Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3530303a3a2f34302d3430203d3e20323638343330.roa
File:                     323830343a353131383a3530303a3a2f34302d3430203d3e20323638343330.roa (raw, json)
Hash identifier:          nUy1AAi2fPkT4CNnFlmdbiNTMOOallxocV6h30hY3tY=
Subject key identifier:   3A:CC:07:67:91:A9:8F:1F:4E:B7:69:E2:7F:C3:91:26:DF:8C:F4:09
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       77DC9438A7A5A2221F90DA3422FEE4A9ED006432
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3530303a3a2f34302d3430203d3e20323638343330.roa
Signing time:             Wed 16 Nov 2022 14:36:21 +0000
ROA not before:           Wed 16 Nov 2022 14:31:21 +0000
ROA not after:            Wed 15 Nov 2023 14:36:21 +0000
asID:                     268430
IP address blocks:        2804:5118:500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:dc:94:38:a7:a5:a2:22:1f:90:da:34:22:fe:e4:a9:ed:00:64:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 16 14:31:21 2022 GMT
            Not After : Nov 15 14:36:21 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:f1:de:58:b0:3e:71:f0:75:97:93:99:2c:1e:
                    1f:a4:39:95:98:13:b2:ae:fd:f9:fe:04:76:ba:a2:
                    7a:58:28:06:f3:60:fa:74:05:3d:c2:53:5b:a6:c2:
                    e4:f0:63:01:f0:95:46:51:95:21:59:72:14:86:c3:
                    64:4d:90:8f:58:2a:12:db:a4:3f:32:84:4f:78:7e:
                    de:42:13:b3:f4:8c:65:d2:8c:f9:44:37:e8:a0:f0:
                    15:05:ac:db:05:1f:74:21:87:33:cc:40:1a:fb:9c:
                    88:da:9f:cb:ee:06:21:31:c6:2b:ee:1d:04:af:9f:
                    77:a5:06:4d:fb:c6:96:e2:6c:a4:d8:04:23:8e:f8:
                    4d:11:cc:d5:b7:62:d1:2b:e8:a2:41:1e:44:e2:91:
                    fb:c5:13:f7:ca:37:cc:92:af:4b:3a:bd:41:05:6a:
                    a4:ca:c8:b6:bd:a1:14:fb:91:a1:c8:d2:8b:3a:f2:
                    04:22:48:94:d9:8f:b3:ff:47:11:e0:f1:38:7f:31:
                    e4:fa:d9:58:37:eb:93:78:ef:2f:66:82:32:a5:49:
                    9a:9a:9f:b5:20:d7:84:bc:8b:7a:a0:23:18:67:57:
                    91:67:19:d9:3c:a0:61:48:d6:16:20:7c:08:db:9a:
                    f7:aa:ec:90:a4:f4:a3:0a:ee:9c:d5:29:17:9a:ca:
                    94:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CC:07:67:91:A9:8F:1F:4E:B7:69:E2:7F:C3:91:26:DF:8C:F4:09
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3530303a3a2f34302d3430203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         74:46:5a:64:7e:be:83:7a:a7:fe:20:3e:64:3a:b6:85:15:78:
         26:43:49:c4:bb:bf:d0:42:55:22:69:97:af:f0:19:56:f1:9e:
         4d:4f:b4:7a:33:d1:f6:92:50:2a:79:b1:03:69:99:79:ac:26:
         77:01:fb:36:4c:87:82:30:53:71:5b:48:53:77:59:9e:b1:5e:
         dc:58:b9:da:0c:3c:eb:db:16:a1:6a:ad:56:35:c8:39:b4:a7:
         bf:e3:c3:20:4c:3c:a2:6f:a5:d8:ab:e1:72:93:76:3d:9b:42:
         b2:47:d3:a4:89:88:23:5c:cc:70:46:cd:42:40:53:47:ea:db:
         92:3a:09:b0:11:1a:7d:ae:00:c5:7c:71:d0:52:4c:b6:f4:ae:
