Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a323230303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a323230303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          hWj9wgmiJONXNLBWe7Bb2fAm0p3Q+/5sHJOMP7UuPI4=
Subject key identifier:   24:B5:69:F2:77:C6:68:60:C5:CF:24:04:19:F7:A1:7A:F1:34:A0:B1
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       44A1BD8EAC6BD6A7B7F0EE9BD21A08BFCED8121F
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a323230303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 19:29:06 +0000
ROA not before:           Thu 17 Nov 2022 19:24:06 +0000
ROA not after:            Thu 16 Nov 2023 19:29:06 +0000
asID:                     268430
IP address blocks:        2804:5118:2200::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a1:bd:8e:ac:6b:d6:a7:b7:f0:ee:9b:d2:1a:08:bf:ce:d8:12:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 19:24:06 2022 GMT
            Not After : Nov 16 19:29:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:da:e2:21:c0:cf:2b:af:10:5e:6a:38:13:08:
                    0c:08:18:80:c3:6f:c2:a8:c0:80:58:9a:95:a8:02:
                    33:8a:2d:55:c7:cd:c7:c8:58:f5:c7:81:07:f9:45:
                    55:b0:69:b5:b0:36:55:43:60:7e:87:eb:2a:d4:03:
                    87:8b:6b:3a:c5:84:5c:b9:ee:52:5f:e6:e9:ee:9d:
                    36:fd:d2:b1:5f:f2:bb:5c:6e:b7:70:f7:20:74:81:
                    82:bd:e8:60:81:fd:40:7a:67:eb:79:c2:89:d0:7b:
                    7f:51:60:79:6d:b9:70:bb:63:76:c5:87:7e:fe:ce:
                    e8:50:6f:7e:38:6d:1f:47:d8:6a:38:df:f8:08:fe:
                    7e:40:a5:38:67:5e:0a:3d:a2:3a:f3:a5:d9:54:f4:
                    2a:37:39:8e:15:fd:aa:b5:55:3d:c4:78:af:62:bb:
                    36:e2:99:71:3b:70:2c:69:d2:63:4a:e0:b4:f4:98:
                    6b:a0:2d:6c:3d:53:05:f0:9a:f2:dd:a1:b4:dc:b0:
                    88:62:ce:e5:e4:c7:0e:91:12:9a:9a:ce:10:b0:bf:
                    66:e9:f1:76:0a:70:61:8e:e3:83:2d:d8:12:75:49:
                    d2:5d:a0:a4:ca:f1:ba:b4:05:9b:bf:9c:4c:fa:9e:
                    b7:e8:44:e7:d3:f3:25:57:09:c9:b9:13:a4:4c:16:
                    b6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B5:69:F2:77:C6:68:60:C5:CF:24:04:19:F7:A1:7A:F1:34:A0:B1
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a323230303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:2200::/40

    Signature Algorithm: sha256WithRSAEncryption
         9d:13:c8:0b:85:6d:19:c7:ef:01:e0:63:39:cd:2e:fb:6d:a9:
         a2:ae:09:d6:a5:35:ae:44:91:28:da:cb:09:7c:42:bf:34:a7:
         99:51:b0:2d:45:7e:76:75:54:04:f3:65:1f:d6:35:4a:89:93:
         01:48:18:63:2d:15:53:4e:08:bd:e5:37:4b:ff:7c:d5:3e:ec:
         8d:48:08:ec:ed:a2:64:04:cb:2c:29:35:35:c0:d9:af:e0:2f:
         bc:10:5b:5a:6f:74:0b:c5:b5:26:35:5c:16:3d:b3:00:a5:7a:
         f0:30:e9:e3:a5:fc:0d:11:20:f0:44:9c:87:6d:05:bd:72:2c:
         cd:5f:54:a9:31:d1:33:ed:f5:dd:d9:c9:c2:88:24:71:06:ce:
         92:c3:b3:64:89:09:87:f0:66:3a:b9:a1:bd:f4:13:28:f3:f7:
         11:fe:17:f2:17:a5:27:9d:88:b5:3e:0f:e7:ac:86:c1:57:9c:
         e4:b9:6c:f0:b1:fa:16:61:77:01:18:f5:9f:a3:37:7f:54:ea:
         6e:4c:03:f6:ea:29:2d:1b:2e:a7:da:00:99:08:2f:d0:1e:34:
         fb:d2:0c:17:ff:20:31:ce:ee:76:74:f9:47:8c:08:eb:ba:03:
         4f:a6:15:5b:8f:7a:df:0a:02:8e:52:96:b7:62:18:2e:ae:93:
         f7:0d:f8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org