Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a653030303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a653030303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          gz+df39jziNxW0Mt2k1r9V99AIReGFiNUkhSS3HMjS4=
Subject key identifier:   8B:EB:18:EC:6B:1D:50:B0:EA:4C:71:4A:03:55:49:D0:72:54:D4:68
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       42A88EAF52A9F9DD8FBD2D7300031937C631A797
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a653030303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:25 +0000
ROA not before:           Thu 03 Nov 2022 18:38:25 +0000
ROA not after:            Thu 02 Nov 2023 18:43:25 +0000
asID:                     269463
IP address blocks:        2804:6504:e000::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a8:8e:af:52:a9:f9:dd:8f:bd:2d:73:00:03:19:37:c6:31:a7:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:25 2022 GMT
            Not After : Nov  2 18:43:25 2023 GMT
        Subject: CN=8BEB18EC6B1D50B0EA4C714A035549D07254D468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:2e:35:e4:66:af:c8:c7:de:87:85:53:29:5e:
                    7c:f6:fc:ae:72:50:2b:70:b8:52:4f:47:c9:06:61:
                    84:2c:7a:44:9b:02:92:3d:72:ea:4e:80:fd:e9:da:
                    a3:de:f8:36:91:32:91:5d:05:29:f0:fa:15:b3:c5:
                    64:de:ca:b6:07:bc:b0:c0:e0:fc:0f:b6:8a:47:74:
                    8f:73:e1:8f:8d:4c:1c:e9:f0:1d:fc:3b:e0:75:29:
                    3e:4f:ab:25:d0:4e:38:6f:37:4b:03:63:72:c6:6c:
                    0c:52:af:7b:77:c6:1f:d8:16:c0:bb:6d:48:a4:ea:
                    6a:05:ae:6e:33:e1:84:0a:02:d0:61:c2:8a:b4:8d:
                    34:21:7b:72:2e:5e:02:7d:8c:b7:37:41:b3:c8:ab:
                    84:cd:33:96:95:f3:a9:ec:05:53:8a:f8:ea:57:18:
                    0e:c5:d1:47:8e:73:11:15:26:3d:be:05:8d:93:37:
                    4b:00:d3:bf:25:86:10:93:1b:57:2e:f2:b7:33:e5:
                    8e:a7:94:fc:ff:98:4e:58:d6:0a:01:0f:74:37:00:
                    43:22:ee:4f:9b:32:d8:2e:3f:1c:51:e7:13:a3:32:
                    60:13:1b:48:38:33:c6:9a:da:16:05:bb:9a:c3:ef:
                    b0:1e:a5:19:af:ed:29:8c:a8:2f:33:93:11:a2:db:
                    5a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EB:18:EC:6B:1D:50:B0:EA:4C:71:4A:03:55:49:D0:72:54:D4:68
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a653030303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:e000::/38

    Signature Algorithm: sha256WithRSAEncryption
         81:da:a6:8f:29:47:ba:3b:94:c2:4c:dd:83:e4:45:0c:14:6d:
         2e:ab:d8:18:99:91:2e:7c:b0:0e:1a:a3:ad:7a:4c:2b:e1:f2:
