Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a353030303a3a2f33362d3336203d3e20323638343330.roa
File:                     323830343a353131383a353030303a3a2f33362d3336203d3e20323638343330.roa (raw, json)
Hash identifier:          4CoAR84C9y1RgdjRN9QCIjc382pmgUjP0Gym41MgjNc=
Subject key identifier:   65:F0:5E:52:EE:E0:C3:86:82:60:2D:23:E2:FA:CF:B4:DA:FC:54:8E
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       654DE1BEC8922449EA38E281CF679CB45456BF3E
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a353030303a3a2f33362d3336203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 18:42:34 +0000
ROA not before:           Thu 17 Nov 2022 18:37:34 +0000
ROA not after:            Thu 16 Nov 2023 18:42:34 +0000
asID:                     268430
IP address blocks:        2804:5118:5000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:4d:e1:be:c8:92:24:49:ea:38:e2:81:cf:67:9c:b4:54:56:bf:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 18:37:34 2022 GMT
            Not After : Nov 16 18:42:34 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c1:49:9b:2f:a2:26:a2:8b:54:aa:be:68:30:
                    79:41:f8:00:c6:ee:5e:45:13:59:ff:ba:66:bc:70:
                    d9:11:92:d6:d3:6f:c7:8d:31:0c:89:6e:64:07:2d:
                    81:2f:ac:89:d8:fc:bd:a0:a2:2a:b6:f6:dc:45:7c:
                    92:94:d6:48:62:0e:60:c5:0b:8f:ae:1f:52:59:57:
                    0a:0d:c2:33:bb:4c:85:46:af:1d:50:8c:bd:ae:a9:
                    09:a5:21:b2:db:9c:6c:67:44:77:2d:7e:8d:27:9d:
                    f1:23:eb:bd:63:62:2e:58:cf:b3:29:e8:d8:71:14:
                    fa:69:37:4a:fb:6b:4a:cb:2f:be:b2:f1:68:d6:59:
                    97:8f:f7:2e:15:ba:84:78:89:49:86:c6:2c:9c:97:
                    4b:6a:71:20:3b:1b:23:99:2a:eb:7b:80:4b:db:96:
                    02:dc:50:e1:93:ff:1c:14:6c:7d:b9:b4:a0:cc:e8:
                    66:9f:34:5e:9f:3f:c3:84:4a:49:20:1a:cc:8c:fd:
                    84:ff:e1:f6:f1:31:48:2a:da:50:45:f7:80:61:9a:
                    61:25:f9:a4:0b:88:db:2c:31:d4:be:fa:c7:76:d2:
                    45:cb:e3:19:9f:ca:74:5a:22:20:c6:21:cb:40:79:
                    94:7a:78:44:28:bc:97:2b:b8:9e:ed:6c:97:6c:27:
                    21:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F0:5E:52:EE:E0:C3:86:82:60:2D:23:E2:FA:CF:B4:DA:FC:54:8E
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a353030303a3a2f33362d3336203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ae:f6:aa:11:fa:8d:fb:80:45:03:86:bd:4a:75:84:6e:ac:7a:
         5d:d8:fd:57:c8:09:2a:44:02:5c:26:8d:7f:77:9b:00:7c:e5:
         e2:56:2d:46:27:ae:1a:94:db:ff:c9:49:b8:87:98:f4:d5:8c:
         dd:4e:0f:cf:2b:c2:e4:db:5b:23:bf:e9:1e:ad:a5:cb:15:05:
         49:0b:de:ea:93:ba:a3:7b:61:fb:fe:74:90:9b:98:39:4a:29:
         15:e3:ee:ba:74:c0:ea:72:3d:bb:c1:9f:ef:9e:f8:66:bb:97:
         c6:fb:f9:02:15:91:c4:a4:78:d9:b7:a7:6b:c0:75:bf:27:72:
         c4:b3:72:1c:1a:e1:bd:e0:10:79:59:39:bb:20:fd:11:75:ae:
         dc:b3:2a:37:e0:d9:cb:a5:7e:93:35:9c:09:9a:b2:45:e6:3b:
         80:74:cc:df:69:df:0a:e6:5a:e4:8d:0f:86:8b:5c:42:1e:83:
         18:60:fa:38:e6:c8:a4:ae:81:8c:2e:55:6e:11:bb:d5:1d:a0:
         2a:9e:1f:98:99:34:5d:1f:09:a1:1f:5b:55:12:e7:51:ae:d4:
         1e:e9:b7:32:1b:91:44:f9:fb:9b:eb:9f:ff:ee:cd:bb:57:71:
         bc:ac:d8:f7:8e:ef:e9:d8:96:8f:c0:cd:95:c9:e8:d0:c7:95:
         2d:fa:5b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org