Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3230303a3a2f34302d3430203d3e20323638343330.roa
File:                     323830343a353131383a3230303a3a2f34302d3430203d3e20323638343330.roa (raw, json)
Hash identifier:          GFd7lnrmdDa9eS1fMWfI5b25gGf3DkO2rsjgL7FJNjg=
Subject key identifier:   3E:51:F5:70:B9:34:19:95:6E:A9:B6:E3:33:D9:60:B1:2F:05:C2:C6
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       7F2EED4779331280BA169F4DF15734C1AEC28671
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3230303a3a2f34302d3430203d3e20323638343330.roa
Signing time:             Wed 16 Nov 2022 14:24:26 +0000
ROA not before:           Wed 16 Nov 2022 14:19:26 +0000
ROA not after:            Wed 15 Nov 2023 14:24:26 +0000
asID:                     268430
IP address blocks:        2804:5118:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:2e:ed:47:79:33:12:80:ba:16:9f:4d:f1:57:34:c1:ae:c2:86:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 16 14:19:26 2022 GMT
            Not After : Nov 15 14:24:26 2023 GMT
        Subject: CN=3082010A0282010100ABE4E584E75C604D27C6E9D7A76B8941BEF08BB8947F1415C2DBD8049492C60FEC639028D9E1A0B83FB48564C525DD9D6D4E717411F0B13ABA572B77D6EC611E002AF65DEE1BAA9042E3AC0D974FCB31B67D832DB1214B1084840FD67F5F456289F0B1D4E4E4FA3A421897D589F3252D6B553296BB670AE7224CC97A6B770581D25D9F3EAE71AA56C5B1AD136586E1FF295F1D20211BD0C8FED21E38F17204E19A024052CFFB7A010FC2D06526729BE18104778BB7A918982193925CC4166CC731E80BBBC952C04E3909BFAB9A82E727A24B0D2249243467D336C37A367680145B29229EDC5468459AF44E8D9A31629113C113EA3E129D281B5DAFA64E4ED73F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e4:e5:84:e7:5c:60:4d:27:c6:e9:d7:a7:6b:
                    89:41:be:f0:8b:b8:94:7f:14:15:c2:db:d8:04:94:
                    92:c6:0f:ec:63:90:28:d9:e1:a0:b8:3f:b4:85:64:
                    c5:25:dd:9d:6d:4e:71:74:11:f0:b1:3a:ba:57:2b:
                    77:d6:ec:61:1e:00:2a:f6:5d:ee:1b:aa:90:42:e3:
                    ac:0d:97:4f:cb:31:b6:7d:83:2d:b1:21:4b:10:84:
                    84:0f:d6:7f:5f:45:62:89:f0:b1:d4:e4:e4:fa:3a:
                    42:18:97:d5:89:f3:25:2d:6b:55:32:96:bb:67:0a:
                    e7:22:4c:c9:7a:6b:77:05:81:d2:5d:9f:3e:ae:71:
                    aa:56:c5:b1:ad:13:65:86:e1:ff:29:5f:1d:20:21:
                    1b:d0:c8:fe:d2:1e:38:f1:72:04:e1:9a:02:40:52:
                    cf:fb:7a:01:0f:c2:d0:65:26:72:9b:e1:81:04:77:
                    8b:b7:a9:18:98:21:93:92:5c:c4:16:6c:c7:31:e8:
                    0b:bb:c9:52:c0:4e:39:09:bf:ab:9a:82:e7:27:a2:
                    4b:0d:22:49:24:34:67:d3:36:c3:7a:36:76:80:14:
                    5b:29:22:9e:dc:54:68:45:9a:f4:4e:8d:9a:31:62:
                    91:13:c1:13:ea:3e:12:9d:28:1b:5d:af:a6:4e:4e:
                    d7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:51:F5:70:B9:34:19:95:6E:A9:B6:E3:33:D9:60:B1:2F:05:C2:C6
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3230303a3a2f34302d3430203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         b5:ed:a4:7d:a6:eb:25:bf:26:46:2b:77:3f:0c:d3:54:cd:17:
         7c:5a:1c:0a:49:ad:86:c1:84:66:26:e6:51:76:10:c1:e3:8c:
         a2:77:a4:a0:c3:1d:50:3f:07:80:73:2a:ee:03:35:08:d0:3a:
