Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a333430303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a333430303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          a9AdUBsO2u6J3iibn7JOlXuQ8JXKvMZPJIfgdI05p3I=
Subject key identifier:   ED:0D:03:9D:BB:7E:E3:E9:D2:50:F2:CB:08:CC:9D:A8:A8:AF:18:D5
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       443E6AAED1103BB68715D6D7121EDB0406E1F718
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a333430303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 19:38:07 +0000
ROA not before:           Thu 17 Nov 2022 19:33:07 +0000
ROA not after:            Thu 16 Nov 2023 19:38:07 +0000
asID:                     268430
IP address blocks:        2804:5118:3400::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3e:6a:ae:d1:10:3b:b6:87:15:d6:d7:12:1e:db:04:06:e1:f7:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 19:33:07 2022 GMT
            Not After : Nov 16 19:38:07 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:da:55:23:17:a1:7e:9a:7c:72:07:85:35:81:
                    f5:5f:2a:03:a7:7c:6b:42:38:67:ca:83:c0:19:60:
                    fc:16:b9:a7:49:b1:e9:76:9e:1c:cf:12:d7:d0:fe:
                    cb:1e:75:c7:81:54:8f:d2:45:0a:4d:31:1d:57:b5:
                    d1:b6:18:49:2c:28:1e:63:6f:64:da:db:d3:5b:d5:
                    f1:ff:56:0c:27:10:59:7d:e6:d3:d4:97:b0:14:df:
                    1d:2a:a8:b9:c8:9b:67:60:2e:8f:e4:f5:a3:33:67:
                    c3:dc:3b:27:2b:23:23:c1:b1:8d:41:9f:f2:bb:50:
                    4a:d7:e5:c2:aa:8d:b7:3c:45:80:43:d0:94:07:34:
                    bd:5d:2f:90:83:47:51:c3:9a:d1:b7:20:5f:e7:d4:
                    cc:f8:33:ae:23:9c:fd:9a:25:51:e4:09:98:61:1c:
                    a6:31:2f:c0:09:76:89:41:ca:7a:b9:d0:36:24:8e:
                    88:ba:2a:4e:6b:b2:02:d5:a5:b3:86:3f:45:17:83:
                    1e:c8:da:e5:75:59:26:f0:85:4c:e6:da:21:b9:67:
                    39:0b:f0:3f:ea:46:80:d1:bd:0a:bc:54:15:53:17:
                    5c:f7:9e:ee:80:80:1f:55:89:a3:50:bf:9d:00:2b:
                    17:6c:31:ec:81:f7:22:bf:5b:1f:62:30:61:46:6a:
                    f9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0D:03:9D:BB:7E:E3:E9:D2:50:F2:CB:08:CC:9D:A8:A8:AF:18:D5
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a333430303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:53:60:b3:33:d3:4c:06:18:ab:49:f8:db:17:1b:6a:fc:cd:
         db:de:63:fd:0b:69:c2:21:c4:13:a1:22:b9:ab:70:af:c0:70:
         62:48:79:70:52:32:a7:b0:25:4f:66:3e:f9:a9:b2:be:20:67:
         5e:42:53:a7:dd:fb:3b:34:6d:42:25:e4:72:68:b3:a6:3e:39:
         c4:ce:e3:b5:a3:49:5d:1d:ab:de:c1:87:5b:d3:27:58:37:66:
         8e:89:3e:a8:2f:28:7e:66:52:70:18:03:fa:5f:0a:65:77:8a:
         c3:38:fc:05:b3:2c:23:01:bb:df:4c:87:fd:0f:66:36:15:5d:
         99:01:5a:26:aa:68:78:a6:66:c8:f4:76:8b:4e:f3:37:b5:6c:
         8d:51:f0:f3:e2:30:fc:d9:ad:15:60:e2:b2:f5:54:23:f9:61:
         39:7e:e7:80:a6:02:58:fd:cf:5a:c0:8d:8f:a2:60:60:dd:d4:
         44:d6:d9:0a:b0:ed:00:ee:79:88:38:e7:a9:dd:dc:47:cf:91:
         c6:1a:73:d1:70:44:3a:2f:44:45:00:5c:ac:df:81:5f:3e:95:
         c8:57:cb:ba:d0:1a:65:5f:c9:19:a2:91:0d:d3:fe:c7:8e:ac:
         cc:7e:19:70:5c:08:6f:8d:27:33:0a:75:a0:63:13:d4:0e:a7:
         45:a6:39:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org