Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3130303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a3130303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          d85MKO9YHtY8cKcEhAavH6/i3ueSJgECDywlEgPJluE=
Subject key identifier:   FC:4C:82:B4:30:51:D6:E5:9C:67:DB:6D:A5:37:39:E9:54:C3:62:F7
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       3767A4CD664CD2F6E23528813D324E6184E32557
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3130303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 18:50:44 +0000
ROA not before:           Thu 17 Nov 2022 18:45:44 +0000
ROA not after:            Thu 16 Nov 2023 18:50:44 +0000
asID:                     268430
IP address blocks:        2804:5118:100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:67:a4:cd:66:4c:d2:f6:e2:35:28:81:3d:32:4e:61:84:e3:25:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 18:45:44 2022 GMT
            Not After : Nov 16 18:50:44 2023 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:38:a6:f8:2c:45:78:9d:d5:d2:25:96:52:3c:
                    3d:ee:7e:1a:f0:68:e4:91:3e:68:a6:aa:2c:8f:33:
                    9d:83:5b:b2:e6:70:b4:5c:7d:e5:aa:26:97:63:49:
                    43:58:0d:e0:0c:3b:e0:70:24:f8:66:b3:a5:ce:3c:
                    7c:ed:88:35:9e:c0:57:5b:b3:0d:9c:55:b8:5c:4d:
                    4d:d1:a7:ce:df:60:9e:50:df:96:9f:06:72:31:30:
                    9f:20:23:0e:34:3d:9b:8d:ff:74:90:b6:f1:ca:a0:
                    f2:36:cc:3b:4c:e8:b2:57:82:59:6d:d3:12:88:50:
                    a7:08:a5:a1:e9:ea:bc:89:9e:05:18:ca:36:9c:09:
                    04:f5:e4:ab:43:14:be:ab:36:de:5b:34:1c:50:41:
                    de:aa:3d:f3:7e:cf:64:92:ac:47:60:df:07:29:1a:
                    75:8c:03:38:33:c1:a9:e7:cf:63:be:b9:31:c7:4f:
                    ce:2b:1c:a8:50:c2:eb:5a:50:31:45:37:18:fc:7d:
                    34:97:28:40:74:21:0b:5b:7f:c1:07:6c:e9:8c:1b:
                    78:3d:d0:71:79:f3:56:07:4a:fa:6d:69:6b:e5:90:
                    01:d4:0c:ef:31:2a:c2:b5:1b:29:16:fa:b1:a3:74:
                    1b:41:55:31:84:20:61:73:34:84:4b:25:ec:dd:f8:
                    bb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4C:82:B4:30:51:D6:E5:9C:67:DB:6D:A5:37:39:E9:54:C3:62:F7
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3130303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         84:7a:7e:89:7d:6c:d1:7a:6f:fa:fe:a8:5a:fc:42:e8:1f:db:
         31:67:c5:03:69:81:e5:1e:9a:99:79:2f:8e:a8:f7:d9:eb:55:
         3e:9b:0d:81:86:41:00:63:27:3c:f4:f0:0e:eb:d1:2a:9f:6b:
         c7:54:4b:b6:a4:88:df:c7:05:9d:1f:9f:80:2c:b9:a8:5f:ce:
         d5:fd:65:2f:ea:7b:93:48:68:8e:39:59:ca:d4:4b:b9:1f:84:
         a4:74:e4:21:97:e6:0d:0c:88:0c:7e:2b:88:95:08:8c:46:89:
         76:99:eb:47:49:fe:bb:8f:03:77:25:18:22:ee:4c:96:a3:57:
         ad:7d:83:cd:82:eb:5e:72:bc:7e:c4:b1:a4:31:1d:8d:9e:56:
         b1:78:96:78:95:34:d9:46:7a:d4:02:1c:85:e7:bc:19:fe:c2:
         99:11:c2:55:da:77:34:fc:e4:39:46:fc:b1:8b:09:67:09:e8:
         19:d0:1c:a8:11:c4:8c:75:04:ae:84:a3:15:bd:05:e0:1a:cc:
         c5:f6:3d:ea:f5:c5:9c:fd:c1:3a:38:fd:04:e0:35:3e:1c:0f:
         94:ca:98:0c:6b:6d:06:13:b5:4d:24:76:99:87:48:5d:a1:76:
         50:b4:f7:cc:dd:56:57:c9:b0:a9:3f:9b:c5:c2:30:ef:e2:5c:
         1e:a8:42:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org