Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a326530303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a326530303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          NPA0500jCEPZUDQ6FDuB7O/x/quQxCHIU+NC59rQrXc=
Subject key identifier:   AD:E2:B7:51:22:4E:B3:EE:36:FF:39:77:FC:9B:55:84:5A:70:7E:BC
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       03605A1F2E0CAC5257E1174DDDBE6DC8E3EC1937
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a326530303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 19:34:34 +0000
ROA not before:           Thu 17 Nov 2022 19:29:34 +0000
ROA not after:            Thu 16 Nov 2023 19:34:34 +0000
asID:                     268430
IP address blocks:        2804:5118:2e00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:60:5a:1f:2e:0c:ac:52:57:e1:17:4d:dd:be:6d:c8:e3:ec:19:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 19:29:34 2022 GMT
            Not After : Nov 16 19:34:34 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1b:b6:ef:06:ef:d0:7b:07:b4:df:5f:57:28:
                    f5:30:3e:c0:e1:fa:b6:fb:f8:2c:97:83:38:84:3b:
                    ff:cb:a3:b9:f5:4c:6e:c3:8b:26:2c:af:70:c8:d3:
                    3d:27:83:9f:5e:02:d0:d9:ad:4c:2b:5f:ea:c8:4d:
                    06:3c:b4:82:d7:85:4f:36:f8:9c:11:9b:59:01:d2:
                    c5:50:11:fc:e7:c3:b8:8a:92:13:bc:74:da:b4:3f:
                    8f:a0:df:45:4a:c6:06:48:c4:6c:1a:c9:0b:56:d9:
                    e1:df:8c:e1:1a:cb:bf:1c:5d:24:86:52:66:3f:92:
                    92:d5:41:3b:69:e0:b0:52:07:b5:df:e2:38:33:f3:
                    ce:b6:48:45:63:7e:6e:c3:b6:66:c3:fe:85:f2:e0:
                    63:4f:ac:53:97:06:6a:f4:60:1a:a9:af:3d:f7:19:
                    3c:f5:e5:20:4d:1d:9a:14:01:b4:c9:c1:9a:94:c9:
                    14:ef:80:8a:b5:66:a6:4e:4c:d9:70:f4:78:95:89:
                    c6:8f:06:24:f4:ee:e9:d5:02:bc:d6:63:16:75:8f:
                    3d:0d:52:c7:e2:33:65:b4:ea:df:8f:8b:bc:ce:6a:
                    30:5c:6c:43:18:f5:c9:ea:51:34:0b:8b:1e:fa:b2:
                    7e:0d:2f:e8:cb:18:0b:7c:99:07:4e:5e:64:f2:0a:
                    6b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E2:B7:51:22:4E:B3:EE:36:FF:39:77:FC:9B:55:84:5A:70:7E:BC
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a326530303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:2e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         28:7b:23:36:b2:0d:98:09:c1:64:26:fa:d2:78:3e:3e:75:f6:
         cf:73:0d:04:d8:c9:c3:73:ff:d6:89:07:dc:04:fc:67:0f:71:
         e4:d1:e1:cd:89:ea:65:75:ca:ec:cd:bb:a3:c2:7f:9b:e3:b6:
         40:8b:e0:f5:b1:98:a8:0e:0f:2e:30:11:88:b9:4a:17:b9:73:
         40:4e:14:1e:34:e2:16:2d:09:b7:db:4d:03:fd:8b:2c:60:4c:
         44:93:13:d9:b1:47:dc:61:73:92:f6:0d:11:9f:da:d8:d0:b5:
         e6:90:b1:7a:70:30:58:7a:7e:f9:bb:b5:da:34:59:32:21:57:
         4c:48:e0:f6:40:4c:2d:ed:17:02:3a:f4:62:7a:94:0b:a1:71:
