Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a636330303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a636330303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          DLFOlAZlF77HQH1ZAA63XFUQ1GL0ERkbaD606nfXwyA=
Subject key identifier:   6E:A5:B4:72:B5:78:4B:B6:2E:36:2B:90:1E:04:75:EC:32:22:8E:39
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       2CC1E0ED2209B6FEEBF30BD85E644DAC1B5214B4
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a636330303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:25 +0000
ROA not before:           Thu 03 Nov 2022 18:38:25 +0000
ROA not after:            Thu 02 Nov 2023 18:43:25 +0000
asID:                     269463
IP address blocks:        2804:6504:cc00::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c1:e0:ed:22:09:b6:fe:eb:f3:0b:d8:5e:64:4d:ac:1b:52:14:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:25 2022 GMT
            Not After : Nov  2 18:43:25 2023 GMT
        Subject: CN=6EA5B472B5784BB62E362B901E0475EC32228E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:84:a7:6d:d6:06:fb:05:3d:8f:56:e2:57:66:
                    83:ac:50:1b:b9:4d:22:c0:fb:11:6c:05:28:ee:e1:
                    d9:6d:2b:b6:2d:ee:99:23:9c:41:6f:fb:7c:4c:cc:
                    44:c6:31:b7:a4:bb:96:b0:d0:4f:f4:8a:d3:64:1c:
                    88:89:7b:ab:db:63:f2:97:23:d2:ec:14:6b:56:ed:
                    09:0b:56:87:7b:6d:eb:42:e9:17:f5:63:1b:99:0c:
                    21:e2:8b:46:af:9c:45:db:33:ea:61:e4:02:89:81:
                    1e:4f:f3:98:bb:f8:9b:8f:2c:9d:56:8f:e5:ad:47:
                    ff:8b:a3:b4:39:6e:b8:67:4f:6c:80:19:6e:c8:3b:
                    6b:dd:7b:e2:31:c0:16:f0:11:ac:e6:ae:ff:92:5c:
                    e5:a7:b6:f5:9d:df:12:02:f9:1d:f4:3b:7f:8f:1b:
                    0d:72:c4:7d:80:d9:fe:0d:77:50:0d:e4:be:58:19:
                    8e:b4:9a:21:f9:83:fc:5c:7a:1d:49:cc:af:96:2c:
                    8b:6e:20:ea:64:10:61:75:42:1f:c1:47:96:3f:e7:
                    21:94:ee:94:f7:e0:f1:82:c1:79:97:33:3f:b7:dd:
                    8e:6b:8b:a2:e0:3a:ba:67:9e:db:28:89:97:3f:31:
                    12:80:c9:16:d4:ef:67:ea:8c:53:4a:51:ca:36:02:
                    32:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A5:B4:72:B5:78:4B:B6:2E:36:2B:90:1E:04:75:EC:32:22:8E:39
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a636330303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:cc00::/38

    Signature Algorithm: sha256WithRSAEncryption
         b1:70:0e:5e:71:d8:b7:58:6c:af:e2:9a:16:17:c9:71:08:03:
         9a:e0:13:7e:7b:5b:70:b8:0b:29:f2:d9:03:16:1d:b3:96:f6:
