Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a333630303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a333630303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          LRom7DzESdYrbi+6zz/vN4uAUUTF7IUjZauswAHv0cQ=
Subject key identifier:   AB:0A:0F:8D:AF:5C:10:D5:45:AD:A1:51:D5:5E:95:7A:5A:24:23:CA
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       209BF4744908A6A5D8619D275FB069C41DAE599B
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a333630303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 19:39:14 +0000
ROA not before:           Thu 17 Nov 2022 19:34:14 +0000
ROA not after:            Thu 16 Nov 2023 19:39:14 +0000
asID:                     268430
IP address blocks:        2804:5118:3600::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:9b:f4:74:49:08:a6:a5:d8:61:9d:27:5f:b0:69:c4:1d:ae:59:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 19:34:14 2022 GMT
            Not After : Nov 16 19:39:14 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b6:22:bf:12:dd:f4:d8:e1:c4:1f:65:de:e7:
                    4e:50:18:c6:e4:78:1e:04:85:e4:9f:83:a9:a6:a6:
                    eb:54:76:17:38:7b:12:b0:10:19:4d:b9:7b:eb:e3:
                    22:f7:68:ed:eb:09:49:25:c2:eb:4c:75:d8:55:4c:
                    18:d7:e9:39:bc:be:8d:cb:6e:5e:03:2f:cc:d3:05:
                    90:91:ab:0e:96:25:24:e7:b2:bc:2e:12:dc:9c:59:
                    55:2c:29:62:83:24:c7:35:ac:63:5b:b5:e2:31:1d:
                    9b:b2:c6:0a:98:5f:01:2c:87:f3:29:f0:a7:5d:5f:
                    76:f4:06:77:2a:00:52:9e:6e:a0:fe:9c:60:8c:8f:
                    f0:0c:5e:05:2a:1b:70:3f:a2:09:7e:97:15:7e:f5:
                    93:90:99:ad:99:44:76:83:5c:e1:b1:2c:9d:5d:0e:
                    26:9d:ce:6d:49:65:98:a1:41:78:17:a6:b8:ed:0d:
                    71:9f:e9:3f:fa:05:c5:86:39:ab:7c:31:87:ff:09:
                    48:a4:c2:1e:68:61:e7:0c:fd:03:54:fd:3d:e5:b1:
                    20:12:36:ca:8f:2f:97:97:e2:88:33:be:2a:1d:6e:
                    f8:80:a9:48:df:ca:cb:93:10:d5:aa:7e:22:7a:92:
                    ca:6d:c6:e0:e7:eb:bf:e7:a0:bb:9d:b4:c9:4d:81:
                    9b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0A:0F:8D:AF:5C:10:D5:45:AD:A1:51:D5:5E:95:7A:5A:24:23:CA
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a333630303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:3600::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:7b:27:8a:40:23:1d:5f:80:0b:5f:03:30:f6:73:7d:17:f2:
         2b:e0:2e:39:ab:ed:f3:fa:30:bc:29:18:04:0d:56:66:88:e4:
         61:c2:9e:d4:79:07:42:00:1b:e1:cd:37:d6:4d:bd:24:b8:8e:
         61:78:9c:b9:55:58:ea:10:70:55:39:2a:90:f1:17:87:71:92:
         c0:22:02:8d:48:cc:26:3b:8a:aa:41:a2:3c:39:3e:1d:d2:50:
         45:80:f2:3d:84:21:e2:c1:78:fa:53:95:32:db:36:af:ff:bf:
         4e:cb:82:ca:72:b9:10:43:69:db:b6:be:c5:55:d1:5c:79:3c:
         cf:01:75:40:16:17:a5:00:df:6e:ca:e8:d5:51:bd:a2:9c:5a:
         95:28:b0:d2:18:9c:bb:ee:6c:d7:b6:8c:4e:0c:26:04:8c:a7:
         4b:2d:6f:91:73:8d:6a:77:4d:b6:29:75:bd:99:63:99:5d:16:
         74:63:2e:55:7a:3d:54:3d:46:4d:37:d6:38:8f:d1:85:94:15:
         fc:33:82:c0:54:f4:d5:c2:55:79:d3:89:44:83:95:9d:7a:a4:
         72:30:e4:34:34:72:fa:e2:99:9c:41:8c:00:a6:87:83:bb:37:
         d9:a8:0d:45:9d:df:8e:81:ba:b7:d1:1c:8a:93:cb:86:1f:94:
         19:fa:7d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org