         aa:4a:b5:0f:8b:09:3e:ca:95:f8:2f:69:eb:11:59:80:a5:ee:
         7b:2b:d8:da:27:b7:74:ed:40:aa:2f:72:53:5c:1b:0c:21:4b:
         0a:a6:14:b1:d0:6a:d4:9b:e8:8e:bc:d7:ed:c6:fb:19:73:97:
         03:88:97:cb:d7:c0:09:b1:a3:37:98:3d:72:02:7f:de:73:33:
         b3:a5:1c:ef:ea:23:bc:4f:f6:93:bf:e6:c1:47:2d:00:9c:0f:
         ee:be:2c:6e:a0:34:c8:f9:2f:fb:f4:9b:a9:fa:1b:d9:31:c5:
         32:ed:2c:10:45:20:c0:d3:ef:8b:97:8f:bc:05:8b:4e:7a:4a:
         2b:b9:01:41:18:9f:bc:57:b9:45:ba:21:fc:67:a2:39:81:e7:
         45:fa:01:f9:7f:95:60:3a:ba:c8:97:a1:0a:ea:55:46:db:42:
         cc:34:31:a8:92:a5:1f:2f:3a:ca:48:cd:bf:6b:72:c2:80:f4:
         e7:1d:e7:c4:d7:fd:e8:36:e2:0c:0b:cb:db:d7:e1:a1:b0:cf:
         49:cc:97:55:00:d8:8f:6b:3d:d9:af:1a:4f:b0:a6:0b:2a:32:
         5a:46:3c:63
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUQqiOr1Kp+d2PvS1zAAMZN8Yxp5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg1RUZDQTYxRkYxRkJGQUU5QzBEMUMzQ0IzOUIwNjMw
MDJDM0M1OTAeFw0yMjExMDMxODM4MjVaFw0yMzExMDIxODQzMjVaMDMxMTAvBgNV
BAMTKDhCRUIxOEVDNkIxRDUwQjBFQTRDNzE0QTAzNTU0OUQwNzI1NEQ0NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwLjXkZq/Ix96HhVMpXnz2/K5y
UCtwuFJPR8kGYYQsekSbApI9cupOgP3p2qPe+DaRMpFdBSnw+hWzxWTeyrYHvLDA
4PwPtopHdI9z4Y+NTBzp8B38O+B1KT5PqyXQTjhvN0sDY3LGbAxSr3t3xh/YFsC7
bUik6moFrm4z4YQKAtBhwoq0jTQhe3IuXgJ9jLc3QbPIq4TNM5aV86nsBVOK+OpX
GA7F0UeOcxEVJj2+BY2TN0sA078lhhCTG1cu8rcz5Y6nlPz/mE5Y1goBD3Q3AEMi
7k+bMtguPxxR5xOjMmATG0g4M8aa2hYFu5rD77AepRmv7SmMqC8zkxGi21rXAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUi+sY7GsdULDqTHFKA1VJ0HJU1GgwHwYDVR0j
BBgwFoAU2F78ph/x+/rpwNHDyzmwYwAsPFkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2lDd2JBUzFMbmc1TG9UY3F5RHJKY3FCbnY3ZVdmcXVMakRqN1gxTmhN
Mk0vMC9EODVFRkNBNjFGRjFGQkZBRTlDMEQxQzNDQjM5QjA2MzAwMkMzQzU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q4NUVGQ0E2MUZGMUZCRkFF
OUMwRDFDM0NCMzlCMDYzMDAyQzNDNTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dpQ3diQVMxTG5nNUxvVGNxeURySmNxQm52N2VXZnF1TGpEajdYMU5oTTJNLzAv
MzIzODMwMzQzYTM2MzUzMDM0M2E2NTMwMzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNk
M2UyMDMyMzYzOTM0MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAigEZQTgMA0GCSqGSIb3DQEBCwUA
A4IBAQCB2qaPKUe6O5TCTN2D5EUMFG0uq9gYmZEufLAOGqOtekwr4fKqSrUPiwk+
ypX4L2nrEVmApe57K9jaJ7d07UCqL3JTXBsMIUsKphSx0GrUm+iOvNftxvsZc5cD
iJfL18AJsaM3mD1yAn/eczOzpRzv6iO8T/aTv+bBRy0AnA/uvixuoDTI+S/79Jup
+hvZMcUy7SwQRSDA0++Ll4+8BYtOekoruQFBGJ+8V7lFuiH8Z6I5gedF+gH5f5Vg
OrrIl6EK6lVG20LMNDGokqUfLzrKSM2/a3LCgPTnHefE1/3oNuIMC8vb1+GhsM9J
zJdVANiPaz3ZrxpPsKYLKjJaRjxj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org