Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a316430303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a316430303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          bYfrW7DmEUbXrvyO3NLIosfH+DIXRgJM8whi3BYO3l0=
Subject key identifier:   56:4B:F3:12:B3:93:01:E7:B6:E3:9E:6F:58:A7:CE:00:5C:C2:12:06
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       50CEF2C5EB98476CD6498511FE6282E5F8D22AB6
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a316430303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 19:19:48 +0000
ROA not before:           Thu 17 Nov 2022 19:14:48 +0000
ROA not after:            Thu 16 Nov 2023 19:19:48 +0000
asID:                     268430
IP address blocks:        2804:5118:1d00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ce:f2:c5:eb:98:47:6c:d6:49:85:11:fe:62:82:e5:f8:d2:2a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 19:14:48 2022 GMT
            Not After : Nov 16 19:19:48 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:72:6b:97:73:69:7e:59:99:a8:04:b5:ef:7a:
                    b7:7b:a7:5f:7c:7a:6f:05:f7:f7:5a:d5:16:69:7a:
                    fb:0b:1d:83:c1:cd:aa:d9:f7:2d:8d:84:1b:40:62:
                    48:dd:62:54:cf:4f:57:b6:8b:f9:a7:bd:a5:60:0f:
                    d5:e9:36:06:d9:e2:6b:33:b4:80:00:79:56:06:19:
                    9f:b5:b8:de:04:f0:42:39:61:c7:9c:f6:21:2a:e1:
                    79:cf:0e:f0:1e:80:53:d0:ce:25:4c:7f:22:e1:11:
                    6c:2b:18:1c:b4:0b:a0:f2:4f:d8:bd:64:13:4a:a5:
                    a0:15:f7:1e:48:4b:83:38:73:9f:a5:77:b2:ec:fa:
                    d6:d2:ae:50:57:6a:12:ff:31:97:4b:b7:93:93:ed:
                    68:f4:e7:4a:00:05:66:20:26:ad:e1:eb:44:e7:fe:
                    be:e5:b1:40:bf:7c:83:bf:d8:b3:41:ac:6d:6b:57:
                    c4:8c:89:32:a5:b0:0c:10:32:52:10:e3:ab:3b:a4:
                    b8:16:30:d6:55:d8:c8:f1:db:05:2c:fc:7b:99:4c:
                    dd:e0:ec:5c:0b:db:8b:57:ae:99:d7:70:4e:48:83:
                    d1:f3:dc:a8:cf:a0:ee:11:d1:8e:98:d8:98:65:83:
                    cd:7a:cc:52:73:07:2a:33:87:1e:12:40:5c:e8:42:
                    63:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4B:F3:12:B3:93:01:E7:B6:E3:9E:6F:58:A7:CE:00:5C:C2:12:06
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a316430303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:1d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a9:49:dd:41:8c:70:b4:28:6c:5e:a2:1b:de:d5:cc:47:7f:6d:
         e4:6d:e3:6f:c8:ba:7d:38:fe:71:82:9d:1f:5e:78:b4:56:ae:
         1f:ef:8d:b3:c6:d6:3f:bc:1c:9c:42:b9:b7:f0:6b:19:a0:3b:
         f4:22:8a:94:5b:03:c1:82:ae:78:04:87:d7:a7:c8:8a:a7:9d:
         41:d8:d8:3c:d8:8c:0f:0f:b9:94:12:fe:3e:c6:87:c8:47:c7:
         92:96:a6:69:f1:1b:46:9e:f2:71:bb:90:f8:55:59:3a:4e:16:
         17:d7:23:e2:4c:77:e2:f1:57:d2:63:84:cf:23:85:fb:39:58:
         f6:4d:e5:e7:b5:d6:90:ac:8c:07:81:0d:e3:83:c2:4e:82:8c:
         01:f1:12:8c:37:99:0b:02:d1:d2:d9:db:07:5d:f8:85:ad:23:
         29:9d:52:db:8b:b5:0b:b7:fd:1a:fb:30:a2:5d:ea:12:ad:84:
         cf:a9:22:a6:ea:6d:b1:d9:b7:38:2b:65:b3:04:f7:88:9b:ea:
         91:8c:3b:75:93:02:92:6e:71:4b:07:7f:f9:e9:b6:3c:b3:84:
         d3:2a:3f:47:64:78:00:67:ef:e6:51:2e:8c:fd:ee:77:c7:83:
         bb:23:cd:18:c2:47:e8:f0:f0:92:d6:d1:58:d4:f3:e6:55:7c:
         77:c5:c4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org