Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a336330303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a336330303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          GRqkfyERqI1hY4zpEq9xWPaZ45ikvNdMX9WB61mwklk=
Subject key identifier:   D7:D4:44:D3:FE:C1:D8:DC:32:C5:C8:CE:64:BD:AC:DD:F1:B1:C6:20
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       191C2972FA56CC2B2AAF6881EE92C3E1EAF04260
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a336330303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 19:41:41 +0000
ROA not before:           Thu 17 Nov 2022 19:36:41 +0000
ROA not after:            Thu 16 Nov 2023 19:41:41 +0000
asID:                     268430
IP address blocks:        2804:5118:3c00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:1c:29:72:fa:56:cc:2b:2a:af:68:81:ee:92:c3:e1:ea:f0:42:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 19:36:41 2022 GMT
            Not After : Nov 16 19:41:41 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:95:6f:18:a0:f7:36:1b:ee:f9:cf:b1:40:21:
                    d0:15:c6:7a:54:5e:0a:fb:db:15:d9:19:70:89:0f:
                    4e:12:40:17:1c:8b:31:46:1f:88:80:23:bf:b2:8d:
                    21:99:4f:9e:7f:d7:5f:f7:19:ef:ce:84:d5:00:fe:
                    ba:33:a7:f3:2e:a7:5f:c4:68:1d:01:8b:93:f5:24:
                    ec:1c:ef:5d:a7:93:64:67:c9:37:51:98:f1:a4:7a:
                    e4:40:6c:68:05:c2:b5:5f:03:78:22:11:8e:dc:df:
                    1e:e0:d6:96:49:ff:93:0b:2e:91:ad:9b:1e:52:e2:
                    0e:ae:b5:89:0d:bd:58:a6:f2:3e:3b:72:ad:ce:f9:
                    b5:4f:9c:fd:13:42:69:b4:89:2c:73:e9:a6:68:6f:
                    ba:ca:d3:74:60:65:e0:e2:e3:5d:00:81:dd:cb:73:
                    38:ad:fb:e4:d5:f0:f8:cc:cc:87:5c:99:9f:11:79:
                    83:da:74:83:9c:23:44:a3:29:33:e6:06:9c:8e:02:
                    cb:50:cb:7a:dc:5c:06:57:b5:0c:a8:6c:e0:33:21:
                    c9:d2:04:8f:94:db:6f:5f:0e:18:03:11:e6:d3:7d:
                    64:56:d6:b8:d2:fb:e2:8d:96:f3:46:0a:0c:63:4e:
                    2c:b3:7e:ad:3f:9a:b8:c0:6b:da:27:7f:16:ba:ea:
                    cf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D4:44:D3:FE:C1:D8:DC:32:C5:C8:CE:64:BD:AC:DD:F1:B1:C6:20
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a336330303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:3c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:03:59:f3:69:ce:86:75:10:db:d1:a8:62:fd:98:d9:2c:1c:
         57:04:2a:ac:99:6f:cc:a0:52:d3:33:27:e3:c6:52:18:ae:a9:
         1b:05:60:24:67:46:ab:45:c7:96:11:f5:50:aa:45:6b:ad:b4:
         84:2b:be:e5:7e:13:17:6a:56:6c:b0:5c:5a:ac:0d:4e:29:31:
         8d:cb:d5:40:c5:eb:2e:0a:c4:cf:32:e6:1e:9b:37:3c:7a:28:
         aa:d2:bc:32:23:03:45:e3:55:0a:ed:db:fa:bd:93:c5:98:c2:
         af:ff:6e:23:9b:9e:46:d9:c5:7d:75:81:12:0a:22:25:c8:8a:
         79:1e:a7:c1:67:80:89:be:ca:66:2f:c4:47:62:11:60:8e:1a:
         90:1e:36:77:5e:3e:fc:2d:7f:2b:13:c9:14:49:ae:7d:93:ba:
         95:e0:06:6a:db:b7:da:73:54:24:11:c2:37:74:eb:7f:20:13:
         62:59:fd:56:73:3f:a0:18:0d:7d:9f:47:a1:04:6a:61:c5:be:
         cf:30:8d:32:a2:9e:dc:43:64:f5:9d:be:ac:f2:17:e7:d6:50:
         54:b6:5f:bb:4c:4c:c5:85:94:fe:ff:a8:9c:a4:82:0b:a1:6f:
         33:02:d0:80:9a:d7:2e:47:d3:bc:dc:80:99:4d:66:d2:02:53:
         04:14:fd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org