Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a323330303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a323330303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          mlSuCO5yh3lfIIpzAZOqEwpJWJJPrLuC1+g9C3ukwqg=
Subject key identifier:   35:92:91:46:25:14:60:CE:F8:1F:68:BC:BB:E6:D3:7B:55:4E:F8:A9
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       599FB62E16B14AFC56667ADA05B55DF53F33A370
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a323330303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 19:29:24 +0000
ROA not before:           Thu 17 Nov 2022 19:24:24 +0000
ROA not after:            Thu 16 Nov 2023 19:29:24 +0000
asID:                     268430
IP address blocks:        2804:5118:2300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9f:b6:2e:16:b1:4a:fc:56:66:7a:da:05:b5:5d:f5:3f:33:a3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 19:24:24 2022 GMT
            Not After : Nov 16 19:29:24 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2b:fd:cf:10:8e:86:35:8b:21:a9:62:37:c1:
                    f5:cf:3b:ae:f5:7e:f6:96:39:c0:c0:99:71:4c:69:
                    22:e5:3b:b8:97:60:b4:01:70:e0:2b:4e:7f:19:32:
                    c4:bf:6b:12:93:b2:f5:72:76:f2:70:24:e9:1e:01:
                    97:53:74:8d:61:cc:32:40:55:93:13:a4:82:40:1e:
                    7d:f4:5c:ef:f7:b6:05:a9:0e:b5:73:7f:89:88:95:
                    22:90:3b:3a:d7:13:06:b0:cf:d0:16:fb:2e:4f:ef:
                    c1:f5:09:a7:02:f9:0a:8b:36:9d:2e:32:e1:7d:ce:
                    cb:63:8b:5e:7a:f6:e4:a0:92:fd:04:1a:0f:87:39:
                    f9:a8:bf:98:d9:eb:d8:0f:3d:a3:3e:ce:6d:ca:91:
                    1c:16:5d:10:9d:46:9d:2f:36:1f:42:ee:d6:84:72:
                    46:2b:63:11:73:87:ed:8e:5e:4e:f7:e5:91:92:d3:
                    cd:1b:86:a7:10:bd:af:2e:05:fc:ae:ca:f3:f7:be:
                    90:9d:2f:44:ae:24:61:c3:4c:2d:99:1a:d2:bf:be:
                    a0:26:9b:69:43:67:e4:83:6b:82:ca:95:a0:0c:5f:
                    95:b7:c3:04:d7:6b:1c:c7:db:db:76:44:fa:b2:1b:
                    b7:00:88:24:b2:2c:fd:44:09:50:fc:64:b2:e9:20:
                    bc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:92:91:46:25:14:60:CE:F8:1F:68:BC:BB:E6:D3:7B:55:4E:F8:A9
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a323330303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:2300::/40

    Signature Algorithm: sha256WithRSAEncryption
         66:a2:6a:8e:de:ce:cb:3d:60:47:ef:c9:86:4d:0f:3e:ee:79:
         d8:d2:bb:96:78:e7:43:c8:9a:4d:45:07:79:5d:e3:8d:4d:0f:
         8d:be:ff:b6:c1:51:f9:b8:b9:07:85:6a:94:21:05:ac:13:2b:
         c0:24:ac:d8:86:49:ae:c1:59:24:47:0c:f7:72:af:51:01:f5:
         0e:a7:e1:01:aa:4f:be:67:ef:cb:4c:80:53:81:8c:94:4e:91:
         bc:5d:04:c7:b5:31:83:8b:07:a1:1c:77:69:06:8a:f2:1c:26:
         06:96:11:6e:63:8f:31:16:b2:4d:9e:f1:a4:b5:4e:55:19:5d:
         7e:ff:b6:53:99:dd:0c:4e:85:06:41:23:bb:01:f9:b3:68:7b:
