Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a623030303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a623030303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          VJuSgu6T8fGtQaPMNH2yVWDY/vyFEbksSzlYcPDNMy8=
Subject key identifier:   FE:A1:98:64:1F:B5:BB:2C:A8:7F:0E:7B:DB:FF:32:47:7E:B0:8D:CB
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       778069727F9A833157707EB28E725FCD966BC570
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a623030303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:23 +0000
ROA not before:           Thu 03 Nov 2022 18:38:23 +0000
ROA not after:            Thu 02 Nov 2023 18:43:23 +0000
asID:                     269463
IP address blocks:        2804:6504:b000::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:80:69:72:7f:9a:83:31:57:70:7e:b2:8e:72:5f:cd:96:6b:c5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:23 2022 GMT
            Not After : Nov  2 18:43:23 2023 GMT
        Subject: CN=FEA198641FB5BB2CA87F0E7BDBFF32477EB08DCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fa:6b:2a:f8:5d:a4:50:de:69:d9:23:32:f2:
                    37:85:5c:79:55:6e:5f:ff:bf:0f:de:73:25:b2:f5:
                    c2:2e:23:81:a1:66:14:96:aa:8f:71:f0:65:47:9a:
                    7e:d7:d6:b2:09:de:6c:95:01:42:1e:3d:b5:97:ad:
                    7c:1e:4e:07:02:83:53:78:1d:5c:a5:25:50:04:72:
                    81:ed:12:08:21:bf:90:44:d1:17:a4:e6:ba:64:64:
                    3d:0e:57:fb:ab:d7:89:dd:97:62:45:01:db:f8:a1:
                    3b:20:7a:09:23:cb:2c:d6:76:b7:0f:2c:93:5b:c1:
                    3d:7f:44:f5:67:b7:4b:85:e8:65:2c:d9:51:dc:95:
                    98:82:12:f3:f0:19:b5:01:99:d6:f1:85:6e:58:cc:
                    f1:d2:c7:9e:77:dc:c2:7b:72:39:8a:0c:00:cd:c1:
                    73:04:34:b8:38:42:4c:db:82:50:e2:80:17:18:19:
                    ed:6e:82:1d:5f:9e:7e:bd:37:64:e9:fb:c0:61:a2:
                    b6:dc:02:2d:84:4b:3b:17:6f:85:ad:e1:ad:5a:46:
                    3f:74:5c:6b:ba:2b:d5:0b:d8:f2:2b:f6:5f:73:62:
                    1a:41:16:30:34:f1:4b:32:8a:65:bf:7f:4d:13:ed:
                    b2:7b:03:15:5a:2e:a5:08:a0:37:b4:0e:fc:0f:0a:
                    25:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A1:98:64:1F:B5:BB:2C:A8:7F:0E:7B:DB:FF:32:47:7E:B0:8D:CB
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a623030303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:b000::/38

    Signature Algorithm: sha256WithRSAEncryption
         35:75:82:fa:35:02:a6:27:c9:ab:14:5a:a5:8b:c0:10:9b:05:
         67:12:01:98:24:e1:24:f4:25:d6:dc:c1:34:8f:93:82:16:5c:
         71:fe:40:58:98:ec:af:8c:dc:d7:16:e5:43:9d:9f:e9:b8:fc:
         4e:1d:1e:cb:f8:36:cc:41:e8:84:bc:e6:c2:48:ff:8c:cd:f2:
         95:7e:0e:cc:27:8c:ac:33:9b:fa:5e:90:b0:af:6e:bd:56:f4:
         a4:0a:c9:98:64:6d:8c:65:1d:a8:a1:c9:6d:3a:c4:83:18:dc:
         e0:a4:24:91:7f:63:bd:1d:74:30:da:d2:81:9f:cb:95:b4:c0:
         ab:d6:a1:4f:e6:1f:81:ab:5e:36:56:41:e6:61:4a:f1:41:f7:
         68:a5:cc:ee:e1:66:e3:59:88:2a:b2:e6:c4:a8:06:86:21:70:
         ae:c7:4d:9c:21:11:e7:04:01:6e:ce:2a:e6:49:74:c8:80:7c:
         ad:cc:6a:b6:ef:0f:dc:49:5d:d3:0f:06:c0:86:e5:ad:af:9d:
         57:90:a1:44:00:bd:82:17:a3:ba:c1:b7:97:78:0e:c8:87:97:
         d1:6d:66:ae:2d:15:b7:28:41:a8:ea:28:f4:64:f9:9d:18:4b:
         73:67:7f:c5:90:40:68:c6:80:74:3b:c0:1c:2c:7f:f0:a7:16:
         3d:14:92:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org