         a5:57:7f:5d:6d:c9:b6:bf:da:b1:a4:eb:d2:3c:00:01:ed:1b:
         25:a3:69:44:bd:95:d0:84:51:9a:86:fb:a6:a9:a4:d4:1a:0a:
         e1:ac:9c:c4:88:2b:71:12:4b:20:2a:35:24:71:39:b5:0d:06:
         2c:f7:0e:03:a3:04:3b:76:af:95:72:7e:48:9f:1a:ef:5c:eb:
         ae:70:56:0c:3a:21:14:e8:e5:f5:99:de:b2:bf:35:82:06:da:
         a6:5d:e6:a3:3c:c9:db:60:1b:26:7c:4f:f0:a7:d6:ab:07:fb:
         68:91:57:a8:a5:3d:12:a2:1e:56:f1:eb:83:5f:b6:ab:ea:19:
         cf:15:15:14:7c:86:0b:49:65:39:54:9d:4d:e0:47:e2:d2:b8:
         da:c7:5e:d9:6d:e5:32:74:01:04:9b:7f:1d:17:c6:b6:cd:17:
         cd:31:be:2c:61:40:76:fb:b8:fd:25:1a:c8:ff:fb:2a:39:95:
         aa:8a:23:33:a6:56:7a:0d:12:91:7a:9d:89:74:51:88:5d:ef:
         04:4b:ad:ff
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUfy7tR3kzEoC6Fp9N8Vc0wa7ChnEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUyODgwQzMwNEI1QTRENEYyNUFCMjdEMjVBQ0Q3RUI4
RTY5M0Q5MTAeFw0yMjExMTYxNDE5MjZaFw0yMzExMTUxNDI0MjZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUJFNEU1ODRFNzVDNjA0RDI3
QzZFOUQ3QTc2Qjg5NDFCRUYwOEJCODk0N0YxNDE1QzJEQkQ4MDQ5NDkyQzYwRkVD
NjM5MDI4RDlFMUEwQjgzRkI0ODU2NEM1MjVERDlENkQ0RTcxNzQxMUYwQjEzQUJB
NTcyQjc3RDZFQzYxMUUwMDJBRjY1REVFMUJBQTkwNDJFM0FDMEQ5NzRGQ0IzMUI2
N0Q4MzJEQjEyMTRCMTA4NDg0MEZENjdGNUY0NTYyODlGMEIxRDRFNEU0RkEzQTQy
MTg5N0Q1ODlGMzI1MkQ2QjU1MzI5NkJCNjcwQUU3MjI0Q0M5N0E2Qjc3MDU4MUQy
NUQ5RjNFQUU3MUFBNTZDNUIxQUQxMzY1ODZFMUZGMjk1RjFEMjAyMTFCRDBDOEZF
RDIxRTM4RjE3MjA0RTE5QTAyNDA1MkNGRkI3QTAxMEZDMkQwNjUyNjcyOUJFMTgx
MDQ3NzhCQjdBOTE4OTgyMTkzOTI1Q0M0MTY2Q0M3MzFFODBCQkJDOTUyQzA0RTM5
MDlCRkFCOUE4MkU3MjdBMjRCMEQyMjQ5MjQzNDY3RDMzNkMzN0EzNjc2ODAxNDVC
MjkyMjlFREM1NDY4NDU5QUY0NEU4RDlBMzE2MjkxMTNDMTEzRUEzRTEyOUQyODFC
NURBRkE2NEU0RUQ3M0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAq+TlhOdcYE0nxunXp2uJQb7wi7iUfxQVwtvYBJSSxg/sY5Ao2eGg
uD+0hWTFJd2dbU5xdBHwsTq6Vyt31uxhHgAq9l3uG6qQQuOsDZdPyzG2fYMtsSFL
EISED9Z/X0ViifCx1OTk+jpCGJfVifMlLWtVMpa7ZwrnIkzJemt3BYHSXZ8+rnGq
VsWxrRNlhuH/KV8dICEb0Mj+0h448XIE4ZoCQFLP+3oBD8LQZSZym+GBBHeLt6kY
mCGTklzEFmzHMegLu8lSwE45Cb+rmoLnJ6JLDSJJJDRn0zbDejZ2gBRbKSKe3FRo
RZr0To2aMWKRE8ET6j4SnSgbXa+mTk7XPwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FD5R9XC5NBmVbqm24zPZYLEvBcLGMB8GA1UdIwQYMBaAFB4ogMMEtaTU8lqyfSWs
1+uOaT2RMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dHb2pDY2NaZzdBcEtB
eUdMTktBbmJ3M2NlWWszUTgxNWF0U0RhYzhpd2o3LzAvMUUyODgwQzMwNEI1QTRE
NEYyNUFCMjdEMjVBQ0Q3RUI4RTY5M0Q5MS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xRTI4ODBDMzA0QjVBNEQ0RjI1QUIyN0QyNUFDRDdFQjhFNjkz
RDkxLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HR29qQ2NjWmc3QXBLQXlHTE5L
QW5idzNjZVlrM1E4MTVhdFNEYWM4aXdqNy8wLzMyMzgzMDM0M2EzNTMxMzEzODNh
MzIzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNjM4MzQzMzMwLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA
AjAIAwYAKARRGAIwDQYJKoZIhvcNAQELBQADggEBALXtpH2m6yW/JkYrdz8M01TN
F3xaHApJrYbBhGYm5lF2EMHjjKJ3pKDDHVA/B4BzKu4DNQjQOqVXf11tyba/2rGk
69I8AAHtGyWjaUS9ldCEUZqG+6appNQaCuGsnMSIK3ESSyAqNSRxObUNBiz3DgOj
BDt2r5VyfkifGu9c665wVgw6IRTo5fWZ3rK/NYIG2qZd5qM8ydtgGyZ8T/Cn1qsH
+2iRV6ilPRKiHlbx64NftqvqGc8VFRR8hgtJZTlUnU3gR+LSuNrHXtlt5TJ0AQSb
fx0XxrbNF80xvixhQHb7uP0lGsj/+yo5laqKIzOmVnoNEpF6nYl0UYhd7wRLrf8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org