         7c:22:13:22:06:07:36:4c:fc:ba:0d:c7:16:e6:16:5a:d0:11:
         16:4b:99:3c:b6:4c:26:87:69:da:00:9a:1b:06:71:da:6f:cf:
         74:9f:68:0d:6a:c4:44:f0:ac:41:c1:68:13:8a:7a:5d:4b:3c:
         7c:be:df:2a:80:79:4c:91:2d:b9:c2:aa:62:2b:b9:51:a3:40:
         c5:83:3e:08:e2:48:7d:0c:c6:98:58:c2:7e:d5:b9:1d:8b:a6:
         97:1d:3a:a3:73:3e:f2:59:40:73:cb:1c:81:b1:57:9a:30:78:
         f8:8e:ce:b3
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUWZ+2LhaxSvxWZnraBbVd9T8zo3AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUyODgwQzMwNEI1QTRENEYyNUFCMjdEMjVBQ0Q3RUI4
RTY5M0Q5MTAeFw0yMjExMTcxOTI0MjRaFw0yMzExMTYxOTI5MjRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzIyQkZEQ0YxMDhFODYzNThC
MjFBOTYyMzdDMUY1Q0YzQkFFRjU3RUY2OTYzOUMwQzA5OTcxNEM2OTIyRTUzQkI4
OTc2MEI0MDE3MEUwMkI0RTdGMTkzMkM0QkY2QjEyOTNCMkY1NzI3NkYyNzAyNEU5
MUUwMTk3NTM3NDhENjFDQzMyNDA1NTkzMTNBNDgyNDAxRTdERjQ1Q0VGRjdCNjA1
QTkwRUI1NzM3Rjg5ODg5NTIyOTAzQjNBRDcxMzA2QjBDRkQwMTZGQjJFNEZFRkMx
RjUwOUE3MDJGOTBBOEIzNjlEMkUzMkUxN0RDRUNCNjM4QjVFN0FGNkU0QTA5MkZE
MDQxQTBGODczOUY5QThCRjk4RDlFQkQ4MEYzREEzM0VDRTZEQ0E5MTFDMTY1RDEw
OUQ0NjlEMkYzNjFGNDJFRUQ2ODQ3MjQ2MkI2MzExNzM4N0VEOEU1RTRFRjdFNTkx
OTJEM0NEMUI4NkE3MTBCREFGMkUwNUZDQUVDQUYzRjdCRTkwOUQyRjQ0QUUyNDYx
QzM0QzJEOTkxQUQyQkZCRUEwMjY5QjY5NDM2N0U0ODM2QjgyQ0E5NUEwMEM1Rjk1
QjdDMzA0RDc2QjFDQzdEQkRCNzY0NEZBQjIxQkI3MDA4ODI0QjIyQ0ZENDQwOTUw
RkM2NEIyRTkyMEJDN0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwiv9zxCOhjWLIaliN8H1zzuu9X72ljnAwJlxTGki5Tu4l2C0AXDg
K05/GTLEv2sSk7L1cnbycCTpHgGXU3SNYcwyQFWTE6SCQB599Fzv97YFqQ61c3+J
iJUikDs61xMGsM/QFvsuT+/B9QmnAvkKizadLjLhfc7LY4teevbkoJL9BBoPhzn5
qL+Y2evYDz2jPs5typEcFl0QnUadLzYfQu7WhHJGK2MRc4ftjl5O9+WRktPNG4an
EL2vLgX8rsrz976QnS9EriRhw0wtmRrSv76gJptpQ2fkg2uCypWgDF+Vt8ME12sc
x9vbdkT6shu3AIgksiz9RAlQ/GSy6SC8ewIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FDWSkUYlFGDO+B9ovLvm03tVTvipMB8GA1UdIwQYMBaAFB4ogMMEtaTU8lqyfSWs
1+uOaT2RMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dHb2pDY2NaZzdBcEtB
eUdMTktBbmJ3M2NlWWszUTgxNWF0U0RhYzhpd2o3LzAvMUUyODgwQzMwNEI1QTRE
NEYyNUFCMjdEMjVBQ0Q3RUI4RTY5M0Q5MS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xRTI4ODBDMzA0QjVBNEQ0RjI1QUIyN0QyNUFDRDdFQjhFNjkz
RDkxLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HR29qQ2NjWmc3QXBLQXlHTE5L
QW5idzNjZVlrM1E4MTVhdFNEYWM4aXdqNy8wLzMyMzgzMDM0M2EzNTMxMzEzODNh
MzIzMzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM2MzgzNDMzMzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAoBFEYIzANBgkqhkiG9w0BAQsFAAOCAQEAZqJqjt7Oyz1gR+/Jhk0P
Pu552NK7lnjnQ8iaTUUHeV3jjU0Pjb7/tsFR+bi5B4VqlCEFrBMrwCSs2IZJrsFZ
JEcM93KvUQH1DqfhAapPvmfvy0yAU4GMlE6RvF0Ex7Uxg4sHoRx3aQaK8hwmBpYR
bmOPMRayTZ7xpLVOVRldfv+2U5ndDE6FBkEjuwH5s2h7fCITIgYHNkz8ug3HFuYW
WtARFkuZPLZMJodp2gCaGwZx2m/PdJ9oDWrERPCsQcFoE4p6XUs8fL7fKoB5TJEt
ucKqYiu5UaNAxYM+COJIfQzGmFjCftW5HYumlx06o3M+8llAc8scgbFXmjB4+I7O
sw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org