Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a323030303a3a2f34302d3430203d3e20323638343330.roa
File:                     323830343a353131383a323030303a3a2f34302d3430203d3e20323638343330.roa (raw, json)
Hash identifier:          I4UHcJaJSdkZL0RBBFEqLXDwl/CzkLm4LAgXLF+lRCM=
Subject key identifier:   A9:A0:40:42:C9:78:59:C9:B6:CD:BC:F3:93:DC:F0:C9:B2:CD:F3:99
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       615DA4494C6D75AE85E9BBF873168E39BC2D091F
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a323030303a3a2f34302d3430203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 02:56:52 +0000
ROA not before:           Thu 17 Nov 2022 02:51:52 +0000
ROA not after:            Thu 16 Nov 2023 02:56:52 +0000
asID:                     268430
IP address blocks:        2804:5118:2000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:5d:a4:49:4c:6d:75:ae:85:e9:bb:f8:73:16:8e:39:bc:2d:09:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 02:51:52 2022 GMT
            Not After : Nov 16 02:56:52 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2b:0f:00:9d:58:40:ab:e3:ea:82:95:57:bf:
                    c5:10:7b:88:de:7c:93:3d:a1:48:19:14:bd:26:36:
                    f3:0b:b9:7b:b1:c8:a5:cc:19:ad:f7:ca:3c:6d:43:
                    e5:d2:cb:77:27:2a:07:65:55:a1:17:2c:5d:73:49:
                    9a:29:b9:d4:76:74:b3:07:da:0f:0d:cf:5d:d7:78:
                    31:f1:0b:88:e7:f5:a7:61:75:44:93:5b:41:79:f3:
                    db:2d:fd:98:f9:fc:d9:ce:ef:8a:dd:20:9a:8e:9a:
                    0c:54:ca:7e:0f:82:1f:aa:34:a9:31:49:94:33:8e:
                    ab:54:fb:d9:bd:6a:58:19:76:b2:7a:0f:75:80:b0:
                    e9:6f:82:bf:7d:0f:a2:b0:65:95:c4:0e:b2:6b:8d:
                    01:4b:94:e6:c1:4f:43:89:d8:b5:50:35:cd:4e:0a:
                    ce:cc:54:5b:77:97:39:a5:62:ed:e7:ef:32:f1:7f:
                    af:eb:ef:e7:8d:f0:67:51:b6:e4:e2:40:f8:9e:e7:
                    f1:85:3d:d8:a0:ac:7b:a8:c1:1c:64:c3:a5:80:15:
                    b2:ca:41:f0:af:df:24:de:33:05:5b:bf:5b:1c:a2:
                    a4:e9:dc:11:84:d8:2e:8b:f8:15:3a:4e:ff:8b:6f:
                    48:a2:2a:9f:32:cf:97:8b:71:b1:b5:5f:0f:99:97:
                    29:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A0:40:42:C9:78:59:C9:B6:CD:BC:F3:93:DC:F0:C9:B2:CD:F3:99
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a323030303a3a2f34302d3430203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         51:50:56:53:35:cf:48:70:ca:74:25:43:4a:49:02:30:1c:ce:
         cf:d5:13:f7:48:aa:cc:c0:9d:3b:e1:fa:ea:22:f2:b7:70:0f:
         20:27:e2:ce:79:5b:de:46:b2:9a:8b:71:8f:56:f1:4c:2c:df:
         22:5e:0e:1d:50:65:3c:6f:27:1d:da:7b:cd:34:22:b2:e6:9a:
         73:b8:20:de:c6:ff:28:a5:9f:3e:e7:9b:a2:cc:5b:e5:91:08:
         ac:c0:ee:14:a4:5d:fa:d4:db:7d:d4:aa:b8:69:57:16:9f:7a:
         91:30:6f:a8:63:63:92:cf:43:88:87:44:e2:40:6d:3d:b1:49:
         7a:db:76:ae:06:11:7c:1b:b8:64:6c:17:9d:36:b1:ea:8f:6b:
