Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a643030303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a643030303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          +dcY7vdDgzDgP1UpSBIQaij9IlH5TURyvAsQHQg1BjA=
Subject key identifier:   33:06:C7:25:2A:1B:BA:D6:AB:D5:A6:01:D5:9D:27:A5:FD:5E:C1:44
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       30753F6B66F6262C145D936ED88D394789E56B0A
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a643030303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:34 +0000
ROA not before:           Thu 03 Nov 2022 18:38:34 +0000
ROA not after:            Thu 02 Nov 2023 18:43:34 +0000
asID:                     269463
IP address blocks:        2804:6504:d000::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:75:3f:6b:66:f6:26:2c:14:5d:93:6e:d8:8d:39:47:89:e5:6b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:34 2022 GMT
            Not After : Nov  2 18:43:34 2023 GMT
        Subject: CN=3306C7252A1BBAD6ABD5A601D59D27A5FD5EC144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:77:6d:1f:17:ce:98:8f:a9:72:8a:88:15:9a:
                    9b:d2:04:bc:3e:69:cb:19:49:34:2e:2b:bd:a0:bb:
                    cd:4d:5d:6b:66:dc:0a:f9:64:98:f4:a1:46:a3:24:
                    44:8f:d8:d8:47:50:fc:e0:fc:25:26:ed:81:75:d0:
                    e7:27:ed:a2:ab:2e:6b:97:21:32:2f:cb:0e:ec:16:
                    2a:1b:d9:68:51:52:67:43:f8:9e:30:4f:62:7f:ad:
                    2a:78:43:35:b7:31:f9:bb:b5:8b:de:9d:21:77:db:
                    49:b1:29:25:90:48:30:1f:71:69:ea:17:5c:49:20:
                    41:64:90:fe:c5:d1:56:62:e8:34:bd:d2:70:1c:cd:
                    47:7f:c3:0d:a6:85:95:64:a1:ed:41:1c:10:ab:80:
                    f3:cc:97:f2:69:40:a6:3e:4e:47:30:c5:19:50:07:
                    79:7f:c4:08:70:ad:86:a8:c7:f5:9a:37:42:96:e9:
                    ab:7c:15:65:e2:ff:2e:40:26:9b:3f:ce:af:74:bf:
                    39:14:d3:00:d6:bb:93:0f:c7:8d:f7:1b:d7:37:e2:
                    2f:92:42:7b:a0:d1:72:4b:0d:b8:4b:28:ef:f8:c6:
                    d9:cd:20:02:8d:b0:87:df:dd:1c:21:63:94:68:39:
                    51:97:19:31:9b:8f:9a:e9:5e:7a:31:23:e4:9f:4c:
                    51:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:06:C7:25:2A:1B:BA:D6:AB:D5:A6:01:D5:9D:27:A5:FD:5E:C1:44
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a643030303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:d000::/38

    Signature Algorithm: sha256WithRSAEncryption
         7c:91:e3:62:a9:63:72:4c:a9:11:ba:77:aa:35:1c:7b:78:b8:
         40:14:bc:bf:f7:8a:7c:7e:40:7f:20:34:de:ce:c1:25:fe:47:
