Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a316230303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a316230303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          9onwFe8wxTKRJzA+60vFvGXyV38U84J4Svdo74YYc8w=
Subject key identifier:   87:24:02:19:A0:5B:B1:4A:3B:97:1B:61:75:1E:F4:BC:7C:1F:20:2D
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       3AD8DDF6E260EE7F566D8FB8D3582BB8015502DA
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a316230303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 19:18:59 +0000
ROA not before:           Thu 17 Nov 2022 19:13:59 +0000
ROA not after:            Thu 16 Nov 2023 19:18:59 +0000
asID:                     268430
IP address blocks:        2804:5118:1b00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d8:dd:f6:e2:60:ee:7f:56:6d:8f:b8:d3:58:2b:b8:01:55:02:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 19:13:59 2022 GMT
            Not After : Nov 16 19:18:59 2023 GMT
        Subject: CN=3082010A0282010100BBF65931904C38F3E6248193A8882DA9E45027CA5B4371B4E3DFDDEB1EF5DAA7014B65BCCC5498DBE63CB9AC2AB2A8C334D3582A251DCDECD4C193484AEA45ADB34E2F71EBA29E3793206882D1BE994CF0386511EA0EB5A23FB653FC41FB3A9476446E1A48141E9DF82D73713B766BAC7BD48378A9AA30B1E565DEA6F0D13D72C6A153AFE7CAF8D19FFE9D9E59B5824EE11B8561B58D3CE1064DB172150883CCA35310B6560037A8F94F42F797341EB4B437CA8DA3F2DCD393F767ACEA0F762AECBFD5A257EAA583727267C3E84E073276C06024FEABE6A305F746604FD1AAD1A76EE56313C28899116559F3D99FAAE56683B62C5CD6BDBB14832C036061A34F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:59:31:90:4c:38:f3:e6:24:81:93:a8:88:
                    2d:a9:e4:50:27:ca:5b:43:71:b4:e3:df:dd:eb:1e:
                    f5:da:a7:01:4b:65:bc:cc:54:98:db:e6:3c:b9:ac:
                    2a:b2:a8:c3:34:d3:58:2a:25:1d:cd:ec:d4:c1:93:
                    48:4a:ea:45:ad:b3:4e:2f:71:eb:a2:9e:37:93:20:
                    68:82:d1:be:99:4c:f0:38:65:11:ea:0e:b5:a2:3f:
                    b6:53:fc:41:fb:3a:94:76:44:6e:1a:48:14:1e:9d:
                    f8:2d:73:71:3b:76:6b:ac:7b:d4:83:78:a9:aa:30:
                    b1:e5:65:de:a6:f0:d1:3d:72:c6:a1:53:af:e7:ca:
                    f8:d1:9f:fe:9d:9e:59:b5:82:4e:e1:1b:85:61:b5:
                    8d:3c:e1:06:4d:b1:72:15:08:83:cc:a3:53:10:b6:
                    56:00:37:a8:f9:4f:42:f7:97:34:1e:b4:b4:37:ca:
                    8d:a3:f2:dc:d3:93:f7:67:ac:ea:0f:76:2a:ec:bf:
                    d5:a2:57:ea:a5:83:72:72:67:c3:e8:4e:07:32:76:
                    c0:60:24:fe:ab:e6:a3:05:f7:46:60:4f:d1:aa:d1:
                    a7:6e:e5:63:13:c2:88:99:11:65:59:f3:d9:9f:aa:
                    e5:66:83:b6:2c:5c:d6:bd:bb:14:83:2c:03:60:61:
                    a3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:24:02:19:A0:5B:B1:4A:3B:97:1B:61:75:1E:F4:BC:7C:1F:20:2D
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a316230303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:1b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         07:46:d3:e8:30:3c:27:09:15:85:24:c0:11:cc:d3:f7:57:55:
         2c:16:46:18:99:0f:63:9f:9c:ea:4e:73:83:7d:b6:66:2b:76:
         d6:75:16:f5:f8:33:10:11:7e:ea:a9:ab:74:89:91:fe:c4:37:
         69:49:ef:16:cf:6d:86:ef:87:44:4b:98:6e:ab:1c:19:77:36:
         23:8b:d7:3a:bc:06:79:f2:5e:4e:4a:b5:14:3f:77:4b:8d:fe:
         9f:05:3e:1b:df:d4:84:ed:46:5a:37:c1:7a:18:97:8f:bc:9d:
         4d:fd:a8:1a:63:6f:9c:02:52:f6:d2:44:e3:27:4f:33:31:ec:
         82:c4:00:f2:12:d1:4a:c7:06:08:b2:91:0b:82:63:a6:5e:e5:
         31:83:81:81:38:44:b7:f5:94:c0:0b:4f:e9:cd:f2:6c:fd:b9:
         60:12:09:51:f9:d4:3e:43:93:4d:44:cf:42:c7:b5:1a:88:cc:
         f8:64:5a:62:48:d9:26:44:86:28:36:c6:49:c4:85:4e:99:30:
         e1:f3:93:54:1f:6d:16:e8:cd:b0:03:0a:3e:b7:00:13:6a:4b:
         06:66:7c:e7:21:9b:19:2f:a4:cb:4e:29:46:09:d7:ba:d8:33:
         76:90:49:5a:81:9f:5c:b2:d2:c8:34:b0:75:f2:47:8f:33:c0:
         cd:30:34:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org