Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a6330303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a6330303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          acUSaS47opJyo3woGkGpV13C6hJvI0AlKudmv9qKTYo=
Subject key identifier:   29:79:AA:90:C3:5D:07:80:2F:85:63:49:59:93:ED:C7:DB:E3:62:E5
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       6E12EC281DE4F0DE2F5B8AB53F65E360A4F14D6D
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a6330303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:27 +0000
ROA not before:           Thu 03 Nov 2022 18:38:27 +0000
ROA not after:            Thu 02 Nov 2023 18:43:27 +0000
asID:                     269463
IP address blocks:        2804:6504:c00::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:12:ec:28:1d:e4:f0:de:2f:5b:8a:b5:3f:65:e3:60:a4:f1:4d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:27 2022 GMT
            Not After : Nov  2 18:43:27 2023 GMT
        Subject: CN=2979AA90C35D07802F8563495993EDC7DBE362E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9b:ec:1e:c3:85:ed:d4:24:52:fa:01:cd:39:
                    85:ed:0a:bd:49:cf:e9:7e:71:37:e4:bf:05:75:f9:
                    e1:31:c1:df:5d:37:30:aa:04:a3:a5:70:27:eb:55:
                    68:86:e4:ab:a4:24:8e:07:74:76:04:c2:42:07:62:
                    da:85:2e:df:8b:d3:bc:0c:ec:37:90:5b:70:de:af:
                    92:a4:ed:00:81:b5:61:2d:b2:d0:b7:59:ff:c9:c1:
                    54:55:bc:91:57:7d:a4:c7:ce:26:70:46:be:f9:b2:
                    12:3c:a5:a5:56:d2:71:62:de:35:36:44:88:71:bd:
                    63:02:9a:f0:20:d1:2f:60:2e:88:ba:34:e3:60:f5:
                    2e:7e:74:24:b2:08:b8:72:a0:7a:d6:11:92:b1:af:
                    e9:6d:5b:24:b3:10:48:02:9c:34:98:10:43:21:5a:
                    1a:43:89:af:f3:a6:1d:fe:9f:2d:a2:f0:26:4e:0f:
                    6e:51:6a:4a:a2:e2:05:2b:47:04:4b:98:d5:ed:5c:
                    1e:be:30:9e:86:c7:bd:d4:07:f4:de:0a:d7:fe:4e:
                    41:45:7b:68:28:dc:60:28:a7:0b:bb:97:fe:9a:90:
                    35:28:43:d2:eb:cd:3e:ce:74:a2:81:02:f4:20:56:
                    fe:1b:9f:52:8c:52:f2:19:92:0f:e8:70:c7:6d:e5:
                    9a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:79:AA:90:C3:5D:07:80:2F:85:63:49:59:93:ED:C7:DB:E3:62:E5
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a6330303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         11:a8:14:36:2e:ed:73:e4:35:36:d2:39:40:18:8f:3f:22:c0:
         48:9a:c8:ad:93:ed:b3:1e:d6:30:b5:aa:8a:50:8d:b8:ba:97:
         98:f2:32:d3:67:95:eb:23:c7:86:f9:f8:c8:3d:4a:54:41:8a:
         70:4a:96:43:d5:94:f8:ad:bb:24:66:a8:cd:a7:21:47:27:98:
         95:1e:42:b1:7b:7b:5a:8a:58:a1:1f:d5:bf:58:9f:68:4d:6c:
         99:13:7a:ce:1e:49:07:cd:de:a1:2f:f0:79:e9:90:59:2f:f1:
         ed:64:b6:1e:cc:41:bc:2d:ca:83:fe:7f:39:f1:53:33:d7:7e:
         ee:e5:0e:03:50:2b:fa:d1:a8:5f:6d:41:cc:80:bb:72:75:46:
         c3:af:4c:de:2a:5e:e5:47:2d:44:b8:c3:bc:89:87:b0:32:c6:
         ac:74:d1:d3:83:f6:44:a6:86:63:a2:91:68:46:26:63:10:d1:
         81:4c:ff:71:90:1b:22:3b:28:a2:3a:a0:a4:76:09:1f:14:5a:
         f7:74:cd:f8:33:5c:5a:a2:80:d4:c9:5d:f7:71:9f:8d:6f:91:
         61:64:a6:a4:11:4c:70:db:e9:0d:bc:45:19:81:77:2e:2a:d2:
         55:a3:e6:c8:9a:07:2b:42:68:e0:5b:e9:87:d7:91:af:68:23:
         07:0c:37:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org