Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a313830303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a313830303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          ZIFUzYW99RYVfsUY13u8XCKlOp0Xt6taxZGzFbGjhHg=
Subject key identifier:   66:7C:3D:E2:B0:5F:B2:F2:0A:50:FB:6E:46:78:1F:37:F7:93:4D:9E
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       41DFA5BEF0E6F01B6953890AC1911A7D0D50D409
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a313830303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 19:17:35 +0000
ROA not before:           Thu 17 Nov 2022 19:12:35 +0000
ROA not after:            Thu 16 Nov 2023 19:17:35 +0000
asID:                     268430
IP address blocks:        2804:5118:1800::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:df:a5:be:f0:e6:f0:1b:69:53:89:0a:c1:91:1a:7d:0d:50:d4:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 19:12:35 2022 GMT
            Not After : Nov 16 19:17:35 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:55:b7:25:a0:91:f1:03:8b:8d:80:a5:bb:13:
                    6d:aa:ff:94:a4:b7:fc:0b:8d:1d:fb:27:e3:d1:61:
                    33:47:56:74:1a:49:5e:c8:a4:9c:74:49:00:be:56:
                    90:13:21:df:ae:92:1e:6e:73:fc:4d:7e:39:a1:0b:
                    cc:d6:dd:26:a8:8a:1a:8a:62:13:2b:59:40:fa:e1:
                    fb:39:51:5a:b5:91:ff:3f:28:19:83:da:08:1a:b6:
                    b3:13:a7:69:0a:10:5f:02:aa:5b:90:41:d2:06:59:
                    9a:a5:ca:01:cf:6e:ae:dc:e6:8c:f6:1d:01:ac:82:
                    f4:75:87:60:23:70:5c:64:8a:50:b8:6d:9c:01:7a:
                    f8:bf:7f:13:91:7d:35:99:75:93:fa:43:88:82:0f:
                    5c:3b:ff:99:7d:24:e9:56:80:4a:6a:ba:d6:d3:de:
                    13:45:d1:76:bb:d9:41:d2:7e:16:1e:b2:f9:ee:db:
                    cb:13:08:8d:d2:48:a1:11:a5:61:3e:4a:88:94:1c:
                    52:ba:9f:fe:d4:7c:49:f4:ad:35:7f:4b:b2:1f:b2:
                    21:9f:f1:4b:80:8c:1c:f1:d0:bf:7e:1f:fc:f0:22:
                    bf:64:27:3d:4f:86:63:b2:4e:27:b5:d3:77:55:88:
                    ab:65:b3:c1:c0:70:9f:00:af:89:23:fc:72:15:d9:
                    91:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7C:3D:E2:B0:5F:B2:F2:0A:50:FB:6E:46:78:1F:37:F7:93:4D:9E
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a313830303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:1800::/40

    Signature Algorithm: sha256WithRSAEncryption
         50:cb:86:10:93:05:08:67:36:a7:8b:cc:f6:98:f6:81:1e:64:
         a4:b3:42:4b:74:58:36:db:30:31:28:00:dd:08:ae:71:1c:1d:
         c6:ae:37:bc:92:5e:3e:2a:b0:ed:bf:41:14:34:db:cd:ff:a6:
         71:bc:9c:5c:b3:02:8e:00:07:6d:4e:ce:a7:38:b8:cd:5e:3a:
         97:9c:c8:2d:be:1b:c9:a0:9f:b7:94:25:05:b5:1a:80:d2:52:
         19:c4:e3:bd:2c:9a:a5:00:b2:ba:f3:b8:5e:4c:8c:19:90:14:
         8b:1c:9f:7a:f5:9a:85:06:f3:be:44:6a:68:6a:80:34:e8:9e:
         c4:07:62:30:a2:a9:25:20:a8:68:04:df:4b:d5:f3:7a:44:14:
         cb:04:b7:2f:a3:7a:ba:33:f1:32:69:c0:6b:79:13:8b:bc:b1:
         3c:15:e1:a3:57:14:58:1e:c1:cc:a9:19:ae:e3:f9:1a:c1:f0:
         c5:a1:57:36:01:48:f3:2b:18:9c:44:d0:22:78:1b:62:87:50:
         05:b2:c4:51:aa:05:2d:b1:60:16:e0:21:97:fd:a5:fb:fd:c0:
         31:0f:1a:49:b6:e9:ee:85:38:41:a8:67:08:fd:83:41:ec:c2:
         2c:b0:ac:cd:85:88:e1:cf:1a:c5:59:4c:8b:29:47:76:47:f7:
         eb:84:a9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org