Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a333530303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a333530303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          a48OPC6gap4fdLNcsg+TjBqHSdZ8lt+CFQw9XCN8bIk=
Subject key identifier:   42:5D:FB:D4:25:3E:AB:C2:C2:5D:AE:E0:7D:B3:83:0B:04:43:89:95
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       0282A44D53FA87F110688C054C35B10CE509AFE5
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a333530303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 19:38:43 +0000
ROA not before:           Thu 17 Nov 2022 19:33:43 +0000
ROA not after:            Thu 16 Nov 2023 19:38:43 +0000
asID:                     268430
IP address blocks:        2804:5118:3500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:82:a4:4d:53:fa:87:f1:10:68:8c:05:4c:35:b1:0c:e5:09:af:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 19:33:43 2022 GMT
            Not After : Nov 16 19:38:43 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:14:c5:71:99:1b:c9:21:61:7a:94:bb:39:52:
                    c6:1d:ad:b0:71:3c:12:27:28:09:04:c9:c3:89:0f:
                    a9:52:b5:d9:25:94:a5:7f:e7:07:63:94:b3:60:a4:
                    b5:57:43:a8:66:e8:cc:fa:76:9b:72:18:6a:5a:9f:
                    7d:68:2f:b2:ab:00:c6:cf:cd:f5:df:5b:79:b6:2f:
                    7a:9f:4b:8d:c0:61:42:f2:46:1c:ef:a2:0d:5c:19:
                    2f:c3:0b:16:6b:ab:6a:43:10:fd:15:ca:36:7d:3a:
                    9a:04:27:46:15:5d:df:f8:9f:77:b2:6b:26:e3:fe:
                    9f:8e:33:84:a6:7d:41:bf:f0:ab:b0:03:89:29:a0:
                    74:6a:4e:0f:2a:cc:ba:5d:0e:3c:c8:84:47:e1:10:
                    64:af:c4:34:1a:eb:38:bd:fe:b1:7f:3f:6f:93:0a:
                    f9:c3:67:ae:d3:90:82:84:5b:73:f3:25:5f:66:64:
                    8d:91:e4:aa:30:7f:10:3a:6d:4d:93:b8:8e:4a:da:
                    04:97:c2:ee:04:50:db:e5:88:d1:95:c0:8c:7f:b7:
                    12:c0:89:f1:2d:3b:4a:28:b3:32:3e:4f:9b:43:29:
                    80:75:ca:58:b0:25:07:e9:17:1b:36:c1:f9:ed:2f:
                    62:d0:d8:74:4b:c5:b2:5c:05:b8:bd:2e:4d:1e:20:
                    f0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:5D:FB:D4:25:3E:AB:C2:C2:5D:AE:E0:7D:B3:83:0B:04:43:89:95
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a333530303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:3500::/40

    Signature Algorithm: sha256WithRSAEncryption
         9d:dd:87:f4:42:c0:cf:34:2a:77:7e:66:a6:ff:3e:28:34:9b:
         b0:dc:73:84:ce:64:99:a7:b8:b5:2a:03:9d:34:69:e0:f1:dd:
         da:36:ec:05:b1:a5:1e:e0:c0:03:21:a2:11:af:7a:51:c0:0c:
         ab:7e:9c:cd:b4:ed:06:31:f6:56:d9:8c:18:b9:01:b2:38:c0:
         40:40:8d:93:aa:6c:20:3a:e0:cd:5c:9c:38:0d:dc:01:cd:fe:
         fe:59:04:a8:f0:33:c6:3c:08:83:57:1a:65:a2:1e:76:7b:de:
         c3:de:f9:bd:e1:48:56:5e:8c:4b:14:52:3c:f9:b6:41:80:53:
         c7:08:8f:99:c6:95:d7:f8:fa:a9:ab:c7:b6:d8:07:84:77:5e:
         81:90:d3:cf:45:1e:bb:d1:e0:38:43:9e:e1:d4:f5:d7:a8:5c:
         78:56:00:49:46:c6:23:e4:e4:58:4f:bc:e3:c4:05:7e:db:20:
         9e:64:cd:c1:6a:aa:30:92:98:78:5a:f7:e4:a4:ea:22:5d:3e:
         ab:34:78:f7:a2:63:33:3d:5e:79:99:69:68:1b:cc:e8:1f:68:
         b1:59:9a:22:f7:70:c5:48:89:b1:19:61:ba:95:6d:1e:33:09:
         49:18:45:18:4d:68:d3:2d:c7:21:25:a4:52:4d:6b:2b:c4:a4:
         e0:0e:97:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org