         9b:72:85:55:18:ea:e8:b3:39:49:23:62:50:2d:c0:cb:d3:83:
         22:3e:55:20:b1:de:d6:89:61:df:9c:20:c6:1b:b6:d8:f7:69:
         58:0f:b8:7e:3c:b8:77:7c:6b:0a:ac:b6:05:01:6f:f9:3f:1e:
         30:06:ff:af:77:c0:f5:59:d5:9e:8e:e7:80:95:52:87:49:38:
         1f:65:a7:c7:b4:d4:8c:3e:b8:05:c6:44:29:5f:86:61:da:7d:
         15:bb:04:58:45:f8:42:18:4d:d6:fe:da:3b:7c:3d:d9:74:b3:
         c8:66:08:12:ea:89:85:5a:3f:56:d9:31:11:21:a4:96:17:2b:
         9f:6d:72:08:82:75:e6:c5:44:42:69:3c:2e:cc:60:a7:23:ae:
         b0:8c:de:50:4a:b1:01:29:bb:7f:6d:5a:ab:ee:75:fe:60:e7:
         db:cf:0b:90:f2:9c:a6:16:00:31:19:f7:44:06:56:86:25:e3:
         c9:ae:29:99:12:8f:84:ac:46:29:d3:7a:13:01:a6:22:43:96:
         f4:d3:5e:2e:f8:39:6b:d1:1d:c9:e7:b8:56:ad:76:7d:a3:82:
         b6:1a:2a:f7
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIULMHg7SIJtv7r8wvYXmRNrBtSFLQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg1RUZDQTYxRkYxRkJGQUU5QzBEMUMzQ0IzOUIwNjMw
MDJDM0M1OTAeFw0yMjExMDMxODM4MjVaFw0yMzExMDIxODQzMjVaMDMxMTAvBgNV
BAMTKDZFQTVCNDcyQjU3ODRCQjYyRTM2MkI5MDFFMDQ3NUVDMzIyMjhFMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDthKdt1gb7BT2PVuJXZoOsUBu5
TSLA+xFsBSju4dltK7Yt7pkjnEFv+3xMzETGMbeku5aw0E/0itNkHIiJe6vbY/KX
I9LsFGtW7QkLVod7betC6Rf1YxuZDCHii0avnEXbM+ph5AKJgR5P85i7+JuPLJ1W
j+WtR/+Lo7Q5brhnT2yAGW7IO2vde+IxwBbwEazmrv+SXOWntvWd3xIC+R30O3+P
Gw1yxH2A2f4Nd1AN5L5YGY60miH5g/xceh1JzK+WLItuIOpkEGF1Qh/BR5Y/5yGU
7pT34PGCwXmXMz+33Y5ri6LgOrpnntsoiZc/MRKAyRbU72fqjFNKUco2AjJPAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUbqW0crV4S7YuNiuQHgR17DIijjkwHwYDVR0j
BBgwFoAU2F78ph/x+/rpwNHDyzmwYwAsPFkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2lDd2JBUzFMbmc1TG9UY3F5RHJKY3FCbnY3ZVdmcXVMakRqN1gxTmhN
Mk0vMC9EODVFRkNBNjFGRjFGQkZBRTlDMEQxQzNDQjM5QjA2MzAwMkMzQzU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q4NUVGQ0E2MUZGMUZCRkFF
OUMwRDFDM0NCMzlCMDYzMDAyQzNDNTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dpQ3diQVMxTG5nNUxvVGNxeURySmNxQm52N2VXZnF1TGpEajdYMU5oTTJNLzAv
MzIzODMwMzQzYTM2MzUzMDM0M2E2MzYzMzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNk
M2UyMDMyMzYzOTM0MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAigEZQTMMA0GCSqGSIb3DQEBCwUA
A4IBAQCxcA5ecdi3WGyv4poWF8lxCAOa4BN+e1twuAsp8tkDFh2zlvabcoVVGOro
szlJI2JQLcDL04MiPlUgsd7WiWHfnCDGG7bY92lYD7h+PLh3fGsKrLYFAW/5Px4w
Bv+vd8D1WdWejueAlVKHSTgfZafHtNSMPrgFxkQpX4Zh2n0VuwRYRfhCGE3W/to7
fD3ZdLPIZggS6omFWj9W2TERIaSWFyufbXIIgnXmxURCaTwuzGCnI66wjN5QSrEB
Kbt/bVqr7nX+YOfbzwuQ8pymFgAxGfdEBlaGJePJrimZEo+ErEYp03oTAaYiQ5b0
014u+Dlr0R3J57hWrXZ9o4K2Gir3
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:10 2025 by rpki-client