Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a323830303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a323830303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          HH06x99THARbVAzlTXTSmXmjyR3dZ4AfMPc2Fp10q7k=
Subject key identifier:   79:35:65:38:F9:76:C2:FE:15:C8:48:2D:43:6D:E4:AB:CD:24:9B:0E
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       71F7B46490E8372E4ACFE93B9E378B94732B1740
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a323830303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 19:32:04 +0000
ROA not before:           Thu 17 Nov 2022 19:27:04 +0000
ROA not after:            Thu 16 Nov 2023 19:32:04 +0000
asID:                     268430
IP address blocks:        2804:5118:2800::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f7:b4:64:90:e8:37:2e:4a:cf:e9:3b:9e:37:8b:94:73:2b:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 19:27:04 2022 GMT
            Not After : Nov 16 19:32:04 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fb:5f:49:6a:32:63:77:52:1c:45:34:1a:78:
                    1f:da:61:62:04:d0:a5:f0:88:1d:a6:18:be:21:49:
                    be:74:77:b9:80:22:fc:ea:9d:bb:5a:c0:b5:d9:3c:
                    31:22:b8:47:cf:3d:b1:7d:5a:f3:70:6a:db:e6:f2:
                    5b:86:ca:8c:71:12:13:62:d6:d8:11:5a:5e:76:e2:
                    4e:b7:f6:30:1b:f0:47:89:aa:38:ae:ea:4b:0b:c9:
                    5b:d8:34:a8:23:25:6d:41:ab:dc:4b:ad:95:5e:4a:
                    fc:1a:b0:89:50:02:38:bd:6c:72:8e:87:71:98:ca:
                    60:7b:a4:7c:22:a5:b8:1c:20:e6:f7:f6:f3:96:64:
                    5e:30:0d:5c:1e:81:3f:48:46:2d:23:58:07:9d:74:
                    03:e4:2b:84:6d:b2:bb:d9:2e:fe:df:b1:55:3a:8f:
                    b9:e6:9c:6d:ad:5a:84:e5:b1:af:b1:39:0b:59:f2:
                    11:e8:8b:0c:fd:85:cb:78:80:4e:d4:ed:28:79:51:
                    cf:67:22:80:9b:61:bd:d4:ed:36:bf:8f:ef:7e:a1:
                    10:93:0a:8d:8b:2f:c3:33:11:05:5d:3d:1d:43:ce:
                    7d:16:8d:ce:34:2b:73:20:50:92:ad:7d:67:23:48:
                    44:91:af:88:30:d2:8d:ec:fa:57:14:bd:64:c9:0b:
                    33:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:35:65:38:F9:76:C2:FE:15:C8:48:2D:43:6D:E4:AB:CD:24:9B:0E
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a323830303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:2800::/40

    Signature Algorithm: sha256WithRSAEncryption
         5d:12:85:69:c9:41:e8:d1:f9:94:1e:12:8d:1a:a3:10:f3:1f:
         11:81:cb:fe:61:80:7c:3a:79:15:72:56:e0:aa:05:a2:78:e9:
         8b:13:03:9f:08:0f:8a:5c:a9:49:af:9b:31:d5:ee:55:77:bd:
         95:d0:03:e9:08:a6:f4:d7:e1:9c:89:f8:db:5e:10:d6:64:c2:
         45:c7:f0:27:da:1a:71:9a:f3:cb:86:77:b9:47:af:0e:2a:a9:
         d2:dc:a6:cc:fb:2c:a3:aa:cc:26:b9:e7:d3:aa:86:93:94:14:
         0d:ff:f6:da:a5:04:49:ea:ac:84:6f:03:cc:0b:26:9a:90:9c:
         41:39:7d:99:a4:6e:40:1f:fc:c7:d4:4b:2b:bf:03:07:a1:2c:
         8c:ba:65:44:b0:48:a8:0c:6d:1c:70:bd:18:07:0f:0f:da:f9:
         e8:bb:5e:c7:bb:28:2a:b6:44:b7:04:15:d6:96:f0:6b:81:ce:
         82:09:7b:07:fe:6a:5b:37:d9:f7:5f:ce:40:53:ae:5c:d2:96:
         1f:ba:13:22:24:f6:55:35:bf:12:7d:69:4b:0a:23:b0:6b:a6:
         51:15:a8:d0:fd:20:85:eb:4d:ce:2a:b4:47:25:4f:3c:a0:43:
         51:9d:c5:06:d4:f1:ff:b1:04:62:ab:b0:a9:dc:d5:10:7f:18:
         55:81:6f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org