Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a343030303a3a2f34302d3430203d3e20323638343330.roa
File:                     323830343a353131383a343030303a3a2f34302d3430203d3e20323638343330.roa (raw, json)
Hash identifier:          /mF8/E/+L1iP+Ha5EuYPBAHpX1PpLTzXsc/TabdhPSI=
Subject key identifier:   DB:09:1E:64:66:9E:0D:0F:7D:CC:AF:50:7C:E4:C0:F6:8C:AA:CC:48
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       4AF73B3F37F1FCA043D646D1DEF48F4FA66BD111
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a343030303a3a2f34302d3430203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 02:57:02 +0000
ROA not before:           Thu 17 Nov 2022 02:52:02 +0000
ROA not after:            Thu 16 Nov 2023 02:57:02 +0000
asID:                     268430
IP address blocks:        2804:5118:4000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f7:3b:3f:37:f1:fc:a0:43:d6:46:d1:de:f4:8f:4f:a6:6b:d1:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 02:52:02 2022 GMT
            Not After : Nov 16 02:57:02 2023 GMT
        Subject: CN=3082010A0282010100DE454D2DB6F7976E8EEF940655C8CE32F40CF573978F79165D0537C5DE6C99D06B67B9B9B6359DC89103CE5462F20555FF8219C9B283A3A74FE176CE3AE2BB1D43C70217BD0F572CAF0BFEF33451433DE85546C5538F179DF0942AF670EB964E5216F4CA43C794F2ACD60F1C02FF8C5C373110C9D0ABDA867527B30021D357E4A3812E37C3A88BA98CCE13FDEF2C35AB7371950237EA0A14BB05FCB0912C3607036DE631CADB3C9B677EEDB5014D4203D6D19C206EEAED7FA8261CBEE68CC3BD5E5721ACDBC61E75F932076F7DF5C29AC8F2466C71155CFD085CF468A882980D7DDCF746BA2C378F3E5D201BF844A1E6F64FBC387E0E0C1C297117F8DF49346F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:45:4d:2d:b6:f7:97:6e:8e:ef:94:06:55:c8:
                    ce:32:f4:0c:f5:73:97:8f:79:16:5d:05:37:c5:de:
                    6c:99:d0:6b:67:b9:b9:b6:35:9d:c8:91:03:ce:54:
                    62:f2:05:55:ff:82:19:c9:b2:83:a3:a7:4f:e1:76:
                    ce:3a:e2:bb:1d:43:c7:02:17:bd:0f:57:2c:af:0b:
                    fe:f3:34:51:43:3d:e8:55:46:c5:53:8f:17:9d:f0:
                    94:2a:f6:70:eb:96:4e:52:16:f4:ca:43:c7:94:f2:
                    ac:d6:0f:1c:02:ff:8c:5c:37:31:10:c9:d0:ab:da:
                    86:75:27:b3:00:21:d3:57:e4:a3:81:2e:37:c3:a8:
                    8b:a9:8c:ce:13:fd:ef:2c:35:ab:73:71:95:02:37:
                    ea:0a:14:bb:05:fc:b0:91:2c:36:07:03:6d:e6:31:
                    ca:db:3c:9b:67:7e:ed:b5:01:4d:42:03:d6:d1:9c:
                    20:6e:ea:ed:7f:a8:26:1c:be:e6:8c:c3:bd:5e:57:
                    21:ac:db:c6:1e:75:f9:32:07:6f:7d:f5:c2:9a:c8:
                    f2:46:6c:71:15:5c:fd:08:5c:f4:68:a8:82:98:0d:
                    7d:dc:f7:46:ba:2c:37:8f:3e:5d:20:1b:f8:44:a1:
                    e6:f6:4f:bc:38:7e:0e:0c:1c:29:71:17:f8:df:49:
                    34:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:09:1E:64:66:9E:0D:0F:7D:CC:AF:50:7C:E4:C0:F6:8C:AA:CC:48
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a343030303a3a2f34302d3430203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:75:8b:7b:1d:89:d4:b2:3a:8b:a3:f1:22:0e:31:f6:80:7a:
         e2:0e:bf:16:73:c5:d4:9a:4c:fb:f1:6f:8b:4c:37:5a:59:83:
         38:f2:62:27:85:07:19:f4:5c:ff:be:ad:61:85:f0:e8:09:99:
         7c:e5:31:e5:17:73:48:1b:c5:1c:de:26:38:d3:5c:1c:9e:0c:
         cb:46:36:65:83:b8:39:46:2a:48:11:2e:4c:42:bb:0b:32:be:
         1b:d8:ac:4b:75:d0:ca:2b:3f:47:4e:a2:de:92:0f:82:b4:59:
         03:65:8b:d6:c3:f6:f1:8b:b8:a5:87:cd:af:44:a1:bd:cc:6c:
         ef:67:dc:cd:04:0f:60:31:d3:9f:4f:7d:93:2d:16:0c:34:0e:
         ce:81:a6:b9:2d:19:8d:e3:99:eb:25:c9:3e:32:0b:ca:ed:72:
         60:5c:32:cf:42:68:39:6f:f2:b1:d3:97:9d:85:39:13:3a:8f:
         63:20:74:f5:4e:79:95:c8:2a:1c:67:52:7d:27:65:11:bc:72:
         ef:cf:19:0b:ab:d3:19:58:22:42:8f:19:66:23:97:7e:82:73:
         78:05:b1:b7:e3:85:a8:0b:02:29:03:f6:f3:a9:16:e4:0c:4d:
         7d:59:5c:8d:f2:ab:50:99:a4:79:00:ae:ae:f9:4b:48:9d:ff:
         31:87:44:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org