Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a326330303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a326330303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          BkulgqBM4UL/WStp2RkBCNuJVr1YkCTyr5mwYTms90g=
Subject key identifier:   4C:34:41:28:89:27:08:05:A9:C8:BB:08:C9:1F:13:79:8A:33:B4:76
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       2C42E5B93BACB6DE69A6EF8AD89DA02223552A8D
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a326330303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 19:33:51 +0000
ROA not before:           Thu 17 Nov 2022 19:28:51 +0000
ROA not after:            Thu 16 Nov 2023 19:33:51 +0000
asID:                     268430
IP address blocks:        2804:5118:2c00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:42:e5:b9:3b:ac:b6:de:69:a6:ef:8a:d8:9d:a0:22:23:55:2a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 19:28:51 2022 GMT
            Not After : Nov 16 19:33:51 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0e:92:f4:6b:1b:86:8d:e0:f6:38:bb:6d:0d:
                    8e:6c:ae:6a:4b:41:d7:5f:dd:e4:5c:8d:76:66:27:
                    20:9e:11:b0:d1:40:6b:6d:84:ec:ac:17:29:b3:8c:
                    ea:83:9f:20:fa:3b:14:ff:5c:90:18:58:ff:f9:0f:
                    68:8a:b8:a7:93:b9:88:5d:24:e0:e9:13:d8:ff:2a:
                    0f:79:46:ba:76:68:f1:0f:d1:6d:57:2a:f3:19:8e:
                    d9:a7:07:60:8e:83:c6:32:e9:fd:04:df:a7:5a:af:
                    4a:09:93:85:6a:85:3c:6b:93:a1:bf:c3:6e:cd:48:
                    ea:19:6a:dc:0f:53:6a:92:df:ac:ea:2f:5d:ed:ac:
                    55:ec:f8:ea:5f:aa:1f:89:5f:8e:fc:32:b1:05:fc:
                    08:a0:2c:07:c0:ab:0b:87:aa:a5:65:26:68:3c:42:
                    d6:d9:df:9a:54:8b:26:65:6d:6e:ca:ab:54:ed:19:
                    5c:62:c0:de:c0:ee:7f:30:b0:1b:e7:ee:bc:80:2c:
                    ee:19:3b:01:e4:57:2b:a0:4c:6d:53:8a:a1:61:66:
                    9c:b9:11:f9:0c:51:91:04:d7:db:1f:9a:02:e1:e0:
                    e4:09:c9:70:8b:46:bd:b4:74:e7:0f:17:91:b2:2d:
                    77:f1:36:23:fd:02:3f:ee:cb:21:58:f7:35:3c:39:
                    42:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:34:41:28:89:27:08:05:A9:C8:BB:08:C9:1F:13:79:8A:33:B4:76
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a326330303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:2c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:de:49:af:ff:a8:9b:12:23:fe:33:d9:b8:b5:0e:da:50:f7:
         5a:f1:3b:21:eb:1b:15:44:ac:72:73:f1:52:b5:52:f0:ae:28:
         c0:cc:a8:eb:65:33:d2:26:0e:ca:ae:da:b0:80:63:ea:34:9d:
         29:d0:f1:b5:71:a9:f7:8a:c0:d9:93:c4:cc:b3:3b:ed:2e:30:
         7b:7f:39:3f:92:90:57:dc:5f:87:11:88:50:c8:29:ff:23:49:
         34:66:9d:cc:f8:6f:09:de:44:e6:c6:cc:82:cb:8e:13:5f:d4:
         91:4a:c4:f4:f4:ea:86:97:d1:16:3c:3c:e9:22:ce:29:b7:1a:
         17:0b:db:64:36:d7:71:fa:e0:7c:6a:66:78:90:8c:45:34:cb:
         0b:b8:77:b0:ae:ed:c3:67:47:61:71:d2:eb:70:cc:9c:69:bf:
         4d:f4:0c:e6:6a:84:e6:0c:cc:4b:c2:c2:2c:35:df:6e:aa:0a:
         19:3b:c9:2b:b6:e1:fd:04:3e:31:87:4e:6d:64:ef:bf:6b:a2:
         b8:63:d9:af:c8:a7:c2:91:7f:7c:1e:f5:18:24:7f:db:96:bc:
         8e:ae:e2:ba:a2:70:d7:27:fe:cf:80:93:bf:05:49:ed:5e:58:
         5b:eb:68:7a:94:91:9a:93:45:b6:f7:92:9b:eb:78:3e:69:04:
         dd:d7:a2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org