Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a336430303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a336430303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          uVzOlL49C5OmROHOnS7pWbcgLX8VLiX5tjl4sdIN47E=
Subject key identifier:   96:C9:D8:95:28:99:2E:00:F2:70:69:46:E8:92:99:03:19:30:8A:65
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       2A78A5651E27A1ACAE0EF3C8DC2F55EC48CDA6C1
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a336430303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 19:42:01 +0000
ROA not before:           Thu 17 Nov 2022 19:37:01 +0000
ROA not after:            Thu 16 Nov 2023 19:42:01 +0000
asID:                     268430
IP address blocks:        2804:5118:3d00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:78:a5:65:1e:27:a1:ac:ae:0e:f3:c8:dc:2f:55:ec:48:cd:a6:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 19:37:01 2022 GMT
            Not After : Nov 16 19:42:01 2023 GMT
        Subject: CN=3082010A0282010100B12F7234EF0F97FB3BE402F272799BED0FF6186B90859DB63501D590D7064ECB1EA78D8DA2A003B0148F7C59B7C66C9F88DBEB62D1D047161B4AA24D54A93168FA6B71FA232559E14073131ECED2E0E3CE2131AC957703B06EEC857874179BD357BBF1DD0190A47B714112E7F648C1F5D75F1ABE0E669720322ACD1A8B89AB665C9C8274D90C0C29C294A13A92317B7369492FA0CA4E13B912C77154BE728AD86E2A04EB61BB31EA115AB210F89D0B15CEB550B06A8D56CC8813EC45CED3B8E47AEB5B60DA3F0AC31DC10E49EE5D0FFEC84608560BEEB10F7D9A2A1EA3D1821D60C78BE53C00A0AC988D120EA65318FDC9B64EE44E2AD61D9131B934645B8CBD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2f:72:34:ef:0f:97:fb:3b:e4:02:f2:72:79:
                    9b:ed:0f:f6:18:6b:90:85:9d:b6:35:01:d5:90:d7:
                    06:4e:cb:1e:a7:8d:8d:a2:a0:03:b0:14:8f:7c:59:
                    b7:c6:6c:9f:88:db:eb:62:d1:d0:47:16:1b:4a:a2:
                    4d:54:a9:31:68:fa:6b:71:fa:23:25:59:e1:40:73:
                    13:1e:ce:d2:e0:e3:ce:21:31:ac:95:77:03:b0:6e:
                    ec:85:78:74:17:9b:d3:57:bb:f1:dd:01:90:a4:7b:
                    71:41:12:e7:f6:48:c1:f5:d7:5f:1a:be:0e:66:97:
                    20:32:2a:cd:1a:8b:89:ab:66:5c:9c:82:74:d9:0c:
                    0c:29:c2:94:a1:3a:92:31:7b:73:69:49:2f:a0:ca:
                    4e:13:b9:12:c7:71:54:be:72:8a:d8:6e:2a:04:eb:
                    61:bb:31:ea:11:5a:b2:10:f8:9d:0b:15:ce:b5:50:
                    b0:6a:8d:56:cc:88:13:ec:45:ce:d3:b8:e4:7a:eb:
                    5b:60:da:3f:0a:c3:1d:c1:0e:49:ee:5d:0f:fe:c8:
                    46:08:56:0b:ee:b1:0f:7d:9a:2a:1e:a3:d1:82:1d:
                    60:c7:8b:e5:3c:00:a0:ac:98:8d:12:0e:a6:53:18:
                    fd:c9:b6:4e:e4:4e:2a:d6:1d:91:31:b9:34:64:5b:
                    8c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C9:D8:95:28:99:2E:00:F2:70:69:46:E8:92:99:03:19:30:8A:65
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a336430303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:3d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         58:d8:64:0e:5d:9b:c2:04:ec:8d:fa:d9:7f:d2:1a:94:2d:15:
         49:19:13:3c:21:69:80:af:cb:84:c3:a8:b2:2a:d3:d1:79:b5:
         26:b7:53:ea:26:e8:05:9e:dd:6e:81:aa:70:45:d8:0c:78:cc:
         cf:3a:7c:a3:e0:40:5d:9a:72:04:a5:ea:89:cc:9f:a5:1b:64:
         e8:5b:d7:6b:01:e1:00:c9:5c:ac:c9:d8:95:f8:0a:b4:9e:29:
         e7:a6:ae:95:9a:d1:1c:a9:4b:e9:ed:05:d6:d8:54:84:5f:13:
         46:e0:ba:f4:90:2d:fc:96:4f:8a:fa:35:ca:81:1a:3a:ff:bb:
         ed:9b:cf:04:86:81:f7:6b:fb:6c:02:74:4b:64:2e:3e:9b:d9:
         c1:0b:22:90:fa:87:1e:71:8a:a4:51:62:e2:ec:71:fc:2b:e6:
         da:4d:8d:c9:2d:08:a1:3d:e3:77:61:d7:be:f6:a0:ba:c2:96:
         c8:85:48:56:b2:31:a4:b4:5b:a0:9e:ad:f2:67:cc:9b:7b:c5:
         45:20:4b:6a:87:b0:af:be:d9:b9:49:84:8d:7a:4a:b9:e1:8d:
         2d:d4:7f:e0:97:04:53:4e:03:f8:6a:78:6a:90:04:26:07:5d:
         66:6d:aa:b7:0c:ef:a2:00:c5:66:04:09:38:4d:b9:08:9e:05:
         89:3d:56:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org