Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a613830303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a613830303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          Tv5ViT14SSxgitp0fFOvU0mJ9bVIjzbTyhrMVqWYUhk=
Subject key identifier:   78:94:85:B4:0C:5C:9B:05:AE:A0:52:48:5C:7A:A4:69:D0:5A:32:8F
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       4062B1B8487DD6977EEA26F1607C436BBF17921A
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a613830303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:26 +0000
ROA not before:           Thu 03 Nov 2022 18:38:26 +0000
ROA not after:            Thu 02 Nov 2023 18:43:26 +0000
asID:                     269463
IP address blocks:        2804:6504:a800::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:62:b1:b8:48:7d:d6:97:7e:ea:26:f1:60:7c:43:6b:bf:17:92:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:26 2022 GMT
            Not After : Nov  2 18:43:26 2023 GMT
        Subject: CN=789485B40C5C9B05AEA052485C7AA469D05A328F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e3:58:a8:b0:bb:35:5c:00:99:93:8f:c6:a3:
                    81:9b:4a:db:00:9f:ac:2d:75:43:3a:b0:0d:78:a6:
                    48:ce:09:f0:d7:05:bf:63:98:6b:86:ce:a4:1c:ff:
                    33:27:88:0b:0f:1c:09:22:b0:1a:18:7f:a6:5f:a3:
                    c2:10:ce:be:be:98:6b:e4:f4:bf:3d:c4:63:09:85:
                    2d:e0:2b:7d:f0:5f:9c:72:12:3c:3a:6d:4a:83:6b:
                    68:9a:38:e4:49:b3:c4:98:7c:e9:81:b6:1a:7b:10:
                    6a:b2:b9:04:cf:11:49:f3:34:c1:18:1b:39:34:84:
                    ec:b6:4a:d2:3c:06:36:2c:f6:f7:1e:2d:74:ab:96:
                    f6:5e:a7:aa:b5:a7:a6:1c:c7:c7:3b:73:1e:26:69:
                    0d:11:4e:9a:fc:90:bb:af:7a:e5:05:a1:6c:59:20:
                    20:52:fc:6c:97:62:d2:47:63:8d:77:7c:d7:44:27:
                    f9:f4:17:32:85:7d:05:3e:82:c3:a1:7a:9b:b9:b6:
                    41:49:b0:10:17:08:02:16:f6:4f:21:dd:04:be:37:
                    a4:b8:92:26:ec:0e:33:b7:f5:f7:ff:45:c4:fd:68:
                    b2:3a:3e:13:02:91:dc:17:b6:0b:d5:23:22:19:36:
                    b8:ce:af:99:80:a4:c1:41:26:98:2a:7d:04:d7:e4:
                    1a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:94:85:B4:0C:5C:9B:05:AE:A0:52:48:5C:7A:A4:69:D0:5A:32:8F
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a613830303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:a800::/38

    Signature Algorithm: sha256WithRSAEncryption
         33:82:e9:ec:19:99:68:0f:4b:d1:a2:ea:46:88:4e:ed:32:3e:
         68:7e:80:b5:c0:16:b5:00:13:eb:bb:36:57:a6:33:ed:f4:0e:
         b4:91:d6:f9:41:c4:0c:96:08:c9:ec:2d:1b:5b:b7:1e:86:9e:
         f5:cf:00:a0:7c:8b:f7:87:dd:c7:d5:e6:7e:b9:4a:31:3e:aa:
         87:16:8c:60:32:ff:ba:b2:2d:a4:99:0a:a7:20:14:ac:df:a2:
         69:ba:00:f7:56:2e:05:4c:ba:45:18:ae:f4:7e:45:f5:5c:2f:
         b8:53:0f:aa:36:2a:fd:f0:8f:43:5b:10:5a:7e:92:72:37:92:
         10:fa:45:00:b3:b0:4a:73:bd:c0:d4:9d:a1:15:69:e9:3c:bd:
         7a:8b:8c:78:57:af:2d:2c:93:ed:09:fd:ac:da:31:a2:2c:29:
         0b:bf:86:fb:a7:2e:24:6c:13:c9:e3:1b:a6:4e:b3:90:26:7c:
         9c:e2:e7:e0:55:3a:14:a1:02:42:ce:99:25:0e:18:d0:39:5f:
         43:7f:9c:59:57:fc:ef:2e:33:fd:96:7b:4b:2f:bb:d4:5f:9f:
         d3:58:4c:4c:d9:78:49:15:b6:59:c5:4d:24:c0:c6:8d:52:1f:
         7b:9a:cd:73:4f:76:98:72:c5:b3:d0:06:bb:d1:27:97:1d:25:
         01:a8:a0:c6
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUQGKxuEh91pd+6ibxYHxDa78XkhowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg1RUZDQTYxRkYxRkJGQUU5QzBEMUMzQ0IzOUIwNjMw
MDJDM0M1OTAeFw0yMjExMDMxODM4MjZaFw0yMzExMDIxODQzMjZaMDMxMTAvBgNV
BAMTKDc4OTQ4NUI0MEM1QzlCMDVBRUEwNTI0ODVDN0FBNDY5RDA1QTMyOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO41iosLs1XACZk4/Go4GbStsA
n6wtdUM6sA14pkjOCfDXBb9jmGuGzqQc/zMniAsPHAkisBoYf6Zfo8IQzr6+mGvk
9L89xGMJhS3gK33wX5xyEjw6bUqDa2iaOORJs8SYfOmBthp7EGqyuQTPEUnzNMEY
Gzk0hOy2StI8BjYs9vceLXSrlvZep6q1p6Ycx8c7cx4maQ0RTpr8kLuveuUFoWxZ
ICBS/GyXYtJHY413fNdEJ/n0FzKFfQU+gsOhepu5tkFJsBAXCAIW9k8h3QS+N6S4
kibsDjO39ff/RcT9aLI6PhMCkdwXtgvVIyIZNrjOr5mApMFBJpgqfQTX5Bq5AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUeJSFtAxcmwWuoFJIXHqkadBaMo8wHwYDVR0j
BBgwFoAU2F78ph/x+/rpwNHDyzmwYwAsPFkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2lDd2JBUzFMbmc1TG9UY3F5RHJKY3FCbnY3ZVdmcXVMakRqN1gxTmhN
Mk0vMC9EODVFRkNBNjFGRjFGQkZBRTlDMEQxQzNDQjM5QjA2MzAwMkMzQzU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q4NUVGQ0E2MUZGMUZCRkFF
OUMwRDFDM0NCMzlCMDYzMDAyQzNDNTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dpQ3diQVMxTG5nNUxvVGNxeURySmNxQm52N2VXZnF1TGpEajdYMU5oTTJNLzAv
MzIzODMwMzQzYTM2MzUzMDM0M2E2MTM4MzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNk
M2UyMDMyMzYzOTM0MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAigEZQSoMA0GCSqGSIb3DQEBCwUA
A4IBAQAzgunsGZloD0vRoupGiE7tMj5ofoC1wBa1ABPruzZXpjPt9A60kdb5QcQM
lgjJ7C0bW7cehp71zwCgfIv3h93H1eZ+uUoxPqqHFoxgMv+6si2kmQqnIBSs36Jp
ugD3Vi4FTLpFGK70fkX1XC+4Uw+qNir98I9DWxBafpJyN5IQ+kUAs7BKc73A1J2h
FWnpPL16i4x4V68tLJPtCf2s2jGiLCkLv4b7py4kbBPJ4xumTrOQJnyc4ufgVToU
oQJCzpklDhjQOV9Df5xZV/zvLjP9lntLL7vUX5/TWExM2XhJFbZZxU0kwMaNUh97
ms1zT3aYcsWz0Aa70SeXHSUBqKDG
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org