Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a313130303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a313130303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          Zn9cUiUanCyhAsz8w0dBzSL8gr7L2JStkDtTwcyp6+I=
Subject key identifier:   23:E7:DD:C9:A4:72:A8:B0:20:BA:B6:A9:FF:DB:7B:0E:C6:BA:28:0C
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       6BA01FB0F2A473E0C4F92479333CD5F8E79FF357
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a313130303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 19:13:39 +0000
ROA not before:           Thu 17 Nov 2022 19:08:39 +0000
ROA not after:            Thu 16 Nov 2023 19:13:39 +0000
asID:                     268430
IP address blocks:        2804:5118:1100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a0:1f:b0:f2:a4:73:e0:c4:f9:24:79:33:3c:d5:f8:e7:9f:f3:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 19:08:39 2022 GMT
            Not After : Nov 16 19:13:39 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f6:f5:35:e1:1a:70:a1:78:a8:c7:77:61:08:
                    18:9c:79:ac:ad:0e:7c:7b:a7:f2:e9:5d:f7:93:8e:
                    c3:1a:7a:f3:4f:c3:48:fb:5c:3e:e6:1e:22:21:76:
                    c8:f5:02:e8:cb:4b:23:5c:9a:b8:da:5f:b8:15:64:
                    dd:50:f7:4f:35:30:d6:58:f6:c5:1a:66:4e:89:44:
                    c2:a8:c3:c5:bc:39:43:60:5c:44:a5:e0:8e:b0:7a:
                    c6:92:d0:7d:13:22:f7:0d:07:ad:9d:2d:b8:08:e6:
                    c6:9c:b4:1f:02:a2:b0:fc:eb:20:16:2c:c0:34:24:
                    e8:49:45:88:5b:44:2e:4d:ca:3f:19:56:4b:8a:70:
                    55:43:44:90:9f:64:e6:4f:d6:63:74:c0:ad:c9:4b:
                    76:d9:65:75:bc:dc:34:92:b6:a2:75:65:be:4c:d6:
                    c8:1c:5a:ec:53:6e:c8:a2:e5:40:0b:5b:77:20:4f:
                    5e:76:a9:2e:5e:83:ab:11:01:ff:1d:ab:67:7c:d4:
                    e4:b4:a3:e4:93:99:1b:a5:f7:91:74:8b:59:5b:7e:
                    9b:2e:83:19:cf:fe:cb:bb:70:bd:7a:9f:d2:c5:3f:
                    6e:3a:dc:cc:94:77:2a:f8:fb:33:f7:c6:42:ab:f3:
                    31:da:6f:99:53:16:3a:a0:a0:cb:78:f7:ec:04:8a:
                    ff:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E7:DD:C9:A4:72:A8:B0:20:BA:B6:A9:FF:DB:7B:0E:C6:BA:28:0C
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a313130303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         97:43:81:d3:07:7c:54:9b:8d:87:a4:d6:75:0d:5f:a4:13:2e:
         b2:8b:35:e7:4f:42:09:f3:73:6a:1c:39:d0:67:2b:ab:2c:37:
         23:a6:19:17:7a:75:a7:4b:1c:1f:dd:13:19:08:65:31:f4:12:
         ac:3c:61:9e:32:d9:3b:14:5e:2e:90:b2:c2:15:6e:a9:ac:17:
         b6:b4:d0:41:a5:a3:b3:a9:c9:f4:89:99:46:67:65:b5:63:17:
         0a:dc:46:bc:4e:55:e6:21:75:6a:46:af:98:71:92:98:a6:f3:
         b0:f1:eb:0e:a8:a8:e0:09:de:ab:3a:25:a3:ef:e0:bd:88:f8:
         88:5f:db:78:58:41:4e:51:45:65:6d:11:1b:34:dd:d8:72:50:
