Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a316530303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a316530303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          fF6b9ighPD72RSLGgxS0chTktqea4dvaD6LtR4hPT2c=
Subject key identifier:   9B:77:CF:F2:1D:6D:DA:69:01:90:02:E3:7D:01:87:9E:B3:C3:83:F6
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       6E17DA99EE25337EB567DC22363198B7D58ABB25
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a316530303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 19:20:14 +0000
ROA not before:           Thu 17 Nov 2022 19:15:14 +0000
ROA not after:            Thu 16 Nov 2023 19:20:14 +0000
asID:                     268430
IP address blocks:        2804:5118:1e00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:17:da:99:ee:25:33:7e:b5:67:dc:22:36:31:98:b7:d5:8a:bb:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 19:15:14 2022 GMT
            Not After : Nov 16 19:20:14 2023 GMT
        Subject: CN=3082010A0282010100C49158FE1205557C851BCBEE6CF63D4C9A2BFBEB25CE1FDB0F51292DF2BD9322D3A62D1AF903150D3BAC7B3FE0D914736058BC60AFFA4B6ABC2B009345F93D9EA14CCA09FF7E91E759319FCB70A3B4D78188261011A9C269D979FD6104AA88B8113A1CE6F71E11EB492F67C06261872D0318949A95B6347AD2EEAA25BF1EED1488895DA817C23097CFA6130F73C9B03970CEB37430A2AF53256C0EFF7D7F008D3D90E19E3D39BF9CB1A4CBF92E89BA7F3D135421C36A3A1525C16D3597350C9FCC8978EDF9DC45CB32222F0096A85D3CF5141E3EF5BA610904ECCE554C2209FD42F49F06E8E052980507381380DFEC4BEFF4AF2ECCC1353C426B7B43AB2372750203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:91:58:fe:12:05:55:7c:85:1b:cb:ee:6c:f6:
                    3d:4c:9a:2b:fb:eb:25:ce:1f:db:0f:51:29:2d:f2:
                    bd:93:22:d3:a6:2d:1a:f9:03:15:0d:3b:ac:7b:3f:
                    e0:d9:14:73:60:58:bc:60:af:fa:4b:6a:bc:2b:00:
                    93:45:f9:3d:9e:a1:4c:ca:09:ff:7e:91:e7:59:31:
                    9f:cb:70:a3:b4:d7:81:88:26:10:11:a9:c2:69:d9:
                    79:fd:61:04:aa:88:b8:11:3a:1c:e6:f7:1e:11:eb:
                    49:2f:67:c0:62:61:87:2d:03:18:94:9a:95:b6:34:
                    7a:d2:ee:aa:25:bf:1e:ed:14:88:89:5d:a8:17:c2:
                    30:97:cf:a6:13:0f:73:c9:b0:39:70:ce:b3:74:30:
                    a2:af:53:25:6c:0e:ff:7d:7f:00:8d:3d:90:e1:9e:
                    3d:39:bf:9c:b1:a4:cb:f9:2e:89:ba:7f:3d:13:54:
                    21:c3:6a:3a:15:25:c1:6d:35:97:35:0c:9f:cc:89:
                    78:ed:f9:dc:45:cb:32:22:2f:00:96:a8:5d:3c:f5:
                    14:1e:3e:f5:ba:61:09:04:ec:ce:55:4c:22:09:fd:
                    42:f4:9f:06:e8:e0:52:98:05:07:38:13:80:df:ec:
                    4b:ef:f4:af:2e:cc:c1:35:3c:42:6b:7b:43:ab:23:
                    72:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:77:CF:F2:1D:6D:DA:69:01:90:02:E3:7D:01:87:9E:B3:C3:83:F6
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a316530303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:1e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:7b:3b:b4:a1:38:c3:18:85:13:8c:f5:a1:74:ff:1d:73:1a:
         99:47:27:ee:5b:20:fe:20:7b:ed:4b:64:81:58:c3:50:5a:60:
         ed:bc:fe:cb:00:01:79:2c:fb:cd:31:b0:3b:d7:c6:dc:28:1b:
         69:8d:29:e9:d9:d9:f9:34:4c:0e:f2:45:6e:b4:e8:c2:94:56:
         c6:51:fc:bf:58:dc:27:e0:d2:85:25:8b:3c:46:9f:30:33:86:
         e0:3e:08:00:9a:81:eb:f5:ac:64:aa:f6:82:04:68:f9:c1:ad:
         a6:31:05:31:a5:90:9d:b8:ce:d2:ec:b3:cc:ab:2b:9e:e2:18:
         2b:44:cf:fb:c8:3f:b7:cf:37:71:a7:76:5c:a5:58:a5:06:9a:
         5a:60:ac:95:20:bf:63:71:4f:ed:7d:82:d2:14:b8:ea:cd:49:
         00:0e:9e:26:7d:d0:9b:0b:de:cb:d1:3c:ec:76:3a:cc:90:42:
         e3:ff:0c:24:4f:7a:7e:a1:ad:63:47:6c:2d:26:39:eb:27:3e:
         c2:03:cf:73:30:64:7b:e8:e1:55:bd:28:d3:c2:42:2b:14:e7:
         08:26:ae:2c:9c:1d:60:48:2a:b9:04:81:2f:e2:a9:65:c6:de:
         d1:15:55:bd:68:6d:8d:77:1d:b8:94:8c:4c:7a:b0:cf:0b:63:
         b0:df:e9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org