Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a333030303a3a2f33362d3336203d3e20323638343330.roa
File:                     323830343a353131383a333030303a3a2f33362d3336203d3e20323638343330.roa (raw, json)
Hash identifier:          kPZ959ZuRWRRMOswL+brYOAPU0dMXadJYsmEMkBdAYo=
Subject key identifier:   00:68:B7:D8:BD:95:0F:54:50:FD:F5:E6:73:70:AE:7E:F9:5A:A1:C9
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       190015BB9C2C798A3E9B7B6FA8598A6B2A39F095
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a333030303a3a2f33362d3336203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 18:42:19 +0000
ROA not before:           Thu 17 Nov 2022 18:37:19 +0000
ROA not after:            Thu 16 Nov 2023 18:42:19 +0000
asID:                     268430
IP address blocks:        2804:5118:3000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:00:15:bb:9c:2c:79:8a:3e:9b:7b:6f:a8:59:8a:6b:2a:39:f0:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 18:37:19 2022 GMT
            Not After : Nov 16 18:42:19 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:11:81:b8:f9:e9:16:d1:d3:fa:36:f2:60:3f:
                    bf:37:53:6b:b0:78:f7:e6:42:e3:02:43:d6:b0:23:
                    cd:32:a9:78:a6:aa:10:31:ac:80:cd:32:9b:e3:49:
                    57:68:ee:28:92:f2:61:75:bf:68:9a:ef:d8:f6:31:
                    2c:3e:64:29:71:69:75:8e:48:a5:a3:a3:a8:bf:46:
                    50:e2:2a:e6:4d:3a:6a:79:69:17:c0:96:e2:a8:99:
                    fe:cc:1d:d2:a2:75:6f:a1:9c:ca:aa:27:b0:2c:5f:
                    01:4d:e3:a0:95:ba:ed:60:29:c3:91:3d:ca:d0:57:
                    73:11:92:13:be:c6:ab:3c:12:d7:a6:84:c9:44:06:
                    31:d8:f5:cd:ed:fc:1d:d9:d7:89:08:f3:a0:e9:5d:
                    84:21:9c:f8:53:21:f4:8a:34:67:38:e2:80:63:1e:
                    0a:ec:21:77:69:6c:43:2f:4a:bf:9d:2d:a2:10:4f:
                    f9:9b:b4:7a:65:9e:c8:f9:4e:85:11:a5:24:9e:ed:
                    db:c0:6b:7a:ce:d2:7c:ad:fa:bb:08:2e:b0:13:9e:
                    db:47:d8:15:da:c8:b7:6c:b9:02:53:af:09:34:4e:
                    3d:53:25:88:11:5b:f3:05:45:ee:f5:68:c0:8f:a8:
                    92:a4:10:e6:a2:57:7d:96:90:19:db:43:e4:ec:13:
                    7b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:68:B7:D8:BD:95:0F:54:50:FD:F5:E6:73:70:AE:7E:F9:5A:A1:C9
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a333030303a3a2f33362d3336203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ba:bc:49:77:0f:e5:42:73:aa:a8:a1:9c:da:bd:4f:85:cd:57:
         c1:de:d4:19:81:56:ee:ca:fa:84:03:57:77:cb:69:64:f0:5c:
         e9:f0:ba:27:47:dc:d6:a0:0d:82:b9:f3:6c:e8:e5:9b:82:4f:
         69:df:6f:88:75:1c:fc:30:6f:06:8e:75:86:06:90:7b:cb:66:
         f0:fc:e9:0b:55:cb:f6:0b:89:3c:7f:e6:ab:84:b3:e8:4a:7c:
         a9:68:0f:87:89:65:3c:12:87:a6:6a:3a:2d:7d:6a:df:c4:98:
         64:1b:23:ac:9e:59:ed:de:c1:ec:4f:38:6f:7c:90:17:06:b3:
         45:93:b7:a9:83:e9:6e:f7:57:bf:2f:c9:f2:ab:c8:fe:68:18:
         aa:d2:04:26:68:fc:21:9b:bd:35:97:40:35:c8:c8:79:c5:cb:
         c4:aa:86:94:f3:80:2d:e1:24:63:6b:36:e7:70:9b:15:51:f9:
         b1:8e:ed:51:44:89:00:5e:8b:8c:5a:53:73:92:b6:2f:f6:53:
         6c:f9:ec:bc:e7:92:6c:1d:b9:cb:9b:67:0c:91:8f:f0:fd:0b:
         a1:41:55:d4:a0:8b:ac:08:78:cc:b3:44:72:ab:bb:7d:ac:51:
         3e:23:94:1d:fb:04:4c:9f:73:60:10:2f:31:e9:a6:66:33:db:
         65:4a:30:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org