         c5:1c:1c:6a:f6:e2:ee:14:e8:09:83:22:1d:5b:a8:d8:d0:b4:
         93:01:39:99:09:c4:74:99:ab:63:5a:97:0d:58:58:6e:7b:a2:
         ae:f6:00:bb:cb:ee:83:f5:d4:9c:b5:71:9e:cd:d0:45:3a:0c:
         27:84:01:fc:79:c5:df:fd:08:63:aa:e9:08:96:d1:aa:fb:a4:
         08:c1:a1:48:b3:1b:51:09:b2:28:3a:3c:f5:18:f5:08:b6:44:
         ca:15:49:34:ee:7f:d6:37:2f:7e:6e:6f:7d:86:99:d0:f9:c1:
         f3:d2:f7:09
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUa6AfsPKkc+DE+SR5MzzV+Oef81cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUyODgwQzMwNEI1QTRENEYyNUFCMjdEMjVBQ0Q3RUI4
RTY5M0Q5MTAeFw0yMjExMTcxOTA4MzlaFw0yMzExMTYxOTEzMzlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjdGNkY1MzVFMTFBNzBBMTc4
QThDNzc3NjEwODE4OUM3OUFDQUQwRTdDN0JBN0YyRTk1REY3OTM4RUMzMUE3QUYz
NEZDMzQ4RkI1QzNFRTYxRTIyMjE3NkM4RjUwMkU4Q0I0QjIzNUM5QUI4REE1RkI4
MTU2NERENTBGNzRGMzUzMEQ2NThGNkM1MUE2NjRFODk0NEMyQThDM0M1QkMzOTQz
NjA1QzQ0QTVFMDhFQjA3QUM2OTJEMDdEMTMyMkY3MEQwN0FEOUQyREI4MDhFNkM2
OUNCNDFGMDJBMkIwRkNFQjIwMTYyQ0MwMzQyNEU4NDk0NTg4NUI0NDJFNERDQTNG
MTk1NjRCOEE3MDU1NDM0NDkwOUY2NEU2NEZENjYzNzRDMEFEQzk0Qjc2RDk2NTc1
QkNEQzM0OTJCNkEyNzU2NUJFNENENkM4MUM1QUVDNTM2RUM4QTJFNTQwMEI1Qjc3
MjA0RjVFNzZBOTJFNUU4M0FCMTEwMUZGMURBQjY3N0NENEU0QjRBM0U0OTM5OTFC
QTVGNzkxNzQ4QjU5NUI3RTlCMkU4MzE5Q0ZGRUNCQkI3MEJEN0E5RkQyQzUzRjZF
M0FEQ0NDOTQ3NzJBRjhGQjMzRjdDNjQyQUJGMzMxREE2Rjk5NTMxNjNBQTBBMENC
NzhGN0VDMDQ4QUZGMjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt/b1NeEacKF4qMd3YQgYnHmsrQ58e6fy6V33k47DGnrzT8NI+1w+
5h4iIXbI9QLoy0sjXJq42l+4FWTdUPdPNTDWWPbFGmZOiUTCqMPFvDlDYFxEpeCO
sHrGktB9EyL3DQetnS24CObGnLQfAqKw/OsgFizANCToSUWIW0QuTco/GVZLinBV
Q0SQn2TmT9ZjdMCtyUt22WV1vNw0kraidWW+TNbIHFrsU27IouVAC1t3IE9edqku
XoOrEQH/HatnfNTktKPkk5kbpfeRdItZW36bLoMZz/7Lu3C9ep/SxT9uOtzMlHcq
+Psz98ZCq/Mx2m+ZUxY6oKDLePfsBIr/JwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FCPn3cmkcqiwILq2qf/bew7GuigMMB8GA1UdIwQYMBaAFB4ogMMEtaTU8lqyfSWs
1+uOaT2RMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dHb2pDY2NaZzdBcEtB
eUdMTktBbmJ3M2NlWWszUTgxNWF0U0RhYzhpd2o3LzAvMUUyODgwQzMwNEI1QTRE
NEYyNUFCMjdEMjVBQ0Q3RUI4RTY5M0Q5MS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xRTI4ODBDMzA0QjVBNEQ0RjI1QUIyN0QyNUFDRDdFQjhFNjkz
RDkxLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HR29qQ2NjWmc3QXBLQXlHTE5L
QW5idzNjZVlrM1E4MTVhdFNEYWM4aXdqNy8wLzMyMzgzMDM0M2EzNTMxMzEzODNh
MzEzMTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM2MzgzNDMzMzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAoBFEYETANBgkqhkiG9w0BAQsFAAOCAQEAl0OB0wd8VJuNh6TWdQ1f
pBMusos1509CCfNzahw50Gcrqyw3I6YZF3p1p0scH90TGQhlMfQSrDxhnjLZOxRe
LpCywhVuqawXtrTQQaWjs6nJ9ImZRmdltWMXCtxGvE5V5iF1akavmHGSmKbzsPHr
Dqio4Aneqzolo+/gvYj4iF/beFhBTlFFZW0RGzTd2HJQxRwcavbi7hToCYMiHVuo
2NC0kwE5mQnEdJmrY1qXDVhYbnuirvYAu8vug/XUnLVxns3QRToMJ4QB/HnF3/0I
Y6rpCJbRqvukCMGhSLMbUQmyKDo89Rj1CLZEyhVJNO5/1jcvfm5vfYaZ0PnB89L3
CQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org