Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a326430303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a326430303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          jFn6kgcZLg8b0gsl8RLQIXxn1U8oL/vrJVtoQ5rk6gg=
Subject key identifier:   49:2B:61:08:B2:56:FB:EA:A9:99:58:78:23:E0:B1:8A:40:08:29:D7
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       3ACDC6A5FEF4D0AD00422C3C039295A2570856DC
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a326430303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 19:34:06 +0000
ROA not before:           Thu 17 Nov 2022 19:29:06 +0000
ROA not after:            Thu 16 Nov 2023 19:34:06 +0000
asID:                     268430
IP address blocks:        2804:5118:2d00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:cd:c6:a5:fe:f4:d0:ad:00:42:2c:3c:03:92:95:a2:57:08:56:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 19:29:06 2022 GMT
            Not After : Nov 16 19:34:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ce:cc:97:fb:d4:3d:48:c9:3c:73:f9:7c:94:
                    1b:02:37:98:67:89:93:96:f9:f8:de:54:09:8c:67:
                    7b:a7:fd:b5:49:fe:e7:76:d9:71:a3:68:5f:3e:e9:
                    b8:c0:dd:44:6b:bf:ab:6b:b5:dd:90:74:c8:c8:90:
                    3d:75:95:de:ae:4a:99:47:65:a6:29:bd:27:b3:6a:
                    b2:a7:24:5b:c8:2f:cb:98:45:03:c1:26:55:e9:61:
                    6e:f2:5f:f3:d4:1b:b5:77:25:08:43:23:85:ed:a2:
                    9f:70:6d:41:6e:00:bb:94:d4:64:9d:78:d5:d0:eb:
                    c6:f5:42:bc:79:17:78:e7:c3:a4:1d:78:26:f5:45:
                    24:23:0c:ae:0e:7b:8f:be:4b:ef:e4:19:3b:b4:c5:
                    55:dd:d9:28:cf:5c:1e:b2:ab:5b:5a:9f:5d:29:b7:
                    ef:eb:e5:e3:2b:9e:d0:8d:27:c1:83:e4:35:94:cd:
                    e8:47:20:17:d9:a9:7d:a0:b0:13:2d:4e:41:84:18:
                    4c:8c:99:71:2f:4f:35:b2:f4:93:eb:b7:4f:72:d5:
                    9f:db:c8:4b:5f:1e:ed:98:b8:af:af:5b:4b:c3:1c:
                    90:6a:64:9d:1a:52:a9:a2:e5:87:a3:be:a4:bb:da:
                    7f:28:81:ba:06:48:95:2f:0f:02:b2:85:b8:62:96:
                    b0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2B:61:08:B2:56:FB:EA:A9:99:58:78:23:E0:B1:8A:40:08:29:D7
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a326430303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:2d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         49:52:41:74:bc:2a:71:16:67:2e:83:20:f3:cf:08:e4:d9:8a:
         79:5f:64:76:c8:60:20:47:ac:1c:5a:25:cc:c4:a9:69:ff:25:
         a8:05:4d:82:36:31:21:70:d1:78:37:b0:cf:e8:73:e3:aa:ee:
         b9:11:8d:74:3a:4c:aa:1e:ca:54:09:34:d0:af:56:2a:b4:51:
         7e:c3:7e:c0:37:db:38:44:7c:32:9d:53:a8:7b:2a:35:cb:b2:
         f2:53:11:bb:a9:d7:a2:a5:84:fd:5a:0e:5c:8e:c7:93:fb:62:
         72:20:c2:fd:04:d9:15:f9:43:11:83:9b:1b:ec:c6:21:23:6f:
         82:04:c2:05:81:d8:cc:a9:69:90:62:2e:73:9a:ca:fc:c9:70:
         ad:d7:ab:63:38:7f:0f:ec:95:55:c7:56:84:78:f7:25:4b:9c:
         33:8b:34:77:51:ce:93:99:f7:f8:09:bb:37:0f:6b:5a:e6:a5:
         5e:77:1c:71:65:7d:36:5f:6b:19:1e:42:18:b2:1f:c6:74:a3:
         52:ff:f5:ed:76:e5:17:87:b2:e2:de:64:7c:ba:7e:a6:db:e9:
         a5:22:50:26:4b:09:1c:90:f4:de:35:3c:23:8a:8c:09:61:6b:
         89:2e:e8:0c:81:c1:cb:d5:0f:c0:f5:be:67:a8:96:f2:20:84:
         6a:66:fe:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org