Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a333730303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a333730303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          IFe+aTWAY5qx9Ikwhltp+OLcOUCbYj1r5/BcUrvQxv0=
Subject key identifier:   CD:6D:ED:C2:D9:24:FE:D1:93:7C:1B:15:0B:FB:B9:D7:A9:E4:93:AB
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       1715F0B9B5D1DA063577990EFB7D6C8FA77B7F0E
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a333730303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 19:39:35 +0000
ROA not before:           Thu 17 Nov 2022 19:34:35 +0000
ROA not after:            Thu 16 Nov 2023 19:39:35 +0000
asID:                     268430
IP address blocks:        2804:5118:3700::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:15:f0:b9:b5:d1:da:06:35:77:99:0e:fb:7d:6c:8f:a7:7b:7f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 19:34:35 2022 GMT
            Not After : Nov 16 19:39:35 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:01:28:f2:dc:ae:17:3d:2b:a8:88:26:7f:d5:
                    56:e5:e7:be:15:41:3e:f9:52:c4:46:9a:42:ad:e5:
                    0b:df:b2:a7:ff:1e:31:2c:d1:21:7c:ce:8c:e3:e0:
                    2d:7f:69:c2:63:99:e4:58:d4:9b:9f:08:2c:92:c4:
                    02:86:89:aa:04:06:28:cc:ac:8f:03:41:2f:87:82:
                    5a:70:54:2b:b2:3c:71:e8:c1:72:a1:c3:5a:4b:53:
                    79:f2:c9:75:69:c5:a4:7d:cf:ac:ab:6c:b8:6e:6d:
                    7e:88:eb:47:06:4e:6d:8b:0b:2b:e6:0c:bb:3b:39:
                    6a:fe:76:5b:2b:1d:61:79:fc:14:59:2e:08:59:38:
                    32:eb:d9:71:75:53:11:e5:cb:7d:42:0e:e8:4a:12:
                    8f:c0:3d:86:4f:f3:de:e3:8c:8f:7e:0c:a2:b1:54:
                    2e:d1:fc:fd:0c:3b:7c:2e:32:6f:57:99:68:48:d7:
                    48:a0:4e:c9:89:f6:22:31:50:35:3d:b0:13:65:e5:
                    da:c1:b7:d2:32:f0:a5:ce:71:64:1c:2d:c0:70:d4:
                    1a:b9:4d:4a:56:d7:cc:41:69:2a:d9:cc:c4:1f:ed:
                    e7:f4:96:a1:38:9a:0b:9c:ac:bb:6b:c3:f1:b7:9f:
                    0f:eb:24:b7:28:32:14:cd:d7:0e:41:79:0b:98:52:
                    5f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6D:ED:C2:D9:24:FE:D1:93:7C:1B:15:0B:FB:B9:D7:A9:E4:93:AB
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a333730303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:3700::/40

    Signature Algorithm: sha256WithRSAEncryption
         89:dc:1f:6a:3c:b6:f8:c2:55:6e:23:8a:1b:82:e8:19:df:8e:
         5b:8b:36:48:61:17:de:c4:27:e7:26:61:31:8f:22:dc:f6:4a:
         b5:a2:8c:9d:f3:ea:82:b3:f4:c7:7e:ad:62:9d:19:cf:88:15:
         46:16:62:0b:19:73:0f:c6:0e:38:45:4b:4a:0d:f4:80:2a:1d:
         be:1d:e3:fc:83:e5:8a:71:1c:61:84:7f:1b:bd:ad:3d:b9:2d:
         37:13:be:70:5f:f3:73:da:6a:60:4a:8b:a9:ff:6d:45:c2:96:
         74:01:82:1e:fb:10:18:cf:56:49:b5:43:13:13:06:fd:d0:ab:
         ab:49:16:e0:ea:bf:df:5e:d4:fd:f8:0b:fb:0a:68:74:9a:7b:
