Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a326130303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a326130303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          J0VocdkTTPNSsZ6/Wz//k8xgI3bq895FiT6dMaqLjQo=
Subject key identifier:   55:C8:B9:5A:EC:E3:57:3C:59:AA:0E:50:51:B5:EE:59:1E:A7:BC:27
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       66F8F4D1467A9B477F346D7614509E53B28AF322
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a326130303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 19:32:54 +0000
ROA not before:           Thu 17 Nov 2022 19:27:54 +0000
ROA not after:            Thu 16 Nov 2023 19:32:54 +0000
asID:                     268430
IP address blocks:        2804:5118:2a00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f8:f4:d1:46:7a:9b:47:7f:34:6d:76:14:50:9e:53:b2:8a:f3:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 19:27:54 2022 GMT
            Not After : Nov 16 19:32:54 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:85:db:c1:a2:0b:18:f0:cd:36:f3:17:9f:84:
                    ee:02:50:9d:e3:63:52:18:50:89:93:1e:f5:49:99:
                    4b:4f:be:46:4f:87:52:9d:f6:67:e1:6f:62:29:3a:
                    80:5c:cf:22:1d:08:96:3f:ba:77:a8:51:79:91:25:
                    64:ef:1a:9a:95:a6:b4:44:47:18:02:fd:05:5b:22:
                    33:2f:91:cc:08:2a:07:cc:a7:3a:d0:36:9c:e6:3b:
                    6a:d8:dc:99:88:f8:dd:36:87:8d:86:40:4a:cc:0f:
                    9e:7c:77:6d:68:4f:f4:e8:f1:b0:66:ab:34:11:ab:
                    ae:46:f6:35:8e:12:6e:f4:46:39:20:fc:cd:e2:81:
                    75:47:fd:65:f6:35:3c:af:74:b2:6c:0f:ce:20:f1:
                    38:6c:72:3d:d3:64:c3:6d:85:6c:d3:9b:40:6b:c9:
                    58:72:c9:55:a8:77:c2:a1:08:b4:b5:73:c0:6a:de:
                    22:18:07:3a:b8:ef:d6:07:6d:7b:be:ef:ce:cd:22:
                    a5:c2:0b:03:c2:b9:31:01:3b:fd:74:fc:01:d0:2b:
                    a0:1c:86:b8:92:11:f3:4e:c1:2c:af:81:ac:20:b6:
                    12:e4:7b:7b:c4:6c:21:8c:d9:55:4c:7d:31:1d:06:
                    41:9d:c6:54:f1:d7:25:7f:75:bb:e6:0c:c2:99:b6:
                    80:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C8:B9:5A:EC:E3:57:3C:59:AA:0E:50:51:B5:EE:59:1E:A7:BC:27
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a326130303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:2a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:fc:c5:7b:a3:ff:88:64:97:f0:57:09:a2:9a:c2:45:a9:3c:
         47:6d:ba:aa:4d:db:f0:1f:d9:a4:4a:88:71:b5:dd:97:37:8f:
         72:08:27:90:93:d1:f7:64:87:f5:1c:ae:2a:04:4d:e3:b8:7e:
         8f:24:b4:4a:84:14:ed:f8:1f:3a:e8:6b:d3:eb:87:3b:c9:a7:
         7d:43:72:69:4e:39:ee:30:f1:0e:9c:9a:62:f1:19:26:2d:ae:
         ef:8e:c1:e3:2b:c6:c7:c9:34:89:77:c3:e0:88:ac:85:e1:49:
         2e:9d:51:95:0d:90:3f:db:f1:54:09:f6:84:13:86:df:89:78:
         fd:91:41:fb:b8:61:61:37:78:c2:fb:88:c2:07:dc:f8:f5:70:
         fa:cb:e5:33:ec:ff:4d:9e:fa:0b:c3:b8:fd:1a:01:4d:2d:b8:
         d0:50:47:d3:df:2e:bd:7f:c7:3d:88:cc:c3:eb:59:6b:b5:84:
         23:79:67:36:24:55:71:3f:24:dd:07:f9:fc:74:bf:3e:0e:94:
         52:75:ef:5c:ac:bc:3c:d6:95:15:97:02:24:16:ab:96:02:d1:
         16:5c:28:a3:5f:13:d7:e5:bd:50:be:7a:ce:28:13:54:41:47:
         5e:69:88:dc:22:f9:ec:4d:4d:ac:31:ba:23:61:82:87:52:2c:
         14:88:df:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org