Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a333030303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a333030303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          hgDZvN0C9w18xnzjXn8JFqCfOeL253ZkrPWT1tvRiA4=
Subject key identifier:   CE:C7:EB:B0:E2:06:E9:03:9C:EE:25:39:71:8F:86:62:F9:D2:72:43
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       4E70D32709A2C93A836569D6779B9CCB688E392D
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a333030303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 19:04:20 +0000
ROA not before:           Thu 17 Nov 2022 18:59:20 +0000
ROA not after:            Thu 16 Nov 2023 19:04:20 +0000
asID:                     268430
IP address blocks:        2804:5118:3000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:70:d3:27:09:a2:c9:3a:83:65:69:d6:77:9b:9c:cb:68:8e:39:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 18:59:20 2022 GMT
            Not After : Nov 16 19:04:20 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1e:47:f5:83:de:03:f1:86:ef:fa:32:2f:d1:
                    a3:14:db:4e:d1:9f:f2:82:71:92:cf:f3:5c:ce:46:
                    1e:54:7e:a6:91:fe:e7:37:3c:ed:48:f1:ff:f8:71:
                    69:e3:22:24:2b:2b:f3:71:4c:c2:95:90:47:5c:37:
                    5c:15:bc:75:ff:fc:51:53:d2:cc:bf:35:d1:78:fa:
                    98:e9:73:ed:6d:55:b7:5d:05:60:e9:4d:62:3c:90:
                    0f:3e:99:df:2e:7c:d9:dd:46:9f:d0:0d:90:2b:fe:
                    96:6f:fc:ad:53:20:3c:b9:85:1e:8e:8c:c8:58:d0:
                    c8:27:9c:aa:00:a4:68:f2:61:7b:2f:13:1f:f3:26:
                    67:6e:a8:19:14:00:74:0e:da:e1:61:a8:56:dd:9d:
                    4b:27:af:b9:9e:b2:1c:1c:82:e2:78:85:fb:dc:57:
                    47:33:62:c9:ea:00:ec:46:81:28:b5:d5:2e:99:2e:
                    dd:44:2f:4a:f5:61:95:c3:20:f4:f6:f0:7a:ef:5e:
                    f0:17:72:6a:19:84:e1:cb:30:07:e7:65:40:6c:db:
                    1f:d6:ef:d4:72:a9:1a:2b:33:44:c5:13:34:43:f6:
                    ed:0e:05:1e:73:6c:2b:9c:7c:38:45:f7:14:56:1e:
                    b7:1d:5e:32:35:c8:bc:1c:ed:4e:73:17:37:a7:0d:
                    b0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C7:EB:B0:E2:06:E9:03:9C:EE:25:39:71:8F:86:62:F9:D2:72:43
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a333030303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         19:19:d6:4e:0e:1c:56:cd:df:bc:53:3b:7c:1d:82:eb:5d:ae:
         48:8a:f0:a2:0a:e7:13:2b:c1:c0:09:90:4e:13:26:81:bd:69:
         71:7d:d1:29:b7:34:cf:63:3e:ba:3b:91:e2:f2:dc:79:bc:26:
         68:bc:b0:ad:4e:52:61:0e:a1:81:fb:84:6a:26:be:e4:6f:3e:
         3f:c6:19:c2:75:63:23:dd:b7:d7:f5:b5:b6:11:ea:d2:07:79:
         26:16:31:52:f1:20:18:1e:f1:2c:58:d6:5c:50:ca:a3:74:2c:
         94:e5:13:3b:28:34:c9:81:a9:ab:eb:00:70:8a:71:2d:b6:4b:
         26:db:2a:7f:f7:72:fd:27:35:fd:06:6e:25:96:8a:d9:91:fd:
         e7:7d:c4:66:59:76:3b:11:8f:50:6c:f4:c4:36:a2:a1:8c:15:
         ed:d0:a2:97:58:1e:42:52:21:e8:20:b8:27:bd:f4:57:ca:42:
         21:d3:7b:72:72:34:c3:03:a2:73:4a:f3:c2:c9:70:0c:b4:e3:
         2e:a9:d6:d0:ae:55:c7:a0:29:9f:f7:ed:39:cd:eb:61:c2:52:
         4d:70:3e:95:4f:1f:4a:d4:44:6d:76:d2:43:74:e1:35:d5:fc:
         d0:fb:e5:4c:5a:8c:66:76:ca:26:4b:ef:c3:22:80:4b:9b:56:
         ed:63:dc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org