Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a323430303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a323430303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          uI9uyTg0WQzk4jyrJxDTeDu04cVJK/zutN00Q+D6RZI=
Subject key identifier:   20:DF:58:2B:64:C9:26:C8:E6:31:5A:78:E1:BA:94:5C:03:B1:67:5B
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       6A13EF69009803C46CFBBA4DE0E2D8A61387CB81
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a323430303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 19:29:57 +0000
ROA not before:           Thu 17 Nov 2022 19:24:57 +0000
ROA not after:            Thu 16 Nov 2023 19:29:57 +0000
asID:                     268430
IP address blocks:        2804:5118:2400::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:13:ef:69:00:98:03:c4:6c:fb:ba:4d:e0:e2:d8:a6:13:87:cb:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 19:24:57 2022 GMT
            Not After : Nov 16 19:29:57 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:16:18:aa:d9:5a:91:2b:44:14:21:13:55:90:
                    9e:93:5d:a1:5a:bd:9d:21:d9:c5:ba:86:8d:a5:9f:
                    da:5e:9b:3d:70:7a:19:45:ff:a1:27:ee:d2:9d:c7:
                    fa:c1:b1:61:97:f4:82:4f:53:87:1b:6f:03:81:c6:
                    f2:d9:b4:c7:f9:92:ea:b8:5e:34:8c:90:c1:e1:99:
                    45:ae:da:1a:c9:c7:96:0a:76:75:f5:e2:d0:53:ea:
                    d4:e2:47:17:68:3a:30:4c:ae:f9:86:a1:d7:2b:fe:
                    9c:35:f9:ad:26:b4:01:c4:ce:8c:cc:5e:81:18:dc:
                    1c:2a:43:c2:cc:77:53:22:ec:24:d5:02:85:47:41:
                    65:8b:51:c8:78:5d:1e:06:05:fd:ab:0c:6c:4b:ce:
                    98:a1:22:8a:ea:4b:5f:13:9e:8f:de:21:24:03:b5:
                    98:f5:ad:a6:d5:e0:75:ba:90:56:09:8a:6d:3a:43:
                    22:21:85:8e:18:67:a4:0d:fc:cc:1f:03:e8:c7:0c:
                    84:df:d2:b5:c2:1e:c8:98:8b:1c:53:21:ed:29:da:
                    7d:3d:e3:29:4d:11:ae:55:71:c5:40:78:e8:ac:68:
                    80:e8:b2:5c:81:3a:1b:33:20:b0:64:17:f5:cf:3e:
                    34:c1:8c:98:e3:6d:65:ec:96:1f:fb:6e:26:9c:69:
                    fa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DF:58:2B:64:C9:26:C8:E6:31:5A:78:E1:BA:94:5C:03:B1:67:5B
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a323430303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:2400::/40

    Signature Algorithm: sha256WithRSAEncryption
         19:ca:a9:61:93:d2:69:30:b7:c8:3c:1c:e8:63:ce:cc:0f:64:
         fa:d9:56:6b:ac:8d:70:30:b3:5f:e3:f9:e2:1a:39:23:1f:f5:
         4d:30:5a:1b:a3:72:77:ea:d8:84:ac:af:13:e8:6d:81:6a:1c:
         52:4e:04:c2:7b:dd:97:98:c4:ab:61:ac:c9:ed:3b:eb:ed:80:
         9d:5d:59:8f:17:0a:22:42:98:34:f9:ac:d3:d4:a0:c0:4b:9e:
         3c:05:62:92:a2:b4:a9:9e:98:ea:5f:1f:22:d1:30:6d:dd:02:
         40:f7:ef:10:42:9a:f2:09:0c:77:4a:8a:d4:cf:52:f4:51:4d:
         f8:f5:40:a4:58:57:49:a0:b6:27:e4:2b:a9:d3:47:ba:47:1f:
         d4:cf:60:68:77:1c:57:0b:42:76:1f:e2:30:6f:a2:5a:78:cd:
         cd:f5:2a:74:78:32:55:34:46:86:4b:98:e1:7c:d7:90:e2:cc:
         1b:f2:4c:b4:28:b1:a5:69:eb:c7:05:9b:56:80:c8:3b:e9:40:
         81:81:4d:e5:ac:a4:a6:a6:a0:34:80:7d:ef:22:e4:46:ca:21:
         f4:6a:fc:7e:a6:25:f6:da:de:ab:9c:ca:da:43:de:57:ee:78:
         cd:fe:87:fe:20:80:66:b5:07:fc:da:af:df:a4:4d:19:85:2c:
         31:71:78:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org