Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3130303a3a2f34302d3430203d3e20323638343330.roa
File:                     323830343a353131383a3130303a3a2f34302d3430203d3e20323638343330.roa (raw, json)
Hash identifier:          1uTtif3BZqm3qU8psL/Y0xkCZnPqvy+wJ0TYIrfD75o=
Subject key identifier:   B2:7C:CB:C5:6A:D1:22:6A:17:68:67:C6:D8:BC:C3:10:22:D7:89:44
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       6846CE761A564D8BFF40A7E0FD4599677DE68C42
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3130303a3a2f34302d3430203d3e20323638343330.roa
Signing time:             Wed 16 Nov 2022 14:23:57 +0000
ROA not before:           Wed 16 Nov 2022 14:18:57 +0000
ROA not after:            Wed 15 Nov 2023 14:23:57 +0000
asID:                     268430
IP address blocks:        2804:5118:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:46:ce:76:1a:56:4d:8b:ff:40:a7:e0:fd:45:99:67:7d:e6:8c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 16 14:18:57 2022 GMT
            Not After : Nov 15 14:23:57 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:16:c7:54:9a:5d:0a:91:67:5d:94:c9:df:
                    b3:85:88:9e:75:74:40:81:bc:73:a0:c5:95:be:2b:
                    c8:59:f8:b0:17:62:dd:83:5f:29:d5:7d:7c:df:9c:
                    8e:69:af:ab:d1:d2:e7:31:e3:53:4f:e7:d2:10:98:
                    b1:22:76:ab:2f:56:94:ff:e5:35:14:22:c7:a0:ee:
                    0d:66:b6:72:6a:30:69:05:fb:d4:dd:08:40:4e:c0:
                    ad:83:88:29:1b:62:27:ab:13:a4:de:1e:de:ea:94:
                    b4:3d:70:76:f1:80:6c:5d:cb:8b:73:22:cd:15:d3:
                    42:f8:4e:c7:96:e9:88:ca:1c:2d:34:70:c8:db:72:
                    c2:d0:a4:e2:78:24:36:94:c0:16:e3:05:c6:45:45:
                    50:5b:e7:79:77:0a:47:ee:79:7b:bd:dd:72:dd:66:
                    bf:f3:cb:fa:2f:af:da:9a:a8:6d:5a:21:46:67:14:
                    1e:97:78:f0:4b:89:1a:cd:95:4a:45:92:fb:a0:6b:
                    9c:91:f2:9b:26:90:f8:41:f1:90:65:8e:73:4f:8f:
                    ab:dc:57:1f:70:cf:dd:04:ae:6f:41:2a:6c:33:c7:
                    de:25:37:1e:2f:b2:71:4b:dc:f9:2e:62:2c:b8:3f:
                    85:0d:00:65:19:65:06:fd:27:99:d6:86:33:e7:04:
                    d9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7C:CB:C5:6A:D1:22:6A:17:68:67:C6:D8:BC:C3:10:22:D7:89:44
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3130303a3a2f34302d3430203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:c1:66:ba:20:3e:19:1d:4b:9d:90:91:8b:e5:e7:a6:f5:ad:
         30:d2:2a:d2:d1:0d:70:bd:33:32:db:ed:22:4b:fa:48:92:e4:
         5f:de:ff:63:b2:48:85:18:08:ea:aa:53:8b:af:1e:22:88:dc:
         b8:ba:2b:a2:9a:51:99:3f:47:a1:ac:12:a6:e2:32:39:2e:81:
         74:b5:2b:81:74:76:8e:f3:21:5e:af:4a:04:f5:f6:ee:39:68:
         91:dd:ce:ae:0c:09:4a:4d:8b:9a:f1:ce:1a:c4:29:e6:32:55:
         47:cb:88:e6:5f:8c:d6:db:40:d9:72:b5:12:3f:e8:70:b9:38:
         ca:7f:b3:f8:60:ac:32:a1:7e:b3:dd:8d:6a:76:3e:c2:b9:ea:
         50:49:bc:25:55:42:ce:14:93:79:bc:94:67:f0:cc:2e:a4:06:
         65:e8:b6:c6:9c:cc:5c:db:e8:93:36:d2:a0:df:68:31:97:12:
         b6:13:ee:bb:fa:c9:bc:c8:ce:f1:93:a4:3d:2b:83:95:75:8c:
         e7:e6:31:89:f2:01:29:15:a4:45:4e:3a:d0:51:7c:d9:81:5b:
         5c:0f:88:df:3b:8c:8e:1e:fc:28:19:a7:c8:90:e2:25:f0:a2:
         17:17:b5:41:c5:20:3c:39:a8:8a:1c:9e:aa:02:5a:14:c9:89:
         ac:fa:6c:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org