         37:a5:5a:69:03:cd:32:28:d2:58:f7:95:d0:42:5d:33:f8:fd:
         ad:97:33:3e:c6:e1:2d:7d:59:08:3a:0b:76:3c:cb:5c:31:49:
         10:82:60:4a:b0:d2:75:ea:c3:7c:9a:33:c1:27:de:50:d2:b8:
         41:a4:61:50:0d:99:f3:a4:d6:95:8b:4f:5e:c8:70:1f:c0:b7:
         fd:48:2d:d1:e7:95:3a:5a:a8:65:f4:5d:23:8f:e0:ee:3b:ae:
         fb:7b:cf:76:23:d1:b5:3e:7c:5b:ee:ff:d6:61:ce:bd:3b:23:
         f8:db:06:24
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUYV2kSUxtda6F6bv4cxaOObwtCR8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUyODgwQzMwNEI1QTRENEYyNUFCMjdEMjVBQ0Q3RUI4
RTY5M0Q5MTAeFw0yMjExMTcwMjUxNTJaFw0yMzExMTYwMjU2NTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDYyQjBGMDA5RDU4NDBBQkUz
RUE4Mjk1NTdCRkM1MTA3Qjg4REU3QzkzM0RBMTQ4MTkxNEJEMjYzNkYzMEJCOTdC
QjFDOEE1Q0MxOUFERjdDQTNDNkQ0M0U1RDJDQjc3MjcyQTA3NjU1NUExMTcyQzVE
NzM0OTlBMjlCOUQ0NzY3NEIzMDdEQTBGMERDRjVERDc3ODMxRjEwQjg4RTdGNUE3
NjE3NTQ0OTM1QjQxNzlGM0RCMkRGRDk4RjlGQ0Q5Q0VFRjhBREQyMDlBOEU5QTBD
NTRDQTdFMEY4MjFGQUEzNEE5MzE0OTk0MzM4RUFCNTRGQkQ5QkQ2QTU4MTk3NkIy
N0EwRjc1ODBCMEU5NkY4MkJGN0QwRkEyQjA2NTk1QzQwRUIyNkI4RDAxNEI5NEU2
QzE0RjQzODlEOEI1NTAzNUNENEUwQUNFQ0M1NDVCNzc5NzM5QTU2MkVERTdFRjMy
RjE3RkFGRUJFRkU3OERGMDY3NTFCNkU0RTI0MEY4OUVFN0YxODUzREQ4QTBBQzdC
QThDMTFDNjRDM0E1ODAxNUIyQ0E0MUYwQUZERjI0REUzMzA1NUJCRjVCMUNBMkE0
RTlEQzExODREODJFOEJGODE1M0E0RUZGOEI2RjQ4QTIyQTlGMzJDRjk3OEI3MUIx
QjU1RjBGOTk5NzI5ODMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1isPAJ1YQKvj6oKVV7/FEHuI3nyTPaFIGRS9JjbzC7l7scilzBmt
98o8bUPl0st3JyoHZVWhFyxdc0maKbnUdnSzB9oPDc9d13gx8QuI5/WnYXVEk1tB
efPbLf2Y+fzZzu+K3SCajpoMVMp+D4IfqjSpMUmUM46rVPvZvWpYGXayeg91gLDp
b4K/fQ+isGWVxA6ya40BS5TmwU9Didi1UDXNTgrOzFRbd5c5pWLt5+8y8X+v6+/n
jfBnUbbk4kD4nufxhT3YoKx7qMEcZMOlgBWyykHwr98k3jMFW79bHKKk6dwRhNgu
i/gVOk7/i29IoiqfMs+Xi3GxtV8PmZcpgwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FKmgQELJeFnJts2885Pc8MmyzfOZMB8GA1UdIwQYMBaAFB4ogMMEtaTU8lqyfSWs
1+uOaT2RMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dHb2pDY2NaZzdBcEtB
eUdMTktBbmJ3M2NlWWszUTgxNWF0U0RhYzhpd2o3LzAvMUUyODgwQzMwNEI1QTRE
NEYyNUFCMjdEMjVBQ0Q3RUI4RTY5M0Q5MS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xRTI4ODBDMzA0QjVBNEQ0RjI1QUIyN0QyNUFDRDdFQjhFNjkz
RDkxLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HR29qQ2NjWmc3QXBLQXlHTE5L
QW5idzNjZVlrM1E4MTVhdFNEYWM4aXdqNy8wLzMyMzgzMDM0M2EzNTMxMzEzODNh
MzIzMDMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM2MzgzNDMzMzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAoBFEYIDANBgkqhkiG9w0BAQsFAAOCAQEAUVBWUzXPSHDKdCVDSkkC
MBzOz9UT90iqzMCdO+H66iLyt3APICfiznlb3kaymotxj1bxTCzfIl4OHVBlPG8n
Hdp7zTQisuaac7gg3sb/KKWfPuebosxb5ZEIrMDuFKRd+tTbfdSquGlXFp96kTBv
qGNjks9DiIdE4kBtPbFJett2rgYRfBu4ZGwXnTax6o9rN6VaaQPNMijSWPeV0EJd
M/j9rZczPsbhLX1ZCDoLdjzLXDFJEIJgSrDSderDfJozwSfeUNK4QaRhUA2Z86TW
lYtPXshwH8C3/Ugt0eeVOlqoZfRdI4/g7juu+3vPdiPRtT58W+7/1mHOvTsj+NsG
JA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org