Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a613430303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a613430303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          Wp3ZVxKMP/Vd1nUaEvspfk/BQUb9x8WfrmpySTERsdc=
Subject key identifier:   D6:FA:30:52:EB:4B:87:60:E6:09:33:25:2C:F4:43:D5:CD:34:90:8B
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       0A4CDA8BBF47A9A32EBE340BC5640BC1D8398809
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a613430303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:33 +0000
ROA not before:           Thu 03 Nov 2022 18:38:33 +0000
ROA not after:            Thu 02 Nov 2023 18:43:33 +0000
asID:                     269463
IP address blocks:        2804:6504:a400::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4c:da:8b:bf:47:a9:a3:2e:be:34:0b:c5:64:0b:c1:d8:39:88:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:33 2022 GMT
            Not After : Nov  2 18:43:33 2023 GMT
        Subject: CN=D6FA3052EB4B8760E60933252CF443D5CD34908B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:80:6f:fc:f1:cd:c9:77:26:69:25:30:14:f2:
                    38:4a:70:b0:13:6c:57:18:df:f2:86:3d:4f:a3:be:
                    a8:9c:7d:87:52:92:51:7c:fb:50:9f:8f:75:0a:bf:
                    f5:67:ea:3a:f4:9a:9b:50:b1:48:b2:cf:62:25:d1:
                    57:ac:9c:68:07:de:67:10:09:ee:8d:34:1e:56:ea:
                    ba:d7:70:06:d6:51:b4:b6:c4:56:70:8d:95:a5:a8:
                    9c:78:e9:42:b6:4f:5a:40:eb:38:f3:29:33:f5:36:
                    aa:23:d1:2d:36:55:04:da:07:d1:76:7c:7e:ae:1b:
                    36:2e:ce:87:f2:47:b5:d1:45:5e:a6:8b:49:07:6b:
                    61:e2:4c:5e:c2:dd:eb:0f:cd:db:5d:05:d6:f6:8a:
                    35:26:b6:8e:2a:57:9f:6b:e5:ef:4a:cf:a4:0b:54:
                    45:31:14:b0:1b:38:c4:8e:10:65:1b:cc:4c:b6:1d:
                    0e:c6:22:1f:69:04:91:df:cc:28:8e:a3:83:7d:7b:
                    35:27:3e:b1:1c:2f:f1:4d:5e:70:89:be:fa:f2:20:
                    ec:bc:af:13:44:31:b8:ae:74:f3:86:8e:f6:dd:3d:
                    be:eb:e7:d6:1b:dd:88:39:10:cb:32:a2:92:58:f8:
                    24:81:51:51:2a:88:ac:be:b6:6c:87:3e:06:ea:50:
                    3b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FA:30:52:EB:4B:87:60:E6:09:33:25:2C:F4:43:D5:CD:34:90:8B
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a613430303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:a400::/38

    Signature Algorithm: sha256WithRSAEncryption
         20:88:78:91:fa:57:9f:70:46:f9:b0:67:48:20:00:0b:94:d2:
         2a:64:d2:74:32:8f:e3:f4:1c:92:5a:f5:a7:aa:3c:f8:80:c0:
         60:8a:f9:2c:f2:53:b8:2c:d7:f6:28:b0:70:d2:0d:72:7d:c5:
         e6:1b:fb:99:c5:12:c2:67:7a:b7:db:95:39:14:1f:05:d0:1d:
         0f:de:bf:5d:34:8e:61:9f:ae:0a:63:52:ef:26:cc:4e:da:ef:
         3e:57:89:21:3d:28:93:00:39:b9:37:52:1d:d9:a8:e5:5d:0e:
         91:9a:52:66:3f:82:3f:17:04:8d:a1:47:c2:8a:4e:4a:33:96:
         0b:a7:9d:ae:86:c7:cf:5f:2d:dd:3e:09:a5:0c:67:c6:1d:ca:
         7e:cb:4d:21:e5:3e:52:82:2a:90:fb:8d:7e:de:53:bd:73:11:
         05:18:ca:4c:99:22:c8:f5:4c:0e:b3:df:d2:a4:c6:dd:b3:c9:
         75:f1:87:35:18:e9:9e:85:9a:77:eb:e1:73:d5:e4:8b:4e:66:
         e6:de:1a:13:ad:81:74:5e:14:77:57:52:f2:50:a4:c9:ce:23:
         61:de:2b:ac:5c:35:f6:06:87:a6:c7:f9:4d:cd:52:84:95:61:
         cf:ab:ff:37:7c:0c:16:a6:b9:1f:50:23:4d:86:65:e4:fa:9f:
         c9:50:42:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org