Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a326230303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a326230303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          Pu/YhalgV1ca+59WyJnq8v/8dGzgJ0BRPQqZ9aB0Ry4=
Subject key identifier:   D4:34:E9:A8:33:30:74:1F:63:F8:C0:21:5E:E8:BE:AC:CF:7A:2C:BB
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       11732338B968D6E5342A389404073DFD2E3D6B2B
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a326230303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 19:33:22 +0000
ROA not before:           Thu 17 Nov 2022 19:28:22 +0000
ROA not after:            Thu 16 Nov 2023 19:33:22 +0000
asID:                     268430
IP address blocks:        2804:5118:2b00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:73:23:38:b9:68:d6:e5:34:2a:38:94:04:07:3d:fd:2e:3d:6b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 19:28:22 2022 GMT
            Not After : Nov 16 19:33:22 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8b:10:01:bc:a4:96:04:79:9e:b0:b3:b9:64:
                    08:6d:72:3a:21:63:d8:29:ff:79:1c:ee:c0:0a:6f:
                    d7:77:aa:0d:c0:11:b9:cd:5e:15:ec:a1:8f:19:7d:
                    a6:19:4c:94:e0:d5:65:42:47:dd:26:5c:cf:5b:08:
                    5d:3d:85:92:97:d5:24:6d:e8:77:0f:41:27:73:1c:
                    2b:0f:66:f5:f3:4c:2e:47:a7:fc:c0:57:07:22:93:
                    c9:81:f6:18:10:77:57:e4:5f:f4:89:a9:06:22:e8:
                    53:08:a0:4b:ff:fc:22:89:4b:47:14:7c:fd:45:fa:
                    ae:34:bb:6e:47:d9:e3:3b:45:f9:5e:be:24:b1:92:
                    60:1b:ab:5c:cf:71:6c:ff:6d:1f:db:8a:b2:62:64:
                    6d:48:ab:64:f1:fd:15:1d:ca:0d:25:aa:ba:16:ec:
                    4d:4e:67:cb:e2:3f:c6:88:36:7d:c8:37:a7:71:50:
                    0c:b3:a5:0f:da:08:34:19:2b:70:9c:c6:3d:d2:7e:
                    1b:df:67:30:1f:cb:e9:b0:fc:3c:42:93:f7:d8:58:
                    a4:6f:64:05:55:bb:06:7d:e7:b5:97:6a:ad:d0:e9:
                    be:f6:4f:ff:07:57:2f:44:0a:37:44:8d:8d:21:b1:
                    e7:8b:3e:d5:74:60:01:c4:b1:d8:f6:27:1f:16:38:
                    a2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:34:E9:A8:33:30:74:1F:63:F8:C0:21:5E:E8:BE:AC:CF:7A:2C:BB
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a326230303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:2b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         17:15:e9:aa:7d:49:7d:d8:a7:68:e6:d7:41:29:30:d9:aa:39:
         af:2e:78:93:8c:2e:39:71:76:94:20:6b:53:ac:95:97:71:d0:
         97:57:71:06:0c:fd:4a:42:5b:a7:68:d4:d5:d9:9c:2d:db:7d:
         5d:d8:94:4e:66:6d:c4:c0:43:b9:04:ee:d7:61:06:b2:8e:72:
         b2:71:a4:f2:93:81:04:d5:b3:9f:0b:85:fb:ce:d6:a7:fb:1e:
         c3:aa:91:29:a8:9c:d7:8a:8b:18:87:d6:67:ed:2b:db:03:5a:
         9e:38:27:5a:46:76:78:16:f5:74:99:9d:be:48:c0:60:1e:32:
         b8:cd:e5:ff:ca:86:7c:f5:aa:35:d9:2f:0c:6a:8c:01:d4:34:
         d4:c9:0f:21:5e:b0:e8:5f:e3:65:de:93:e0:43:92:77:fc:40:
         35:a6:59:8e:85:b6:6a:57:16:d6:22:a7:b5:e0:e9:0e:a6:d1:
         81:bb:61:e8:21:c6:f1:b5:87:1b:98:82:89:1d:45:5a:51:44:
         74:59:cf:fd:46:c3:0c:4f:e9:3f:e7:32:c4:68:79:8a:84:a3:
         fe:78:d2:03:12:b0:a6:62:fb:d1:e6:da:1d:80:64:c3:dc:ce:
         a4:a9:85:4d:66:94:f3:d2:46:1c:e7:39:93:ea:47:44:07:38:
         52:ee:f9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org