Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a623430303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a623430303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          ce2HzutBDkvdWMoSlRv16+/XIbxWTFH2N+0FGzJoO8w=
Subject key identifier:   C1:05:0B:AD:CC:C9:09:55:0A:CC:E6:73:10:45:49:00:57:C5:15:33
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       73C7636FB8480C023BDACF5C8AD679A9B039FC34
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a623430303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:26 +0000
ROA not before:           Thu 03 Nov 2022 18:38:26 +0000
ROA not after:            Thu 02 Nov 2023 18:43:26 +0000
asID:                     269463
IP address blocks:        2804:6504:b400::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c7:63:6f:b8:48:0c:02:3b:da:cf:5c:8a:d6:79:a9:b0:39:fc:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:26 2022 GMT
            Not After : Nov  2 18:43:26 2023 GMT
        Subject: CN=C1050BADCCC909550ACCE6731045490057C51533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b6:33:a6:64:65:d2:3b:32:6c:9c:ff:04:95:
                    7a:cd:3f:ec:fd:df:f9:8b:89:cf:b6:2c:f2:62:7d:
                    a7:3a:79:80:fb:26:72:4e:96:4b:93:cd:9e:48:bd:
                    24:e1:e5:78:c2:fc:e9:1c:59:3a:96:99:6c:d1:9b:
                    c8:4c:18:3d:3f:f3:f2:ed:1e:d2:56:93:85:f9:47:
                    f2:d0:0a:7b:91:5e:88:12:cd:6b:1d:45:53:a8:1c:
                    9d:d8:58:4a:26:35:d7:2b:3d:45:44:ac:48:60:d0:
                    1f:a5:18:17:d9:5b:74:e8:4e:15:2b:32:8b:a9:37:
                    b3:d9:3e:23:01:af:7d:89:ea:61:19:37:36:81:7a:
                    d0:46:2b:3a:1c:71:c1:76:73:32:18:29:15:29:30:
                    85:ca:fa:62:cb:62:59:92:81:60:1f:6b:7b:7d:27:
                    4b:82:bf:4b:5b:43:45:ef:95:24:03:6f:06:a3:f6:
                    c9:86:e4:bb:ae:4d:ae:1c:3c:de:79:1e:2b:e6:a5:
                    5e:d3:12:19:ca:a3:46:40:85:4a:a2:1c:7a:f5:c0:
                    a2:e0:55:af:17:a2:f7:27:27:c0:0a:0e:f0:bb:a3:
                    69:4d:ce:69:7d:1c:0b:b5:1c:75:23:db:7a:8d:7c:
                    19:3e:df:0a:82:2f:b3:c2:bc:4b:4a:b3:af:00:d3:
                    b8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:05:0B:AD:CC:C9:09:55:0A:CC:E6:73:10:45:49:00:57:C5:15:33
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a623430303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:b400::/38

    Signature Algorithm: sha256WithRSAEncryption
         5d:d4:dc:46:d8:be:d3:ba:e8:3e:b9:32:7d:9b:6e:bc:d8:ef:
         26:10:04:61:2a:ac:e5:ff:cd:d2:b0:e0:34:6a:d3:72:1e:17:
         9f:cb:74:b6:c8:fe:b7:02:a4:91:3d:6c:d0:18:2f:4d:31:03:
         a3:3d:3c:e9:ed:00:99:5c:31:d2:81:85:6c:08:64:eb:82:8b:
         ae:49:62:e3:b9:bd:5f:4d:96:00:88:3d:5d:d2:b7:12:f5:d5:
         aa:84:59:6b:73:1b:16:50:8f:bf:aa:4b:93:69:15:a4:42:06:
         2d:40:dc:f2:df:f9:3d:ae:c4:23:8d:aa:98:ed:73:48:7d:47:
         cc:8e:7e:8d:04:8f:c8:fc:fc:aa:1c:97:9e:89:dc:55:38:00:
         8f:c3:7a:1d:e3:20:c8:4f:d7:04:55:19:ba:64:43:db:86:d2:
         87:19:99:81:59:34:d8:f0:61:c3:e2:48:01:1f:b2:32:31:c1:
         0a:6e:32:8a:2c:2e:2a:c2:db:0a:4e:14:53:ea:e3:87:a7:0b:
         45:8c:03:98:9e:65:3c:6f:87:39:72:d6:32:54:c1:00:d6:70:
         e6:b3:b6:2d:04:91:3b:e3:f6:b0:c0:74:9d:d4:8c:79:8e:e4:
         d0:f0:89:91:6f:5c:39:8a:71:16:70:cd:07:ad:c5:d7:75:74:
         e7:8c:2c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org