Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a316630303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a316630303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          ilPPKD32Q5xfX1GvyUYaKCyTrKc831p1tzqewlwdI7I=
Subject key identifier:   C0:13:6A:CC:5C:BF:E8:30:63:10:9F:FF:EE:E2:F2:A0:91:E2:99:ED
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       563EEEEC1C81F4894C1ED4752F88DBBF0FA81021
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a316630303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 19:20:38 +0000
ROA not before:           Thu 17 Nov 2022 19:15:38 +0000
ROA not after:            Thu 16 Nov 2023 19:20:38 +0000
asID:                     268430
IP address blocks:        2804:5118:1f00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:3e:ee:ec:1c:81:f4:89:4c:1e:d4:75:2f:88:db:bf:0f:a8:10:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 19:15:38 2022 GMT
            Not After : Nov 16 19:20:38 2023 GMT
        Subject: CN=3082010A0282010100E19EAA420A27AF52802A51B5A0AC5C071B1085DB31ECE8B2944E7A98D53D22F97B5344CD9980661277FA771E8D6B3CA3131A63157C5350BE1608B2B45699969D71921F8BDD9E792F199054DDE33BD152564455F27FB2C530BF0B696B47CE196754166C9C26DD6FD43A1B3E0A5E800D8415753E259CA043A3F7497723F62B012E5C5745C9587F3ADB82FCD12DF77CBFD397594F0C7D8397E5E84F4EA7131AA85E9078B5EBE483FD6D4DDE275D2B0DB4CCD1B00D77AA75E3274F275270607E818671E0FC32445C868B08E8C54AD7E097B5DB1616DF2D28E7F5BD416CF46A1DE61E45A17ADFB4F9A5F35F4D5BD88F4C8E9AEE9328650B9A9ABA450B1B19EB6FCE0F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9e:aa:42:0a:27:af:52:80:2a:51:b5:a0:ac:
                    5c:07:1b:10:85:db:31:ec:e8:b2:94:4e:7a:98:d5:
                    3d:22:f9:7b:53:44:cd:99:80:66:12:77:fa:77:1e:
                    8d:6b:3c:a3:13:1a:63:15:7c:53:50:be:16:08:b2:
                    b4:56:99:96:9d:71:92:1f:8b:dd:9e:79:2f:19:90:
                    54:dd:e3:3b:d1:52:56:44:55:f2:7f:b2:c5:30:bf:
                    0b:69:6b:47:ce:19:67:54:16:6c:9c:26:dd:6f:d4:
                    3a:1b:3e:0a:5e:80:0d:84:15:75:3e:25:9c:a0:43:
                    a3:f7:49:77:23:f6:2b:01:2e:5c:57:45:c9:58:7f:
                    3a:db:82:fc:d1:2d:f7:7c:bf:d3:97:59:4f:0c:7d:
                    83:97:e5:e8:4f:4e:a7:13:1a:a8:5e:90:78:b5:eb:
                    e4:83:fd:6d:4d:de:27:5d:2b:0d:b4:cc:d1:b0:0d:
                    77:aa:75:e3:27:4f:27:52:70:60:7e:81:86:71:e0:
                    fc:32:44:5c:86:8b:08:e8:c5:4a:d7:e0:97:b5:db:
                    16:16:df:2d:28:e7:f5:bd:41:6c:f4:6a:1d:e6:1e:
                    45:a1:7a:df:b4:f9:a5:f3:5f:4d:5b:d8:8f:4c:8e:
                    9a:ee:93:28:65:0b:9a:9a:ba:45:0b:1b:19:eb:6f:
                    ce:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:13:6A:CC:5C:BF:E8:30:63:10:9F:FF:EE:E2:F2:A0:91:E2:99:ED
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a316630303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:1f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         51:47:01:c2:dc:73:ac:fe:a3:b9:49:64:24:21:68:ad:dd:2c:
         c9:eb:90:25:66:ec:15:31:07:86:83:06:d6:60:07:59:d3:94:
         c5:76:47:d1:55:88:96:e1:4e:dd:0a:63:45:88:c9:37:8b:f9:
         18:57:78:29:6f:3c:b6:96:66:ee:65:9a:f6:4e:0a:52:2c:ca:
         bf:54:4b:ff:2f:d6:40:dd:02:4e:e5:9e:95:05:28:73:85:b2:
         4e:dc:5a:2c:91:52:cd:f5:27:7e:c6:92:f8:e2:5f:0e:87:a5:
         88:19:ab:1b:3b:f4:be:8a:eb:e4:85:60:34:18:63:4c:86:44:
         37:be:da:d8:ec:97:86:b7:b8:73:e9:ad:aa:1d:8c:76:54:25:
         b5:58:23:d5:37:a4:66:d3:48:de:f3:45:06:c2:89:c1:ea:5e:
         d3:fc:a6:c3:33:79:1e:6d:bc:4c:ac:b0:4e:0a:f9:a5:3e:7e:
         da:4c:17:09:e6:c9:24:8c:f5:4d:f3:02:30:94:50:3d:bd:a6:
         5d:3c:45:d2:f3:f0:9f:ba:9a:76:f7:70:05:66:97:2e:70:60:
         4e:f5:e7:ea:36:cf:99:30:fb:57:02:48:07:af:5c:8b:6a:65:
         03:a9:6e:2c:24:05:9e:48:f7:83:38:6c:77:25:fb:c6:12:e3:
         e4:10:45:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org