Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a626330303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a626330303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          YQfxtgDsiq7A2S9C9XzgaJ8ie7c+r6PpdJz+pFxX28w=
Subject key identifier:   B1:42:6C:73:2D:C6:11:6A:49:A8:93:E2:DC:C9:DD:E4:7E:89:B3:3F
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       179745C3947FDE19E3EC5D58524DBACA671E529D
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a626330303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:24 +0000
ROA not before:           Thu 03 Nov 2022 18:38:24 +0000
ROA not after:            Thu 02 Nov 2023 18:43:24 +0000
asID:                     269463
IP address blocks:        2804:6504:bc00::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:97:45:c3:94:7f:de:19:e3:ec:5d:58:52:4d:ba:ca:67:1e:52:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:24 2022 GMT
            Not After : Nov  2 18:43:24 2023 GMT
        Subject: CN=B1426C732DC6116A49A893E2DCC9DDE47E89B33F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b9:ee:ac:e2:7d:9b:02:c2:f2:2a:83:2f:ab:
                    2b:e1:73:18:08:c3:b2:59:a8:03:2a:d4:97:c6:6a:
                    11:b4:ce:7e:03:f2:36:f6:a6:ec:e2:e9:56:ab:e7:
                    62:bc:6e:37:30:d3:3d:89:a9:6d:a5:ad:7f:fb:36:
                    f1:22:9c:98:4e:a7:3a:5c:87:92:2a:2f:ef:a5:71:
                    66:27:82:65:2a:39:32:aa:4a:54:11:40:76:be:a6:
                    9d:11:e4:e5:28:a5:64:ea:8e:ba:ed:d7:66:36:a7:
                    a2:46:4c:df:57:cf:df:f4:19:74:08:f7:ff:68:2b:
                    2a:67:f0:c8:36:b2:61:d7:7c:73:35:ee:71:a9:cf:
                    52:41:03:aa:e0:4c:31:51:d6:86:63:b2:74:2f:c0:
                    13:61:ea:b5:95:55:9b:04:20:41:75:53:3b:8a:c2:
                    78:b5:ff:14:e1:ed:9d:19:42:dc:61:d4:b6:ba:81:
                    dd:ef:cc:54:cf:98:97:18:12:80:ad:87:25:9a:24:
                    9b:37:e2:dd:ca:45:45:1f:d9:65:9e:25:05:7f:3f:
                    d0:d2:15:3e:92:c8:7a:bf:6a:ff:a4:5e:b9:22:3e:
                    fe:f9:d0:ef:b8:eb:5a:5d:0a:d0:4d:8a:fb:2b:90:
                    76:46:f3:fe:4f:4d:ed:5f:a6:ec:12:71:ac:b6:f2:
                    e3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:42:6C:73:2D:C6:11:6A:49:A8:93:E2:DC:C9:DD:E4:7E:89:B3:3F
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a626330303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:bc00::/38

    Signature Algorithm: sha256WithRSAEncryption
         03:6f:87:73:57:f4:a5:2f:69:24:b4:16:cc:07:45:cd:f9:f6:
         fb:d5:63:41:c7:fd:d2:53:2b:81:f3:27:86:f2:e8:db:04:94:
         53:b8:35:d5:14:d1:b7:2f:3d:08:ab:f5:ae:9c:89:ff:3a:3e:
         05:84:76:b7:4b:13:14:d1:00:65:4a:8d:94:47:f2:87:80:c9:
         2c:ca:0e:e4:8b:1e:20:c9:b4:94:de:1c:42:aa:91:f9:2f:16:
         2e:0d:29:c0:53:c3:4c:97:ad:ce:c6:b3:9a:55:29:60:0f:88:
         e7:ea:49:44:2e:2e:98:2d:24:84:b4:17:6a:bb:fb:1e:df:47:
         90:d3:04:da:2e:f0:63:bd:61:43:c1:b4:ea:44:0e:4b:f9:fd:
         78:0e:48:21:cd:ef:aa:94:2a:8d:3d:35:f0:bb:95:e8:82:2f:
         99:b3:0a:d4:22:34:75:b6:e0:b2:10:e1:3b:19:04:66:df:42:
         c8:70:59:8f:4c:4e:cf:d9:77:52:a1:53:ea:23:2c:c2:0b:26:
         c1:b6:60:89:65:14:47:bd:20:39:37:7a:1e:23:82:bb:59:f6:
         b5:6a:5c:6f:8c:6c:ba:eb:28:f0:ed:e4:f6:0e:1d:9d:3b:b7:
         09:7f:fb:c5:12:27:74:0a:47:0e:18:5e:19:e6:90:41:77:74:
         66:45:2e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org