         a1:1c:64:6a:32:ad:6d:07:b5:32:c0:62:5e:ea:d5:81:91:cc:
         4a:0d:58:86:8e:24:12:4f:91:44:6a:bb:f7:78:82:ad:5d:2c:
         f0:28:0f:1a:d9:e7:8c:1e:07:69:48:e8:71:8f:36:c7:7c:12:
         53:b3:ab:a3:21:32:f8:23:83:37:4d:11:4b:66:44:2f:29:e6:
         37:00:ed:9f:00:a4:9e:71:9d:a7:3c:75:6a:91:d6:5c:f5:9b:
         fc:78:12:ac:15:36:37:1d:c3:c4:13:04:b8:04:d9:68:63:79:
         b1:a1:e3:02
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUA2BaHy4MrFJX4RdN3b5tyOPsGTcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUyODgwQzMwNEI1QTRENEYyNUFCMjdEMjVBQ0Q3RUI4
RTY5M0Q5MTAeFw0yMjExMTcxOTI5MzRaFw0yMzExMTYxOTM0MzRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjQxQkI2RUYwNkVGRDA3QjA3
QjRERjVGNTcyOEY1MzAzRUMwRTFGQUI2RkJGODJDOTc4MzM4ODQzQkZGQ0JBM0I5
RjU0QzZFQzM4QjI2MkNBRjcwQzhEMzNEMjc4MzlGNUUwMkQwRDlBRDRDMkI1RkVB
Qzg0RDA2M0NCNDgyRDc4NTRGMzZGODlDMTE5QjU5MDFEMkM1NTAxMUZDRTdDM0I4
OEE5MjEzQkM3NERBQjQzRjhGQTBERjQ1NEFDNjA2NDhDNDZDMUFDOTBCNTZEOUUx
REY4Q0UxMUFDQkJGMUM1RDI0ODY1MjY2M0Y5MjkyRDU0MTNCNjlFMEIwNTIwN0I1
REZFMjM4MzNGM0NFQjY0ODQ1NjM3RTZFQzNCNjY2QzNGRTg1RjJFMDYzNEZBQzUz
OTcwNjZBRjQ2MDFBQTlBRjNERjcxOTNDRjVFNTIwNEQxRDlBMTQwMUI0QzlDMTlB
OTRDOTE0RUY4MDhBQjU2NkE2NEU0Q0Q5NzBGNDc4OTU4OUM2OEYwNjI0RjRFRUU5
RDUwMkJDRDY2MzE2NzU4RjNEMEQ1MkM3RTIzMzY1QjRFQURGOEY4QkJDQ0U2QTMw
NUM2QzQzMThGNUM5RUE1MTM0MEI4QjFFRkFCMjdFMEQyRkU4Q0IxODBCN0M5OTA3
NEU1RTY0RjIwQTZCNkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtBu27wbv0HsHtN9fVyj1MD7A4fq2+/gsl4M4hDv/y6O59Uxuw4sm
LK9wyNM9J4OfXgLQ2a1MK1/qyE0GPLSC14VPNvicEZtZAdLFUBH858O4ipITvHTa
tD+PoN9FSsYGSMRsGskLVtnh34zhGsu/HF0khlJmP5KS1UE7aeCwUge13+I4M/PO
tkhFY35uw7Zmw/6F8uBjT6xTlwZq9GAaqa899xk89eUgTR2aFAG0ycGalMkU74CK
tWamTkzZcPR4lYnGjwYk9O7p1QK81mMWdY89DVLH4jNltOrfj4u8zmowXGxDGPXJ
6lE0C4se+rJ+DS/oyxgLfJkHTl5k8gprbwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FK3it1EiTrPuNv85d/ybVYRacH68MB8GA1UdIwQYMBaAFB4ogMMEtaTU8lqyfSWs
1+uOaT2RMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dHb2pDY2NaZzdBcEtB
eUdMTktBbmJ3M2NlWWszUTgxNWF0U0RhYzhpd2o3LzAvMUUyODgwQzMwNEI1QTRE
NEYyNUFCMjdEMjVBQ0Q3RUI4RTY5M0Q5MS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xRTI4ODBDMzA0QjVBNEQ0RjI1QUIyN0QyNUFDRDdFQjhFNjkz
RDkxLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HR29qQ2NjWmc3QXBLQXlHTE5L
QW5idzNjZVlrM1E4MTVhdFNEYWM4aXdqNy8wLzMyMzgzMDM0M2EzNTMxMzEzODNh
MzI2NTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM2MzgzNDMzMzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAoBFEYLjANBgkqhkiG9w0BAQsFAAOCAQEAKHsjNrINmAnBZCb60ng+
PnX2z3MNBNjJw3P/1okH3AT8Zw9x5NHhzYnqZXXK7M27o8J/m+O2QIvg9bGYqA4P
LjARiLlKF7lzQE4UHjTiFi0Jt9tNA/2LLGBMRJMT2bFH3GFzkvYNEZ/a2NC15pCx
enAwWHp++bu12jRZMiFXTEjg9kBMLe0XAjr0YnqUC6FxoRxkajKtbQe1MsBiXurV
gZHMSg1Yho4kEk+RRGq793iCrV0s8CgPGtnnjB4HaUjocY82x3wSU7OroyEy+COD
N00RS2ZELynmNwDtnwCknnGdpzx1apHWXPWb/HgSrBU2Nx3DxBMEuATZaGN5saHj
Ag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org