Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a623830303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a623830303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          E4wotDmSLl2C4tZLi2yRiGloZx1yASjifelpnNy7/lQ=
Subject key identifier:   FD:25:13:85:5D:4B:CB:87:98:1D:29:D5:DA:CE:C6:12:0D:A9:FA:8B
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       33DE24073503913DB0E55C466BF8FA9720303A49
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a623830303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:24 +0000
ROA not before:           Thu 03 Nov 2022 18:38:24 +0000
ROA not after:            Thu 02 Nov 2023 18:43:24 +0000
asID:                     269463
IP address blocks:        2804:6504:b800::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:de:24:07:35:03:91:3d:b0:e5:5c:46:6b:f8:fa:97:20:30:3a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:24 2022 GMT
            Not After : Nov  2 18:43:24 2023 GMT
        Subject: CN=FD2513855D4BCB87981D29D5DACEC6120DA9FA8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:76:c3:58:b8:e3:ff:90:ef:ea:65:9a:e4:33:
                    b1:92:09:1f:9d:88:ea:1a:7a:50:b9:06:49:9e:6d:
                    f7:03:77:88:f0:ee:be:46:33:49:cf:21:a6:fb:6c:
                    ec:1d:ca:8f:7c:00:91:1d:f3:e6:df:9b:27:02:1d:
                    45:2f:7f:43:70:61:27:5f:9c:f1:b8:49:14:97:f4:
                    cd:e0:d2:8e:dc:2c:62:c8:8d:9d:16:b3:de:d3:0e:
                    fa:6a:41:bb:3a:48:92:22:e0:9b:a1:e5:08:d1:b4:
                    ad:09:09:5d:0b:61:b0:e0:30:3c:aa:64:e8:d1:12:
                    70:ed:97:af:03:d8:5d:ff:50:87:c0:4f:82:80:95:
                    e8:f0:7a:0e:0f:0b:25:13:4d:b2:ed:6d:be:7b:b9:
                    17:63:9b:e5:78:88:63:39:e3:3e:ab:3c:3d:6b:4a:
                    02:88:ea:68:bb:d7:2b:a6:18:52:9d:c2:4d:0d:cb:
                    db:cb:52:04:fd:1f:86:16:f8:d0:72:61:2d:16:6c:
                    6a:36:40:6d:56:0e:66:8b:d3:44:31:54:8c:a2:71:
                    7a:9c:ac:1b:ae:c9:d1:ec:ba:bf:5e:f3:a1:17:3d:
                    7b:ac:5c:7c:45:93:1d:75:09:e9:fa:46:a4:fd:95:
                    cd:4a:e9:9c:c9:b0:18:91:61:e4:6c:e3:ee:68:d8:
                    e5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:25:13:85:5D:4B:CB:87:98:1D:29:D5:DA:CE:C6:12:0D:A9:FA:8B
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a623830303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:b800::/38

    Signature Algorithm: sha256WithRSAEncryption
         81:21:60:0b:e8:24:11:5f:e3:bb:ed:f8:22:07:ce:41:7e:6a:
         29:39:65:7b:29:29:9e:cd:e9:0d:0e:43:ca:11:fb:70:4c:9b:
         11:9c:2e:4d:a5:50:29:57:96:6b:b1:1b:b2:ef:3c:df:9e:04:
         6b:a5:8d:63:ad:26:47:bf:df:e3:9e:4a:7d:4a:c3:1e:28:99:
         1c:26:87:83:5e:89:74:68:67:7e:01:91:90:30:74:46:ca:20:
         b3:a1:15:66:5b:ac:77:80:2c:65:c5:ec:90:0b:74:b0:4f:1e:
         22:42:9c:43:01:56:47:9f:d4:00:29:97:c6:f5:61:91:b7:c9:
         22:3b:96:52:35:06:20:ce:e7:eb:41:a5:e8:42:cb:50:01:71:
         71:ea:80:09:d2:07:09:ba:95:b5:28:a4:16:e0:40:f6:53:c2:
         60:3b:e1:86:24:94:2f:2d:f0:df:93:9c:c7:bc:3b:be:a8:fe:
         0f:bd:c1:96:05:77:92:b3:b7:8a:87:45:bf:7b:e6:ee:d4:db:
         d1:be:dc:1d:ac:cb:c2:a8:4e:dc:d6:d3:cf:a7:8d:2a:c4:42:
         64:39:ac:98:ca:a0:be:33:c8:6a:e4:94:bb:8a:85:52:22:bf:
         6a:56:17:64:e5:46:3c:54:37:82:db:54:cf:79:a0:da:ce:58:
         e0:cb:83:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org