Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a643830303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a643830303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          x4nBWktKggNJLZmTB5BuRP7HzCgRDbwf0LhsDjNMoZQ=
Subject key identifier:   45:43:D0:D7:21:6F:BD:6F:A3:5B:69:F0:76:48:7B:7A:43:77:FD:58
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       11F5FCA575831D21C836F00A6FC86016DC4F2BF5
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a643830303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:23 +0000
ROA not before:           Thu 03 Nov 2022 18:38:23 +0000
ROA not after:            Thu 02 Nov 2023 18:43:23 +0000
asID:                     269463
IP address blocks:        2804:6504:d800::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f5:fc:a5:75:83:1d:21:c8:36:f0:0a:6f:c8:60:16:dc:4f:2b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:23 2022 GMT
            Not After : Nov  2 18:43:23 2023 GMT
        Subject: CN=4543D0D7216FBD6FA35B69F076487B7A4377FD58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8d:ab:fb:38:3a:e2:5e:7c:ef:27:f7:7a:f0:
                    0f:65:d8:84:71:cd:8b:77:4b:ae:3f:1c:48:c3:cb:
                    a4:3f:7a:c2:ab:38:66:04:b8:d5:c8:b1:6c:ba:b9:
                    30:dd:64:d0:8d:a3:39:5e:fe:c9:f3:ac:dc:a9:93:
                    64:cf:ba:af:48:58:ee:94:f7:7c:31:c0:87:20:13:
                    eb:6f:22:53:84:d0:e1:5b:3b:91:d3:1d:3a:8f:39:
                    83:9c:8b:8a:0e:de:0b:95:5b:89:f4:17:f4:c8:f9:
                    a2:68:8e:9c:de:a3:ae:3b:9c:54:44:5d:3e:8d:1c:
                    a3:4b:36:ac:e6:5d:f5:82:ad:62:79:77:b1:38:f6:
                    90:d7:81:85:03:a9:12:01:5c:e4:1d:7e:01:c1:9c:
                    a7:b1:af:92:18:36:ea:0f:8a:90:90:9d:43:c6:cb:
                    9a:2e:23:2d:d4:ef:d0:95:e4:d1:47:b9:46:b8:52:
                    37:07:0e:f1:af:95:97:d3:c8:95:07:08:62:f5:b6:
                    6e:bb:73:21:a4:df:23:a7:27:98:52:70:98:ae:d2:
                    9f:c3:18:6c:0a:b0:64:20:f4:7a:37:4a:e0:d7:4f:
                    87:76:f7:24:f3:af:9c:fc:b2:ee:1a:97:40:04:a2:
                    03:09:00:a7:09:a9:98:40:2f:da:c8:95:7d:ea:1e:
                    11:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:43:D0:D7:21:6F:BD:6F:A3:5B:69:F0:76:48:7B:7A:43:77:FD:58
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a643830303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:d800::/38

    Signature Algorithm: sha256WithRSAEncryption
         4f:1c:f4:29:3c:01:42:5d:55:91:0a:a2:0f:bf:d9:8b:12:ef:
         7b:6f:a7:ae:4c:56:ef:8b:87:d0:c0:ff:b4:bd:87:7b:d7:f8:
         e5:df:c1:60:1b:de:8c:2e:fd:c4:b5:c7:bf:90:63:f1:ba:05:
         5f:98:d3:48:0a:44:4f:6f:d7:1b:df:a9:5e:95:08:53:d6:6c:
         00:b9:a8:64:62:34:e0:ba:52:76:45:ab:d0:65:83:bc:2e:a1:
         e5:34:50:61:55:fc:73:fa:7b:52:87:e7:cb:1d:24:0f:da:4f:
         0f:12:85:4e:7d:85:04:65:6d:be:8f:64:97:f4:08:89:dd:ad:
         56:92:df:09:fa:f2:87:d1:4c:28:59:f2:83:a7:66:84:68:45:
         d3:18:94:8b:48:48:47:53:0d:a8:a9:3a:41:a8:3e:ba:44:07:
         11:76:ca:cf:1e:db:c5:b2:3f:3a:59:c2:03:9f:6e:01:cb:7d:
         1b:1a:6a:59:55:e9:57:5f:0b:11:87:38:20:4f:f6:50:f5:02:
         80:64:3e:2d:42:37:f5:db:81:28:f8:52:d7:0a:8d:8d:48:db:
         f5:63:83:97:0f:56:58:d4:07:3e:70:91:a1:91:3c:33:8d:a6:
         1a:5d:a5:56:06:7b:58:39:f2:ec:3c:f3:34:2a:75:17:75:8b:
         cb:27:35:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org