Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a313230303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a313230303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          u3b3iTviWAq8GxVIviDf+aIbVpTm1LPBKb+7jb42D1s=
Subject key identifier:   1A:8B:BD:B5:5C:9B:3D:FB:14:7D:D7:DD:75:F2:38:89:EC:19:3B:48
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       146FC1C2B07402A99F271842A8E1D50A8AE64867
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a313230303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 19:13:55 +0000
ROA not before:           Thu 17 Nov 2022 19:08:55 +0000
ROA not after:            Thu 16 Nov 2023 19:13:55 +0000
asID:                     268430
IP address blocks:        2804:5118:1200::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6f:c1:c2:b0:74:02:a9:9f:27:18:42:a8:e1:d5:0a:8a:e6:48:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 19:08:55 2022 GMT
            Not After : Nov 16 19:13:55 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c1:23:18:28:50:fb:1e:b4:e2:35:8f:50:d3:
                    3b:8e:36:bc:cc:83:61:63:1a:3a:b0:e4:b7:51:1d:
                    e0:52:6a:62:25:a3:0e:5c:7d:f8:01:8b:5b:1f:03:
                    70:bb:20:90:a7:09:fa:7b:16:52:57:83:c5:93:8f:
                    17:bc:e4:6c:f5:79:0f:6d:fb:22:38:1b:55:27:19:
                    46:83:82:b0:f7:94:16:d3:38:db:98:95:12:bc:d5:
                    cf:5e:df:75:db:f7:b7:41:0c:fe:54:4d:9d:7f:86:
                    ec:b8:04:6f:69:fd:ba:4b:e0:b8:1e:ed:59:c6:65:
                    9d:6e:6e:2b:67:bf:b2:3a:0b:31:0c:32:51:7a:c3:
                    2e:47:92:c6:8c:a1:87:7f:8c:7a:86:cc:fd:bf:fc:
                    19:60:e0:6c:8f:76:7d:8b:2d:2f:82:ac:1c:27:48:
                    5d:0f:e9:a0:3f:a0:33:be:3a:a5:61:7e:85:48:ac:
                    31:27:3c:6a:9a:42:94:70:7d:05:f1:67:7b:11:64:
                    ff:9e:95:1a:61:d8:59:99:97:66:d5:ec:27:ef:de:
                    ad:1b:f3:d2:59:36:71:e3:b9:73:a4:20:bd:69:68:
                    d7:33:4e:31:25:df:ae:79:60:3f:23:b6:1f:4d:1d:
                    6f:21:2b:65:66:d9:ac:f7:f4:ad:19:3c:d8:d8:a5:
                    d9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8B:BD:B5:5C:9B:3D:FB:14:7D:D7:DD:75:F2:38:89:EC:19:3B:48
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a313230303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         ad:0c:86:0c:e8:db:fe:45:cb:68:5c:04:05:54:4c:65:e5:98:
         52:4e:e5:22:e9:3e:be:85:d9:dd:ad:ff:6b:6e:99:c4:db:62:
         f0:6e:14:11:c9:00:3e:7c:59:99:dc:8f:a2:8b:cd:c7:1b:ac:
         ea:eb:64:d3:8c:3a:64:c2:01:3d:a7:fd:0c:f8:1f:6e:0b:39:
         37:01:91:20:c5:3b:7d:4c:d1:41:39:be:8e:5f:7e:99:e4:83:
         d1:17:6e:ef:aa:83:e4:2c:80:5e:75:bd:02:c8:46:73:a8:72:
         9f:5f:5c:56:8f:c9:77:05:3f:84:6f:ab:72:f5:b6:4b:82:dc:
         8d:5d:67:ed:c4:03:28:96:63:f7:15:b1:43:2d:14:4a:00:52:
         bd:6c:b2:37:77:f9:68:28:b8:a0:c7:e1:45:27:b1:28:83:26:
         4c:1f:73:b4:de:23:ec:5f:1f:77:b3:04:13:01:5e:21:b0:72:
         32:c1:0e:a3:fd:cd:58:2a:68:a0:b5:eb:cf:74:69:a0:ab:02:
         b3:22:d6:12:d7:70:57:e5:4f:ba:26:3f:37:e5:d0:cb:de:4f:
         1c:28:98:04:63:b1:f6:94:63:a4:66:36:e1:e0:bd:f2:14:10:
         1b:07:ac:04:e2:00:ad:38:04:eb:78:b6:92:d9:56:9e:06:98:
         8b:96:5b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org