         8e:59:41:d8:1d:7d:ea:84:c6:d4:15:55:82:0f:b3:06:dd:76:
         de:9f:36:28:2d:55:97:12:f2:1b:aa:26:6c:47:c9:c5:ba:12:
         4b:06:56:df:6b:6c:be:f8:b8:7e:de:b3:b1:cd:1a:11:13:6b:
         59:ea:a3:53:b7:8c:43:65:05:db:06:09:58:a0:27:7b:33:2f:
         b6:fb:70:1a:af:e8:50:b7:74:85:e2:76:0b:93:60:84:69:6d:
         5c:de:7d:2b:f1:90:1e:dc:73:d6:c6:df:34:10:34:f0:81:3f:
         4e:7f:cf:3e
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUd9yUOKeloiIfkNo0Iv7kqe0AZDIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUyODgwQzMwNEI1QTRENEYyNUFCMjdEMjVBQ0Q3RUI4
RTY5M0Q5MTAeFw0yMjExMTYxNDMxMjFaFw0yMzExMTUxNDM2MjFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRkNGMURFNThCMDNFNzFGMDc1
OTc5Mzk5MkMxRTFGQTQzOTk1OTgxM0IyQUVGREY5RkUwNDc2QkFBMjdBNTgyODA2
RjM2MEZBNzQwNTNEQzI1MzVCQTZDMkU0RjA2MzAxRjA5NTQ2NTE5NTIxNTk3MjE0
ODZDMzY0NEQ5MDhGNTgyQTEyREJBNDNGMzI4NDRGNzg3RURFNDIxM0IzRjQ4QzY1
RDI4Q0Y5NDQzN0U4QTBGMDE1MDVBQ0RCMDUxRjc0MjE4NzMzQ0M0MDFBRkI5Qzg4
REE5RkNCRUUwNjIxMzFDNjJCRUUxRDA0QUY5Rjc3QTUwNjRERkJDNjk2RTI2Q0E0
RDgwNDIzOEVGODREMTFDQ0Q1Qjc2MkQxMkJFOEEyNDExRTQ0RTI5MUZCQzUxM0Y3
Q0EzN0NDOTJBRjRCM0FCRDQxMDU2QUE0Q0FDOEI2QkRBMTE0RkI5MUExQzhEMjhC
M0FGMjA0MjI0ODk0RDk4RkIzRkY0NzExRTBGMTM4N0YzMUU0RkFEOTU4MzdFQjkz
NzhFRjJGNjY4MjMyQTU0OTlBOUE5RkI1MjBENzg0QkM4QjdBQTAyMzE4Njc1Nzkx
NjcxOUQ5M0NBMDYxNDhENjE2MjA3QzA4REI5QUY3QUFFQzkwQTRGNEEzMEFFRTlD
RDUyOTE3OUFDQTk0NzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA/PHeWLA+cfB1l5OZLB4fpDmVmBOyrv35/gR2uqJ6WCgG82D6dAU9
wlNbpsLk8GMB8JVGUZUhWXIUhsNkTZCPWCoS26Q/MoRPeH7eQhOz9Ixl0oz5RDfo
oPAVBazbBR90IYczzEAa+5yI2p/L7gYhMcYr7h0Er593pQZN+8aW4myk2AQjjvhN
EczVt2LRK+iiQR5E4pH7xRP3yjfMkq9LOr1BBWqkysi2vaEU+5GhyNKLOvIEIkiU
2Y+z/0cR4PE4fzHk+tlYN+uTeO8vZoIypUmamp+1INeEvIt6oCMYZ1eRZxnZPKBh
SNYWIHwI25r3quyQpPSjCu6c1SkXmsqUdwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FDrMB2eRqY8fTrdp4n/DkSbfjPQJMB8GA1UdIwQYMBaAFB4ogMMEtaTU8lqyfSWs
1+uOaT2RMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dHb2pDY2NaZzdBcEtB
eUdMTktBbmJ3M2NlWWszUTgxNWF0U0RhYzhpd2o3LzAvMUUyODgwQzMwNEI1QTRE
NEYyNUFCMjdEMjVBQ0Q3RUI4RTY5M0Q5MS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xRTI4ODBDMzA0QjVBNEQ0RjI1QUIyN0QyNUFDRDdFQjhFNjkz
RDkxLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HR29qQ2NjWmc3QXBLQXlHTE5L
QW5idzNjZVlrM1E4MTVhdFNEYWM4aXdqNy8wLzMyMzgzMDM0M2EzNTMxMzEzODNh
MzUzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzNjM4MzQzMzMwLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA
AjAIAwYAKARRGAUwDQYJKoZIhvcNAQELBQADggEBAHRGWmR+voN6p/4gPmQ6toUV
eCZDScS7v9BCVSJpl6/wGVbxnk1PtHoz0faSUCp5sQNpmXmsJncB+zZMh4IwU3Fb
SFN3WZ6xXtxYudoMPOvbFqFqrVY1yDm0p7/jwyBMPKJvpdir4XKTdj2bQrJH06SJ
iCNczHBGzUJAU0fq25I6CbARGn2uAMV8cdBSTLb0ro5ZQdgdfeqExtQVVYIPswbd
dt6fNigtVZcS8huqJmxHycW6EksGVt9rbL74uH7es7HNGhETa1nqo1O3jENlBdsG
CVigJ3szL7b7cBqv6FC3dIXidguTYIRpbVzefSvxkB7cc9bG3zQQNPCBP05/zz4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org