eb:a8:c4:93:
                    16:20:db:04:55:34:64:b5:ae:dd:70:78:c4:75:66:
                    b9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:94:09:12:C7:3A:3B:B3:3A:2B:2D:E9:CD:BB:0A:B9:4B:EF:79:BA
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a613030303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:a000::/38

    Signature Algorithm: sha256WithRSAEncryption
         74:8a:d9:ae:db:b4:2f:89:bd:44:b6:d4:66:dc:fe:72:62:2c:
         86:f6:db:4f:f0:d1:98:af:7a:55:b7:87:8c:a5:9f:67:e8:1a:
         81:4c:4a:1e:a7:15:cc:8f:fa:80:31:f7:d2:77:e0:3c:2d:a2:
         9f:af:73:7c:7f:28:51:8b:6f:87:3a:ea:c5:65:63:1d:e3:f4:
         f6:3d:7e:f1:f7:ab:7e:0c:ed:6e:f1:cf:3e:e0:62:0d:27:5f:
         47:9a:7b:4c:50:81:ff:a6:2d:dd:d4:a8:49:ac:30:e4:3c:e6:
         14:45:04:e5:5f:2f:03:a1:81:0b:10:2e:89:9c:ac:8a:91:aa:
         e7:07:76:1a:a0:f7:9a:d2:af:7a:9e:34:2f:50:f5:fe:bb:9f:
         9e:44:0c:d7:4e:1e:64:3b:d9:4c:60:09:44:d6:ad:f2:8d:15:
         8b:d5:39:81:5c:04:4d:28:bf:a4:61:bc:3c:91:36:da:9f:58:
         37:f0:a9:fc:97:89:ca:71:03:e5:56:21:72:dd:4f:13:4b:4f:
         3b:de:3c:a9:66:06:9a:1e:9d:5e:89:0a:16:7d:61:72:c3:79:
         13:1f:82:a9:4c:b4:c0:3f:13:ab:f5:12:3f:9b:2c:51:89:cb:
         cb:2c:86:4b:25:62:70:58:a0:b9:27:3c:ae:68:2e:ab:30:26:
         84:4c:14:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org