Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3530303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a3530303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          Q2s4uPDp4maUGA+G6FXOWsamQuqxxLU2pKp3hd58Hzk=
Subject key identifier:   F7:D8:25:74:ED:47:61:B5:26:99:F9:2E:D7:06:F6:22:07:9C:FA:68
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       1D605651753816956C8CBE4CBBD8B4B690ED704C
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3530303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 18:54:29 +0000
ROA not before:           Thu 17 Nov 2022 18:49:29 +0000
ROA not after:            Thu 16 Nov 2023 18:54:29 +0000
asID:                     268430
IP address blocks:        2804:5118:500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:60:56:51:75:38:16:95:6c:8c:be:4c:bb:d8:b4:b6:90:ed:70:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 18:49:29 2022 GMT
            Not After : Nov 16 18:54:29 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:37:05:ce:a2:91:a6:6e:68:54:4c:d2:c5:4b:
                    b6:c1:d5:ce:14:bf:00:b5:c6:01:10:b8:62:13:2b:
                    d9:d2:52:17:bf:f7:ed:9d:d0:3c:b3:74:53:c8:13:
                    2f:07:7b:4e:ef:58:c0:40:bc:20:00:7f:89:58:d6:
                    3c:53:40:44:50:74:a2:fa:70:a2:d3:cf:ae:a1:84:
                    d4:0b:91:73:bd:a6:53:1e:a8:88:77:e2:30:ff:ea:
                    3d:42:a8:a9:4a:c0:06:e5:93:a2:b2:c9:ce:53:67:
                    4d:07:a1:95:6a:02:31:3a:8c:be:90:0c:a1:42:98:
                    11:d2:93:db:f3:b7:2e:27:b5:93:b6:08:42:a3:c2:
                    73:90:16:d4:a2:9d:43:1f:49:dd:7e:a7:79:b7:b7:
                    86:97:de:b5:a7:fd:ea:27:9d:d7:c8:fe:42:50:00:
                    eb:5a:02:97:59:91:31:2f:0b:af:19:37:ac:48:15:
                    dc:30:e6:be:21:a3:d5:27:6c:69:87:b4:b6:5b:6b:
                    57:c5:aa:94:c7:e0:ef:42:b7:ca:24:aa:58:9d:4e:
                    3c:5c:80:79:c1:cb:84:be:5d:98:fc:ee:09:00:53:
                    30:b4:8a:4b:cb:98:9a:06:82:e1:d2:2e:7a:e2:91:
                    ec:44:fb:51:20:8a:f1:1e:95:70:75:09:7d:91:92:
                    9a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D8:25:74:ED:47:61:B5:26:99:F9:2E:D7:06:F6:22:07:9C:FA:68
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3530303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:f6:25:65:e8:79:3c:89:20:80:ec:7f:c8:7c:4f:2e:df:8d:
         be:bc:8c:8e:4c:2e:08:11:22:dd:d8:b8:bd:2b:80:23:61:62:
         1e:26:bb:7a:26:86:9a:8f:e5:b4:8e:32:9b:f8:d0:4b:81:8a:
         52:a5:fd:4e:68:78:02:b5:b6:30:f8:07:39:a6:8d:73:23:20:
         c5:8b:b3:64:bd:99:8f:84:f0:c3:1b:3e:bf:20:39:81:bf:33:
         4d:77:e5:be:73:1b:ea:b7:d7:e9:d6:78:00:35:e6:dd:59:3c:
         cb:a9:85:30:4f:12:09:8b:e5:d5:3e:3d:ad:23:06:da:0d:e3:
         be:6b:3f:b4:81:70:5e:1c:63:cd:3d:4b:be:a0:7c:01:31:41:
         8e:51:9a:fe:16:7a:76:d0:f4:b4:0b:86:24:e2:9b:1e:e8:b9:
         f2:fb:51:31:9f:2a:d9:9a:b3:0f:83:27:99:a5:a5:ff:5b:e2:
         4b:48:5c:37:70:bd:20:47:53:c2:22:64:8b:51:7c:d3:3a:09:
         dc:f6:a2:92:37:97:88:8f:dd:9c:72:d2:a2:b8:ca:c3:2f:af:
         95:96:5b:83:a6:84:a7:36:aa:c1:26:f9:67:c1:0e:2c:3e:7b:
         5c:ef:f6:17:0b:e2:5f:bc:33:19:86:af:91:31:53:29:1b:ae:
         0f:1e:de:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org