         cb:6f:28:a1:74:c2:24:79:e7:30:a5:c7:20:45:c5:3b:65:26:
         e4:92:36:e5:ed:43:76:1c:d9:84:ef:fd:4d:dd:be:7b:83:4a:
         39:eb:3c:2a:ea:c7:c5:19:3c:b8:0d:13:d5:1b:c2:8c:54:45:
         1d:67:63:29:0f:95:85:0f:9a:d2:45:93:89:d8:70:28:35:06:
         da:c6:85:6f:5f:9a:5c:82:bc:0c:23:26:69:e1:05:5e:75:9b:
         23:02:1b:30:62:b7:db:c2:a8:e9:34:b2:d4:d0:ec:e5:e9:2e:
         69:54:07:f9:21:43:ac:ee:dc:e1:52:49:01:9e:b1:69:1c:1a:
         1d:5b:f1:d0:58:51:31:f0:6c:59:d8:ac:31:db:bf:e0:74:83:
         cc:65:1f:fa:83:90:26:ba:7d:cf:9f:d0:f0:b7:9a:fa:a4:64:
         a9:9d:da:f6:d4:d0:48:75:67:47:cc:9a:26:d3:b6:0e:49:f5:
         af:c7:c9:98:00:20:4c:09:23:a8:29:68:72:2d:8f:ef:2a:e2:
         26:70:3c:fe:16:20:d2:05:7e:38:36:f6:f6:72:93:c8:e7:4a:
         50:ae:ae:33
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUMHU/a2b2JiwUXZNu2I05R4nlawowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg1RUZDQTYxRkYxRkJGQUU5QzBEMUMzQ0IzOUIwNjMw
MDJDM0M1OTAeFw0yMjExMDMxODM4MzRaFw0yMzExMDIxODQzMzRaMDMxMTAvBgNV
BAMTKDMzMDZDNzI1MkExQkJBRDZBQkQ1QTYwMUQ1OUQyN0E1RkQ1RUMxNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2d20fF86Yj6lyiogVmpvSBLw+
acsZSTQuK72gu81NXWtm3Ar5ZJj0oUajJESP2NhHUPzg/CUm7YF10Ocn7aKrLmuX
ITIvyw7sFiob2WhRUmdD+J4wT2J/rSp4QzW3Mfm7tYvenSF320mxKSWQSDAfcWnq
F1xJIEFkkP7F0VZi6DS90nAczUd/ww2mhZVkoe1BHBCrgPPMl/JpQKY+TkcwxRlQ
B3l/xAhwrYaox/WaN0KW6at8FWXi/y5AJps/zq90vzkU0wDWu5MPx433G9c34i+S
Qnug0XJLDbhLKO/4xtnNIAKNsIff3RwhY5RoOVGXGTGbj5rpXnoxI+SfTFH7AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUMwbHJSobutar1aYB1Z0npf1ewUQwHwYDVR0j
BBgwFoAU2F78ph/x+/rpwNHDyzmwYwAsPFkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2lDd2JBUzFMbmc1TG9UY3F5RHJKY3FCbnY3ZVdmcXVMakRqN1gxTmhN
Mk0vMC9EODVFRkNBNjFGRjFGQkZBRTlDMEQxQzNDQjM5QjA2MzAwMkMzQzU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q4NUVGQ0E2MUZGMUZCRkFF
OUMwRDFDM0NCMzlCMDYzMDAyQzNDNTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dpQ3diQVMxTG5nNUxvVGNxeURySmNxQm52N2VXZnF1TGpEajdYMU5oTTJNLzAv
MzIzODMwMzQzYTM2MzUzMDM0M2E2NDMwMzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNk
M2UyMDMyMzYzOTM0MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAigEZQTQMA0GCSqGSIb3DQEBCwUA
A4IBAQB8keNiqWNyTKkRuneqNRx7eLhAFLy/94p8fkB/IDTezsEl/kfLbyihdMIk
eecwpccgRcU7ZSbkkjbl7UN2HNmE7/1N3b57g0o56zwq6sfFGTy4DRPVG8KMVEUd
Z2MpD5WFD5rSRZOJ2HAoNQbaxoVvX5pcgrwMIyZp4QVedZsjAhswYrfbwqjpNLLU
0Ozl6S5pVAf5IUOs7tzhUkkBnrFpHBodW/HQWFEx8GxZ2Kwx27/gdIPMZR/6g5Am
un3Pn9Dwt5r6pGSpndr21NBIdWdHzJom07YOSfWvx8mYACBMCSOoKWhyLY/vKuIm
cDz+FiDSBX44Nvb2cpPI50pQrq4z
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org