Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a633830303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a633830303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          m6lZK53CyXfpL6LBi7m7FUx4sI4SV+ePtVnzx2FqOOE=
Subject key identifier:   20:A9:98:9C:AA:B4:78:90:AC:51:B1:14:AA:79:26:2D:E3:11:28:44
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       2E72991C08E98DF1B189F60FCD7437FA39F1680D
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a633830303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:27 +0000
ROA not before:           Thu 03 Nov 2022 18:38:27 +0000
ROA not after:            Thu 02 Nov 2023 18:43:27 +0000
asID:                     269463
IP address blocks:        2804:6504:c800::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:72:99:1c:08:e9:8d:f1:b1:89:f6:0f:cd:74:37:fa:39:f1:68:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:27 2022 GMT
            Not After : Nov  2 18:43:27 2023 GMT
        Subject: CN=20A9989CAAB47890AC51B114AA79262DE3112844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9e:34:0a:5e:3a:6e:4b:7b:e3:2d:fa:67:a3:
                    1e:a3:c6:7c:9c:da:b4:01:86:d4:c4:2c:0b:66:b7:
                    52:6e:bd:8c:cb:53:06:2f:03:03:43:9c:89:68:83:
                    1b:8c:ba:53:eb:da:51:d5:2d:c5:43:a0:de:8a:af:
                    a1:0f:e1:31:38:b7:38:a2:8b:ee:da:e2:c6:5e:2c:
                    0f:44:a1:ee:7d:8f:f4:a7:c6:36:a9:f9:1c:58:3a:
                    e7:b3:2d:19:77:02:b3:fe:f6:29:17:83:68:6f:aa:
                    3d:bc:fc:76:0b:88:49:7c:7f:d5:3b:9b:e1:aa:32:
                    b4:ab:70:de:00:95:2d:f3:09:1f:49:5b:73:ec:0c:
                    71:b2:93:2c:fe:e2:f8:03:ef:d1:0a:4f:13:d7:e8:
                    db:5e:09:2d:7e:3e:41:4f:a0:04:36:cd:9f:27:53:
                    8e:d4:84:fc:cf:a1:5e:b0:c9:a6:5b:ef:ea:e9:cc:
                    4a:65:2c:d2:a7:6d:c0:bc:33:d1:23:1f:d9:43:fe:
                    ed:d8:52:ca:ec:f8:a9:13:18:b2:77:bb:f9:2e:73:
                    00:2d:3f:43:4b:d1:ea:ba:cb:8b:66:0c:9d:dc:ed:
                    28:94:47:7d:d7:aa:19:26:9e:36:af:00:bd:fe:67:
                    e8:c4:0c:f4:67:89:fb:c0:40:fa:3a:a6:77:ea:fe:
                    e2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A9:98:9C:AA:B4:78:90:AC:51:B1:14:AA:79:26:2D:E3:11:28:44
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a633830303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:c800::/38

    Signature Algorithm: sha256WithRSAEncryption
         a1:39:d9:00:da:f5:59:95:9b:aa:ed:7a:70:20:52:6d:05:34:
         df:98:83:ea:e4:64:24:43:80:60:10:19:8a:c2:32:1f:ce:05:
         8a:81:6b:e5:8f:4c:1d:d3:46:5c:31:dd:e7:a5:f0:8b:97:19:
         d4:70:0d:9c:d0:95:2b:be:e5:ee:d4:67:f4:69:b5:5e:8e:15:
         6c:9d:54:7d:9d:51:2f:22:e3:66:c2:0d:fd:de:a0:f7:67:40:
         d2:8b:1d:b3:02:2a:3a:8d:4d:e3:45:a0:ba:36:f0:7c:28:a2:
         a0:bf:64:69:b3:d7:27:4d:df:82:90:57:a9:40:ba:98:dd:a6:
         63:3d:0d:4c:91:f3:84:25:ad:3d:c4:4f:a8:a2:69:56:90:43:
         86:d3:0b:a0:8c:ee:4f:1b:57:a3:f7:a6:17:d8:1c:9f:aa:02:
         45:25:c4:74:16:84:a2:fb:85:7a:c8:7d:f7:68:a3:82:df:5f:
         cc:cf:18:f7:e2:5f:f4:c3:ab:89:3e:08:41:18:41:13:25:78:
         5f:bc:49:f8:26:af:69:bd:55:bb:89:14:24:95:df:45:2b:31:
         6b:fb:cc:2f:ec:f9:bd:24:80:b1:72:67:6e:15:2d:e6:91:4f:
         d7:ba:4f:f1:f1:d6:c1:97:a4:90:0f:66:e7:1a:09:ad:7b:c9:
         46:08:43:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org