Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a313530303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a313530303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          7ug79W749lTtURL/MDRq+avhStK3areXoCocPpXiwps=
Subject key identifier:   78:99:5F:56:10:B6:E0:76:8C:A2:39:15:4E:99:DA:21:D6:BA:8E:19
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       53E3240609087253FC7A6AFB81AE44F5AAE5D9C1
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a313530303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 19:16:08 +0000
ROA not before:           Thu 17 Nov 2022 19:11:08 +0000
ROA not after:            Thu 16 Nov 2023 19:16:08 +0000
asID:                     268430
IP address blocks:        2804:5118:1500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e3:24:06:09:08:72:53:fc:7a:6a:fb:81:ae:44:f5:aa:e5:d9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 19:11:08 2022 GMT
            Not After : Nov 16 19:16:08 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4d:76:dd:c2:94:02:b6:0f:d7:84:86:c0:42:
                    11:26:15:b9:98:8c:69:8d:77:26:ca:97:12:64:a7:
                    9c:c8:52:fe:2f:f0:be:92:36:e1:1a:cb:6d:5e:d8:
                    c5:0c:79:39:3d:38:16:f7:4a:71:4d:b1:bd:ea:12:
                    89:c6:60:85:2d:2b:85:97:40:a6:6c:34:f1:62:b9:
                    3e:89:ab:e3:35:ec:1b:73:30:39:c4:a7:30:96:22:
                    26:ee:e9:bf:c7:4a:81:e6:67:2d:a4:d8:14:05:3e:
                    20:a2:0b:7c:68:f1:44:09:8a:91:f3:5d:20:32:1e:
                    af:da:1b:b6:0e:05:ab:58:47:4a:f0:34:43:b7:bf:
                    c6:97:83:58:b8:92:3b:e0:f6:43:75:d1:47:42:90:
                    7a:7b:c6:87:fc:9d:69:ef:29:16:5d:71:d3:5b:50:
                    1c:39:96:3f:b2:54:31:08:14:b8:7b:4f:94:9c:21:
                    5d:13:f0:5e:d1:32:da:fe:25:4b:34:46:24:2f:fe:
                    a5:b8:ef:38:6e:33:6c:bd:5d:40:3e:77:02:04:c9:
                    60:24:80:a4:7a:f3:ca:32:15:a5:66:fb:9b:0d:fa:
                    57:0f:94:a0:bd:be:f1:6e:ce:60:16:99:56:de:67:
                    05:3e:ab:39:38:db:8b:28:5b:12:66:9b:f3:12:d6:
                    c1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:99:5F:56:10:B6:E0:76:8C:A2:39:15:4E:99:DA:21:D6:BA:8E:19
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a313530303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:1500::/40

    Signature Algorithm: sha256WithRSAEncryption
         57:c9:72:3a:21:8f:4c:ac:57:b6:f8:df:fb:0e:d4:71:e4:67:
         bd:60:f8:38:02:e3:55:e3:bf:35:db:59:c2:2b:07:d8:d4:34:
         99:66:41:ec:98:7d:1c:ce:20:54:7d:4c:df:c5:7d:a9:0e:1c:
         e8:dd:bc:ec:ee:a6:7e:71:f9:e7:93:f6:cb:31:df:14:de:77:
         1d:e9:92:e5:76:7b:bf:37:a4:e4:bc:d6:b1:9b:c2:9f:bf:25:
         f2:92:7a:1c:67:38:64:82:b2:1e:23:f0:b2:db:06:c1:6a:d3:
         4d:e7:ac:94:2c:f1:fe:35:fc:ac:aa:81:b4:38:41:d9:94:d1:
         88:84:69:89:fb:cc:a5:74:48:15:06:34:56:31:98:81:8d:0b:
         4a:05:11:12:4a:e3:e8:e3:d5:8a:9d:2f:6d:46:7e:87:77:b8:
         62:5e:7b:4c:90:63:63:69:7d:a8:4a:42:44:16:0e:de:7a:10:
         de:89:ce:d1:bf:dd:a5:9b:f7:d1:a0:80:f0:4c:9e:54:de:d2:
         33:c1:f5:c2:9a:de:f6:9f:f5:72:ba:93:96:7b:7f:2b:77:ae:
         e3:f1:78:ae:0c:a4:e9:9b:50:f9:90:25:8f:7e:43:45:e6:98:
         af:99:35:e0:1c:98:39:88:84:ce:bb:f6:5e:3b:8a:b9:ac:df:
         13:33:b6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org