Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a653430303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a653430303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          kAIfpfH22wpRo6kwtJnEbC+styO7cmr2jNmtxNOZeMI=
Subject key identifier:   DE:C5:8B:AB:68:24:E2:42:0E:EC:9B:ED:03:43:87:C3:75:C6:47:E7
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       2C0AD65DD447574CD339B85F21A819D607AEABD4
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a653430303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:34 +0000
ROA not before:           Thu 03 Nov 2022 18:38:34 +0000
ROA not after:            Thu 02 Nov 2023 18:43:34 +0000
asID:                     269463
IP address blocks:        2804:6504:e400::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:0a:d6:5d:d4:47:57:4c:d3:39:b8:5f:21:a8:19:d6:07:ae:ab:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:34 2022 GMT
            Not After : Nov  2 18:43:34 2023 GMT
        Subject: CN=DEC58BAB6824E2420EEC9BED034387C375C647E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ec:9e:92:08:f9:73:75:c9:4f:77:67:ec:50:
                    94:8b:74:1c:a4:bd:b3:2c:c6:88:df:05:0b:18:21:
                    61:73:80:cc:61:72:80:e0:73:7a:ca:2c:4f:f6:97:
                    47:d8:29:b0:4b:90:70:f6:fd:5d:c2:df:c9:22:41:
                    7e:a5:30:30:ae:32:68:39:e8:c6:65:b2:68:7b:5a:
                    ae:02:a6:24:00:2a:95:e7:2b:6c:ba:00:c3:7d:c3:
                    ff:9d:ec:be:ad:17:4d:25:dd:ae:6b:80:ae:e1:86:
                    01:ca:c6:cd:dc:8e:98:ae:45:06:b4:23:51:41:4a:
                    36:5a:38:2e:d2:a3:d3:dd:3c:36:0b:c8:43:a4:0d:
                    34:99:4a:50:9e:df:53:cb:c8:e1:48:a6:1d:15:cc:
                    0e:ea:45:bf:32:92:21:73:4a:d7:b4:ad:34:08:ff:
                    21:6d:56:f9:32:fa:16:4b:1c:d9:b7:81:8d:38:12:
                    af:73:9b:c9:16:b3:4a:65:7c:e8:8b:24:d3:29:6e:
                    6f:a3:91:1b:23:3e:ba:05:6f:45:da:6f:0b:bd:a0:
                    bd:31:5e:1d:0b:7c:4b:80:07:4c:24:aa:97:d1:d6:
                    d8:f8:b8:f5:a8:18:8b:c9:5a:50:b7:ca:ba:c1:35:
                    60:27:b0:bb:07:1b:93:c9:ef:55:24:94:2b:9d:d4:
                    8e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C5:8B:AB:68:24:E2:42:0E:EC:9B:ED:03:43:87:C3:75:C6:47:E7
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a653430303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:e400::/38

    Signature Algorithm: sha256WithRSAEncryption
         83:7f:15:52:13:51:d7:95:59:9b:a7:69:8e:1b:14:a1:47:bf:
         05:33:76:b8:d4:02:b0:94:a1:68:6f:51:55:7c:7f:7c:f3:91:
         3c:2b:53:c8:33:13:9a:09:38:2d:c7:b0:ca:21:bf:5a:27:da:
         5b:9e:ad:3f:6a:ed:17:37:fa:e6:b4:c7:92:ae:c0:77:5a:be:
         44:78:22:db:42:02:ea:71:6b:58:c0:af:6f:94:91:43:55:b4:
         39:b3:12:26:80:43:83:44:ff:f1:27:84:a5:31:4b:48:c1:14:
         12:aa:2b:cd:72:6f:6d:83:5b:9c:7b:a0:9a:02:5f:06:9d:ec:
         89:5c:85:d1:2f:e6:cb:49:d0:7f:68:ba:9f:9e:3a:4e:44:ea:
         e5:a4:3e:d7:d2:bf:5a:c2:3a:73:13:d0:fc:6d:c0:c7:26:af:
         d5:5b:eb:1d:0b:ca:30:ba:10:f5:31:68:22:47:8d:70:c9:97:
         3d:aa:82:da:2b:13:74:35:06:7e:af:3d:43:19:5f:32:52:7e:
         ad:06:ec:1b:15:fd:fe:1b:06:d6:3c:67:c7:38:19:63:79:c6:
         0c:bb:1c:0e:42:01:fa:95:34:11:7c:89:9d:58:fe:81:07:41:
         82:4e:7e:39:38:cb:0e:11:8b:00:b3:e1:78:34:ad:fd:44:76:
         be:19:b8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org