Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a313330303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a313330303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          qPgSOVEEuRMp571LR/SddX6uwZzucGjA337v6BQCRHY=
Subject key identifier:   50:F2:AB:2C:31:92:F3:20:03:23:82:15:B7:67:BC:84:4B:D4:23:D0
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       3D1CE211882AA403165490114C07A23552D03E1C
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a313330303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 19:14:48 +0000
ROA not before:           Thu 17 Nov 2022 19:09:48 +0000
ROA not after:            Thu 16 Nov 2023 19:14:48 +0000
asID:                     268430
IP address blocks:        2804:5118:1300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:1c:e2:11:88:2a:a4:03:16:54:90:11:4c:07:a2:35:52:d0:3e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 19:09:48 2022 GMT
            Not After : Nov 16 19:14:48 2023 GMT
        Subject: CN=3082010A0282010100BC9C7921A613A673EF90EDB817ED0D1137EDC5EB9A443F291C5C8A33CBB920F7EE77AD12B92B5FEDB0BE028E8C3CC1A004B44AA2D941244FBD2532274772D3C1F908FD839FD59FA748E89B81F09DDEB3155F629BA4BC775B0D35339AE330E1AAF57A3C855EA77F178E4ED9BAF12855372CB2B69FB80C3FDC478DF75C01059F408560667D6DE28588B165F506C111CE72215F4EA93B2D476BF17B3E59B7BEA89EFE74626615F0DBFB2AB31E12D5F39AB05A7472B90C92C693DB111729970CF10749046D87BAAA2B356B1B66E745AE4B6443811D43A2A1889267E98803E4C719EB108B0784DFA5BAA4CF6F8731BE6DF62C119A5C4C44E185C44DE2FEDE7CEF82A50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9c:79:21:a6:13:a6:73:ef:90:ed:b8:17:ed:
                    0d:11:37:ed:c5:eb:9a:44:3f:29:1c:5c:8a:33:cb:
                    b9:20:f7:ee:77:ad:12:b9:2b:5f:ed:b0:be:02:8e:
                    8c:3c:c1:a0:04:b4:4a:a2:d9:41:24:4f:bd:25:32:
                    27:47:72:d3:c1:f9:08:fd:83:9f:d5:9f:a7:48:e8:
                    9b:81:f0:9d:de:b3:15:5f:62:9b:a4:bc:77:5b:0d:
                    35:33:9a:e3:30:e1:aa:f5:7a:3c:85:5e:a7:7f:17:
                    8e:4e:d9:ba:f1:28:55:37:2c:b2:b6:9f:b8:0c:3f:
                    dc:47:8d:f7:5c:01:05:9f:40:85:60:66:7d:6d:e2:
                    85:88:b1:65:f5:06:c1:11:ce:72:21:5f:4e:a9:3b:
                    2d:47:6b:f1:7b:3e:59:b7:be:a8:9e:fe:74:62:66:
                    15:f0:db:fb:2a:b3:1e:12:d5:f3:9a:b0:5a:74:72:
                    b9:0c:92:c6:93:db:11:17:29:97:0c:f1:07:49:04:
                    6d:87:ba:aa:2b:35:6b:1b:66:e7:45:ae:4b:64:43:
                    81:1d:43:a2:a1:88:92:67:e9:88:03:e4:c7:19:eb:
                    10:8b:07:84:df:a5:ba:a4:cf:6f:87:31:be:6d:f6:
                    2c:11:9a:5c:4c:44:e1:85:c4:4d:e2:fe:de:7c:ef:
                    82:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F2:AB:2C:31:92:F3:20:03:23:82:15:B7:67:BC:84:4B:D4:23:D0
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a313330303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         ac:a1:7b:44:ec:28:ed:c2:3d:8e:8b:a0:a2:ef:d6:0f:74:6f:
         2a:75:e1:a0:32:45:ec:fc:ed:60:ed:53:1b:7e:2f:36:d0:5f:
         71:f0:2d:39:63:37:ef:8a:64:0e:fd:59:cf:b9:48:31:08:06:
         16:3d:80:1e:8d:54:3d:0f:e9:25:aa:76:be:ec:8c:ce:c3:3c:
         bd:33:20:93:4a:2e:5f:15:58:ef:52:76:74:08:e1:fd:63:7d:
         eb:43:c9:4e:90:27:ed:05:6b:e4:4b:1a:76:fc:63:31:c6:3e:
         ef:fe:3c:f1:ca:99:2a:a9:d9:89:25:a8:63:77:a7:19:09:d7:
         5c:96:ff:18:81:17:ab:e6:e8:77:5a:85:ef:6e:d8:1a:d9:d0:
         8a:3c:5b:6c:1b:45:12:ec:37:b4:11:e9:53:5b:f9:62:e9:3c:
         26:a0:89:70:e0:c6:56:d6:42:b5:15:bb:fe:96:10:52:95:95:
         78:7f:cc:94:7b:55:25:12:82:5c:67:91:cd:44:30:3a:2a:ad:
         ad:79:c3:93:10:15:54:36:ac:a0:5b:02:d7:b8:44:2b:89:d4:
         82:18:83:3b:6e:6b:b6:9a:fe:7c:74:43:24:c1:19:7e:6a:7a:
         8c:be:06:d7:41:a3:dd:4d:4e:3d:e6:de:07:50:12:ca:ac:8f:
         7a:5e:b4:4f
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUPRziEYgqpAMWVJARTAeiNVLQPhwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUyODgwQzMwNEI1QTRENEYyNUFCMjdEMjVBQ0Q3RUI4
RTY5M0Q5MTAeFw0yMjExMTcxOTA5NDhaFw0yMzExMTYxOTE0NDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkM5Qzc5MjFBNjEzQTY3M0VG
OTBFREI4MTdFRDBEMTEzN0VEQzVFQjlBNDQzRjI5MUM1QzhBMzNDQkI5MjBGN0VF
NzdBRDEyQjkyQjVGRURCMEJFMDI4RThDM0NDMUEwMDRCNDRBQTJEOTQxMjQ0RkJE
MjUzMjI3NDc3MkQzQzFGOTA4RkQ4MzlGRDU5RkE3NDhFODlCODFGMDlEREVCMzE1
NUY2MjlCQTRCQzc3NUIwRDM1MzM5QUUzMzBFMUFBRjU3QTNDODU1RUE3N0YxNzhF
NEVEOUJBRjEyODU1MzcyQ0IyQjY5RkI4MEMzRkRDNDc4REY3NUMwMTA1OUY0MDg1
NjA2NjdENkRFMjg1ODhCMTY1RjUwNkMxMTFDRTcyMjE1RjRFQTkzQjJENDc2QkYx
N0IzRTU5QjdCRUE4OUVGRTc0NjI2NjE1RjBEQkZCMkFCMzFFMTJENUYzOUFCMDVB
NzQ3MkI5MEM5MkM2OTNEQjExMTcyOTk3MENGMTA3NDkwNDZEODdCQUFBMkIzNTZC
MUI2NkU3NDVBRTRCNjQ0MzgxMUQ0M0EyQTE4ODkyNjdFOTg4MDNFNEM3MTlFQjEw
OEIwNzg0REZBNUJBQTRDRjZGODczMUJFNkRGNjJDMTE5QTVDNEM0NEUxODVDNDRE
RTJGRURFN0NFRjgyQTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvJx5IaYTpnPvkO24F+0NETftxeuaRD8pHFyKM8u5IPfud60SuStf
7bC+Ao6MPMGgBLRKotlBJE+9JTInR3LTwfkI/YOf1Z+nSOibgfCd3rMVX2KbpLx3
Ww01M5rjMOGq9Xo8hV6nfxeOTtm68ShVNyyytp+4DD/cR433XAEFn0CFYGZ9beKF
iLFl9QbBEc5yIV9OqTstR2vxez5Zt76onv50YmYV8Nv7KrMeEtXzmrBadHK5DJLG
k9sRFymXDPEHSQRth7qqKzVrG2bnRa5LZEOBHUOioYiSZ+mIA+THGesQiweE36W6
pM9vhzG+bfYsEZpcTEThhcRN4v7efO+CpQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FFDyqywxkvMgAyOCFbdnvIRL1CPQMB8GA1UdIwQYMBaAFB4ogMMEtaTU8lqyfSWs
1+uOaT2RMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dHb2pDY2NaZzdBcEtB
eUdMTktBbmJ3M2NlWWszUTgxNWF0U0RhYzhpd2o3LzAvMUUyODgwQzMwNEI1QTRE
NEYyNUFCMjdEMjVBQ0Q3RUI4RTY5M0Q5MS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xRTI4ODBDMzA0QjVBNEQ0RjI1QUIyN0QyNUFDRDdFQjhFNjkz
RDkxLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HR29qQ2NjWmc3QXBLQXlHTE5L
QW5idzNjZVlrM1E4MTVhdFNEYWM4aXdqNy8wLzMyMzgzMDM0M2EzNTMxMzEzODNh
MzEzMzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM2MzgzNDMzMzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAoBFEYEzANBgkqhkiG9w0BAQsFAAOCAQEArKF7ROwo7cI9jougou/W
D3RvKnXhoDJF7PztYO1TG34vNtBfcfAtOWM374pkDv1Zz7lIMQgGFj2AHo1UPQ/p
Jap2vuyMzsM8vTMgk0ouXxVY71J2dAjh/WN960PJTpAn7QVr5EsadvxjMcY+7/48
8cqZKqnZiSWoY3enGQnXXJb/GIEXq+bod1qF727YGtnQijxbbBtFEuw3tBHpU1v5
Yuk8JqCJcODGVtZCtRW7/pYQUpWVeH/MlHtVJRKCXGeRzUQwOiqtrXnDkxAVVDas
oFsC17hEK4nUghiDO25rtpr+fHRDJMEZfmp6jL4G10Gj3U1OPebeB1ASyqyPel60
Tw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org