Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a643430303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a643430303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          9+TIONU1i9Dd5to4iScY85A35HTBLVx8e/bS2Esa5Bw=
Subject key identifier:   CE:41:BF:5F:24:48:14:2D:CD:79:5A:6F:81:61:9B:76:39:C0:59:EE
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       66E3D323EE28FF0AFA38FA126301D1B6BCE9D4F4
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a643430303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:33 +0000
ROA not before:           Thu 03 Nov 2022 18:38:33 +0000
ROA not after:            Thu 02 Nov 2023 18:43:33 +0000
asID:                     269463
IP address blocks:        2804:6504:d400::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e3:d3:23:ee:28:ff:0a:fa:38:fa:12:63:01:d1:b6:bc:e9:d4:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:33 2022 GMT
            Not After : Nov  2 18:43:33 2023 GMT
        Subject: CN=CE41BF5F2448142DCD795A6F81619B7639C059EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1d:15:ce:ea:cf:52:3b:3f:74:59:03:c0:1f:
                    b0:8c:9b:82:7a:fd:a9:ac:a2:d9:20:2b:4e:75:39:
                    9a:94:26:f0:11:25:ce:14:1d:75:8e:e4:05:24:cf:
                    51:66:0a:64:9e:94:4d:3f:e7:98:57:31:4e:2e:f3:
                    06:22:51:61:71:77:6f:ab:32:1a:db:9a:fa:21:d0:
                    27:d1:2a:bc:0d:c2:c3:f2:24:c9:47:28:f3:36:b8:
                    ea:bf:24:4c:da:9c:c4:f0:62:fd:4d:2d:83:17:19:
                    91:4e:aa:c7:1a:23:bb:f6:16:08:96:4b:4e:5e:3d:
                    4d:b7:09:7b:e3:e1:38:e5:b7:ae:ad:00:ce:e6:d4:
                    6f:82:13:e5:08:86:65:38:51:73:f2:45:8e:65:d0:
                    0a:3e:9a:48:e4:af:24:62:a5:38:80:1e:33:f0:00:
                    0e:e7:6e:53:d5:1a:c4:8c:8f:cc:f9:bf:63:a5:89:
                    83:5f:48:11:99:c3:b4:38:48:ec:c9:5f:a6:4d:06:
                    5d:e3:c7:47:ce:6e:cf:80:bf:bc:12:0b:c7:5d:11:
                    78:cc:0a:ab:ed:55:f8:76:83:f0:95:75:ac:e8:53:
                    31:32:a2:6f:99:5c:0b:cb:09:79:e2:c0:de:70:e3:
                    c9:ec:c3:40:5a:3a:36:7e:88:4b:db:61:2c:33:af:
                    4b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:41:BF:5F:24:48:14:2D:CD:79:5A:6F:81:61:9B:76:39:C0:59:EE
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a643430303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:d400::/38

    Signature Algorithm: sha256WithRSAEncryption
         10:03:fd:11:b3:cb:6e:92:e9:6b:67:35:1d:c5:b7:1a:69:76:
         a4:3a:17:10:cf:37:95:04:b8:2b:71:25:18:2d:26:a7:24:ba:
         c7:a0:28:7e:44:8d:3d:1b:3d:77:b1:2d:3c:bd:0b:c9:e1:64:
         8e:89:4e:a9:0e:bd:44:60:a9:4e:87:92:46:47:7f:6c:46:b0:
         63:a3:18:56:21:30:13:fa:93:10:ef:2c:87:6a:1e:db:5c:58:
         40:4f:ee:8d:3e:d9:26:03:4d:9d:00:38:89:d5:65:28:5b:18:
         b7:87:ef:ed:df:dd:ff:1b:26:86:38:a1:af:fa:76:26:b1:f9:
         4c:f2:9d:81:09:18:59:f5:39:bf:d9:f2:e4:a0:ee:1d:6f:ed:
         df:ca:19:70:5d:eb:ee:5c:e4:b8:cd:fc:cf:7b:66:e3:6e:07:
         64:58:7b:bf:0e:74:c0:4b:4d:91:c9:4f:30:d1:19:7f:da:3d:
         68:61:6e:a7:d2:f8:01:8a:41:2a:93:64:59:df:fc:0d:f5:4a:
         3c:37:70:b6:8b:93:d0:0b:01:2d:f3:bd:1f:64:ce:fe:13:91:
         1b:fd:a8:16:e8:7e:87:6b:5b:11:c5:a1:52:f8:6f:53:1b:3f:
         28:44:af:d6:a0:01:db:3c:ab:fa:13:c0:78:a2:35:52:1c:69:
         4a:1a:33:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org