Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a653830303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a653830303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          aL2sOdRsHgxqviNLFawR7TEKrY9E3FqHf4NDSg4OKc4=
Subject key identifier:   C2:05:8F:55:B6:58:2B:C3:BF:98:85:64:30:5C:6E:AA:13:5F:5A:0D
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       122D7C7D026AB7EF4245D885012AC32061C4E632
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a653830303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:27 +0000
ROA not before:           Thu 03 Nov 2022 18:38:27 +0000
ROA not after:            Thu 02 Nov 2023 18:43:27 +0000
asID:                     269463
IP address blocks:        2804:6504:e800::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2d:7c:7d:02:6a:b7:ef:42:45:d8:85:01:2a:c3:20:61:c4:e6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:27 2022 GMT
            Not After : Nov  2 18:43:27 2023 GMT
        Subject: CN=C2058F55B6582BC3BF988564305C6EAA135F5A0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5b:9a:10:67:a9:98:a6:b9:8b:4d:ec:28:38:
                    66:f2:8c:af:b8:1b:9f:f9:42:19:06:a1:ec:ef:4e:
                    34:30:2c:c4:dc:7d:4e:30:27:c3:41:a0:24:85:77:
                    44:8f:8f:46:8f:e0:fe:23:11:ee:d8:3c:13:9c:5b:
                    bf:20:dc:69:7b:63:68:e8:03:84:89:3d:84:05:05:
                    fe:fc:19:0e:62:ee:9b:d5:f2:44:9b:b4:c2:f6:59:
                    ef:2d:8c:17:27:78:e6:27:3d:fb:08:4a:c1:7c:14:
                    3b:1e:e4:cb:eb:f5:50:5d:a5:41:35:62:4b:01:82:
                    61:89:11:85:3e:e2:2e:af:fb:c6:05:d9:4e:31:f9:
                    20:f6:89:df:72:11:10:32:f1:24:96:d8:68:8d:3b:
                    e2:1d:96:f6:ee:bd:5f:3b:5b:9b:c3:75:0a:89:f3:
                    15:ad:84:94:dc:ce:a1:fa:2c:50:c4:38:25:f5:96:
                    47:e9:c6:82:f1:38:0a:4d:ff:5e:7b:44:d8:9f:e8:
                    ca:6b:22:bd:2d:15:46:1c:1b:9b:2b:0c:06:4e:40:
                    35:84:5a:70:f4:c5:b6:08:72:ed:a5:28:35:7d:a2:
                    3a:0a:74:ea:20:68:47:e6:6c:cb:59:65:61:52:50:
                    cf:ed:76:82:c6:87:6e:fb:53:94:aa:be:30:15:73:
                    db:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:05:8F:55:B6:58:2B:C3:BF:98:85:64:30:5C:6E:AA:13:5F:5A:0D
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a653830303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:e800::/38

    Signature Algorithm: sha256WithRSAEncryption
         04:70:ac:db:b8:6b:15:e4:9d:ff:99:43:5c:fb:ab:51:27:75:
         e1:71:01:96:46:3a:91:2d:a3:8d:b0:0f:7b:5d:fa:cb:ec:a8:
         07:5f:80:da:66:ad:e7:8a:dd:b5:ae:50:90:22:f8:8a:60:4e:
         de:03:a6:95:48:9f:8e:6d:2b:d9:8e:ac:d9:56:d6:24:79:29:
         df:5c:30:9f:d7:cc:16:9b:0b:94:53:59:eb:63:53:e9:56:23:
         c0:fc:df:d3:64:35:f4:39:a2:d3:8c:50:db:a6:38:90:2e:6c:
         3c:f6:8e:2d:56:d9:02:23:3e:bd:ca:f2:ba:53:57:55:41:19:
         2b:70:cb:4e:13:f7:b1:d2:d3:fa:9f:4b:3a:eb:a7:96:ae:34:
         3c:59:ba:b8:21:6a:ae:62:c6:71:5d:67:b5:47:73:5e:eb:ac:
         46:ad:fc:f0:ea:ef:f8:f2:3b:90:10:7c:6d:79:e9:2d:28:7d:
         32:19:b0:e1:45:47:63:04:25:7b:53:92:42:ec:42:57:2b:82:
         17:32:12:22:f9:ea:f1:84:90:ff:d4:ba:0d:3d:ea:c3:0f:ae:
         40:59:a2:5c:2e:67:bc:6d:0f:5d:99:b6:f0:cf:7c:fd:a4:bb:
         84:39:06:8c:2a:04:a1:b8:0c:ff:38:46:ee:b5:a2:86:ea:43:
         37:40:fd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org