         b3:8d:6a:38:d9:c5:c4:ee:d6:9d:ca:45:6c:74:a4:51:fe:5e:
         f7:84:e9:10:a3:1f:f8:3d:48:ac:bd:e2:17:69:1d:ce:60:ad:
         82:82:aa:bd:0f:58:85:33:2f:21:6c:31:22:87:09:c8:56:27:
         31:cb:a8:e4:45:fe:53:21:eb:ac:8e:68:b6:70:77:8b:4b:f3:
         d6:0a:46:13:9c:d4:34:57:24:ee:ed:0a:2f:d8:f0:97:d8:af:
         9f:2b:4b:92:99:5c:c5:c1:bb:14:8a:0e:c6:89:ae:18:42:73:
         f0:85:38:02
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUFxXwubXR2gY1d5kO+31sj6d7fw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUyODgwQzMwNEI1QTRENEYyNUFCMjdEMjVBQ0Q3RUI4
RTY5M0Q5MTAeFw0yMjExMTcxOTM0MzVaFw0yMzExMTYxOTM5MzVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDUwMTI4RjJEQ0FFMTczRDJC
QTg4ODI2N0ZENTU2RTVFN0JFMTU0MTNFRjk1MkM0NDY5QTQyQURFNTBCREZCMkE3
RkYxRTMxMkNEMTIxN0NDRThDRTNFMDJEN0Y2OUMyNjM5OUU0NThENDlCOUYwODJD
OTJDNDAyODY4OUFBMDQwNjI4Q0NBQzhGMDM0MTJGODc4MjVBNzA1NDJCQjIzQzcx
RThDMTcyQTFDMzVBNEI1Mzc5RjJDOTc1NjlDNUE0N0RDRkFDQUI2Q0I4NkU2RDdF
ODhFQjQ3MDY0RTZEOEIwQjJCRTYwQ0JCM0IzOTZBRkU3NjVCMkIxRDYxNzlGQzE0
NTkyRTA4NTkzODMyRUJEOTcxNzU1MzExRTVDQjdENDIwRUU4NEExMjhGQzAzRDg2
NEZGM0RFRTM4QzhGN0UwQ0EyQjE1NDJFRDFGQ0ZEMEMzQjdDMkUzMjZGNTc5OTY4
NDhENzQ4QTA0RUM5ODlGNjIyMzE1MDM1M0RCMDEzNjVFNURBQzFCN0QyMzJGMEE1
Q0U3MTY0MUMyREMwNzBENDFBQjk0RDRBNTZEN0NDNDE2OTJBRDlDQ0M0MUZFREU3
RjQ5NkExMzg5QTBCOUNBQ0JCNkJDM0YxQjc5RjBGRUIyNEI3MjgzMjE0Q0RENzBF
NDE3OTBCOTg1MjVGNjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1QEo8tyuFz0rqIgmf9VW5ee+FUE++VLERppCreUL37Kn/x4xLNEh
fM6M4+Atf2nCY5nkWNSbnwgsksQChomqBAYozKyPA0Evh4JacFQrsjxx6MFyocNa
S1N58sl1acWkfc+sq2y4bm1+iOtHBk5tiwsr5gy7Ozlq/nZbKx1hefwUWS4IWTgy
69lxdVMR5ct9Qg7oShKPwD2GT/Pe44yPfgyisVQu0fz9DDt8LjJvV5loSNdIoE7J
ifYiMVA1PbATZeXawbfSMvClznFkHC3AcNQauU1KVtfMQWkq2czEH+3n9JahOJoL
nKy7a8Pxt58P6yS3KDIUzdcOQXkLmFJfaQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FM1t7cLZJP7Rk3wbFQv7udep5JOrMB8GA1UdIwQYMBaAFB4ogMMEtaTU8lqyfSWs
1+uOaT2RMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dHb2pDY2NaZzdBcEtB
eUdMTktBbmJ3M2NlWWszUTgxNWF0U0RhYzhpd2o3LzAvMUUyODgwQzMwNEI1QTRE
NEYyNUFCMjdEMjVBQ0Q3RUI4RTY5M0Q5MS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xRTI4ODBDMzA0QjVBNEQ0RjI1QUIyN0QyNUFDRDdFQjhFNjkz
RDkxLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HR29qQ2NjWmc3QXBLQXlHTE5L
QW5idzNjZVlrM1E4MTVhdFNEYWM4aXdqNy8wLzMyMzgzMDM0M2EzNTMxMzEzODNh
MzMzNzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM2MzgzNDMzMzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAoBFEYNzANBgkqhkiG9w0BAQsFAAOCAQEAidwfajy2+MJVbiOKG4Lo
Gd+OW4s2SGEX3sQn5yZhMY8i3PZKtaKMnfPqgrP0x36tYp0Zz4gVRhZiCxlzD8YO
OEVLSg30gCodvh3j/IPlinEcYYR/G72tPbktNxO+cF/zc9pqYEqLqf9tRcKWdAGC
HvsQGM9WSbVDExMG/dCrq0kW4Oq/317U/fgL+wpodJp7s41qONnFxO7WncpFbHSk
Uf5e94TpEKMf+D1IrL3iF2kdzmCtgoKqvQ9YhTMvIWwxIocJyFYnMcuo5EX+UyHr
rI5otnB3i0vz1gpGE5zUNFck7u0KL9jwl9ivnytLkplcxcG7FIoOxomuGEJz8IU4
Ag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org