Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a663430303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a663430303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          RGUOsnB8sIrAiN/YfFAiib03l7ND8t2iePpOHG7QEGY=
Subject key identifier:   28:1D:F9:66:3E:0A:C1:70:F3:F1:16:40:99:38:6B:ED:51:D8:A8:D2
Certificate issuer:       /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial:       5C872810334E137E344842B6BE578E78E001C089
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a663430303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Thu 03 Nov 2022 18:43:30 +0000
ROA not before:           Thu 03 Nov 2022 18:38:30 +0000
ROA not after:            Thu 02 Nov 2023 18:43:30 +0000
asID:                     269463
IP address blocks:        2804:6504:f400::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:87:28:10:33:4e:13:7e:34:48:42:b6:be:57:8e:78:e0:01:c0:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Validity
            Not Before: Nov  3 18:38:30 2022 GMT
            Not After : Nov  2 18:43:30 2023 GMT
        Subject: CN=281DF9663E0AC170F3F1164099386BED51D8A8D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9f:90:21:97:00:ca:00:67:84:8d:66:83:57:
                    b4:f1:90:59:01:34:b8:a4:53:39:1e:cd:e3:3b:03:
                    10:d6:63:b7:90:26:f3:2f:62:e1:85:2a:3a:f5:2a:
                    84:be:9a:41:bf:36:22:67:7e:77:70:be:f8:39:c4:
                    6c:08:b3:88:90:5f:61:af:83:d9:dc:f0:d4:20:5b:
                    c7:e9:ac:8f:4e:55:03:64:e0:31:75:85:78:71:c4:
                    b7:15:fd:70:73:a4:65:55:bb:7e:3e:1f:db:9c:37:
                    fa:1a:dd:90:93:c2:ab:a6:75:17:ef:26:0b:46:50:
                    d2:fc:5e:bd:dd:37:92:d7:ca:44:a7:00:68:78:7d:
                    c1:da:ae:43:23:5c:fa:96:b7:cc:b8:1c:9c:20:8b:
                    55:2e:8f:5e:ee:db:a2:46:2e:ac:5b:26:38:98:8f:
                    26:36:09:c9:08:ca:0e:c8:65:00:ee:59:26:ce:a6:
                    31:f3:1a:54:e7:b3:c2:ef:43:03:1f:4b:10:77:27:
                    8a:e7:26:cc:20:bf:86:45:0a:df:ae:1b:26:dd:c0:
                    bb:af:1f:44:f1:ce:6b:a1:24:f2:a6:73:de:1c:df:
                    aa:01:02:8e:73:94:93:6f:4d:d2:2b:85:a9:3d:a9:
                    37:1d:c5:98:20:a7:1a:cc:ca:c7:b8:54:c1:18:7e:
                    6d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1D:F9:66:3E:0A:C1:70:F3:F1:16:40:99:38:6B:ED:51:D8:A8:D2
            X509v3 Authority Key Identifier:
                keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a663430303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:f400::/38

    Signature Algorithm: sha256WithRSAEncryption
         ad:c6:75:aa:ff:e6:4f:e2:80:83:6d:2f:92:78:69:1c:7a:86:
         d5:7a:8c:7e:9a:a6:0d:72:d8:59:71:a4:50:6e:b1:72:bd:19:
         7d:68:57:0d:1b:26:60:d6:ad:da:ed:fc:41:c0:7d:a0:c1:a9:
         95:40:9e:4f:30:4e:bc:da:cd:02:e3:17:79:51:45:3c:2e:94:
         7e:d3:d0:3f:bc:e4:68:87:67:36:55:49:09:46:35:72:f6:c7:
         80:2f:33:c0:3a:d4:66:7e:6a:ae:4c:38:a7:1b:8e:9d:ca:23:
         56:43:ab:59:c8:24:36:4b:cc:d6:48:f5:7f:88:e1:ab:dc:4f:
         68:58:39:1d:00:9d:f8:4a:29:bb:78:09:75:c8:e1:99:e9:0e:
         c4:cb:44:6c:77:43:a7:66:ca:44:3c:a5:25:18:26:7e:d8:ec:
         e0:1d:af:94:de:4e:01:17:b3:61:06:38:18:97:2f:12:1b:17:
         40:f0:7a:6e:e4:3e:b4:9c:ff:67:60:08:16:c6:de:97:34:d9:
         77:fd:3e:e2:e9:85:1e:5a:d5:4b:d8:9d:32:b8:6b:65:a5:bc:
         13:4d:d3:c8:ff:13:04:82:3e:6e:bc:ae:76:2e:d5:41:a5:54:
         40:ed:28:b1:66:f9:80:ce:dc:6e:12:32:7e:c9:46:e0:11:2e:
         9a:28:36:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org