Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a663030303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a663030303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          wXNNtiy+NCSeb23nDPAU5xkJhFg/iOpreSzSNdOCcvs=
Subject key identifier:   49:00:50:F0:57:2A:83:A2:39:47:EC:48:95:88:27:54:4C:5E:92:86
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       35B7746248001CB600915D36062BB726343F5C41
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a663030303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:34 +0000
ROA not before:           Thu 03 Nov 2022 18:38:34 +0000
ROA not after:            Thu 02 Nov 2023 18:43:34 +0000
asID:                     269463
IP address blocks:        2804:6504:f000::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b7:74:62:48:00:1c:b6:00:91:5d:36:06:2b:b7:26:34:3f:5c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:34 2022 GMT
            Not After : Nov  2 18:43:34 2023 GMT
        Subject: CN=490050F0572A83A23947EC48958827544C5E9286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:1f:f7:56:d0:e4:d8:f1:dc:d1:d6:2c:d8:da:
                    45:61:9b:42:b5:1f:b0:9d:be:ce:e9:e7:c0:b8:fd:
                    2a:a7:1f:70:2b:51:61:2a:e5:4e:48:e3:e1:b7:91:
                    ec:3e:02:c5:be:41:45:dc:82:7f:c5:6d:00:97:ea:
                    5f:bd:c3:7a:53:a4:54:e0:65:20:8f:0f:e0:7f:46:
                    65:9d:4c:2e:ab:f0:ff:26:56:fd:22:95:91:87:d4:
                    10:67:01:58:10:e4:f6:d0:ed:25:7e:cb:95:68:ba:
                    01:4d:82:e8:ae:68:88:2e:19:13:35:47:17:ad:d6:
                    e6:17:1d:84:4b:72:ce:53:0c:7c:77:ec:be:c1:d6:
                    12:a0:7b:fd:d5:dc:53:23:60:cd:49:4f:20:4a:ea:
                    0f:9f:0a:36:05:43:f0:82:64:b8:fc:bb:f7:4e:07:
                    7d:04:1d:27:9b:2a:39:7c:d5:ec:97:f2:9c:39:2e:
                    92:d8:df:27:32:31:b1:d7:85:aa:9a:f9:79:d9:7b:
                    5b:38:3d:86:28:d4:13:8a:6a:16:67:19:d8:46:45:
                    e9:f5:cc:15:d5:28:b9:52:c8:b3:e8:27:d4:0a:0d:
                    ea:ba:87:ad:2d:ad:67:6b:bc:da:38:e4:e2:5a:0f:
                    4d:52:98:c6:be:0c:ff:1a:18:8b:a7:43:2c:7c:31:
                    82:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:00:50:F0:57:2A:83:A2:39:47:EC:48:95:88:27:54:4C:5E:92:86
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a663030303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:f000::/38

    Signature Algorithm: sha256WithRSAEncryption
         9d:8c:61:3f:20:44:ba:74:0d:09:74:aa:56:f9:d2:d6:98:7a:
         37:03:a4:06:05:a4:85:74:71:3d:b7:53:8e:14:c4:2c:29:06:
         94:4f:f2:8d:8f:3b:53:df:0b:ab:8f:d6:95:4b:88:46:1e:5f:
         9e:41:34:53:97:ac:10:12:d0:dd:d1:bd:05:a5:e9:0e:20:b2:
         cf:28:06:6e:cf:34:d1:7e:57:33:27:56:07:e8:a2:c8:3f:92:
         01:e4:7a:49:43:db:66:db:72:35:72:6e:5a:55:84:39:f2:44:
         db:20:35:53:62:d0:b1:7d:c1:32:6a:37:e9:6f:12:10:53:0e:
         57:1b:80:d6:1e:78:f9:d6:ca:c8:53:45:73:5e:72:53:4e:1c:
         39:d3:bb:ef:23:34:b6:15:78:4f:12:5f:10:e0:83:da:d8:f9:
         c7:61:86:50:be:57:7c:95:ba:55:62:cb:79:fa:b2:fb:a1:6c:
         24:93:ec:04:8e:07:da:4d:0c:b8:68:69:70:1d:c0:67:53:76:
         de:3a:1e:a6:a5:94:37:7c:74:fb:99:c5:7d:5b:43:5b:66:85:
         de:eb:fe:26:dd:02:c7:75:c4:88:57:8d:72:52:66:ec:76:90:
         8c:4b:80:10:f6:0b:89:df:8c:2a:3d:5a:b8:1d:09:a3:a7:a4:
         45:1d:82:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org