Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a363030303a3a2f33362d3336203d3e20323638343330.roa
File:                     323830343a353131383a363030303a3a2f33362d3336203d3e20323638343330.roa (raw, json)
Hash identifier:          LmLY6jYhVpCkxJ8SQAaDp5UUcRPjBUUNZZB9pkkNfcU=
Subject key identifier:   DD:52:EF:73:3A:74:C8:75:85:9E:CE:25:EC:29:40:13:82:36:23:13
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       0F9648E4D98FB83A1F305155779316A85C1238F9
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a363030303a3a2f33362d3336203d3e20323638343330.roa
Signing time:             Thu 10 Nov 2022 12:21:28 +0000
ROA not before:           Thu 10 Nov 2022 12:16:28 +0000
ROA not after:            Thu 09 Nov 2023 12:21:28 +0000
asID:                     268430
IP address blocks:        2804:5118:6000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:96:48:e4:d9:8f:b8:3a:1f:30:51:55:77:93:16:a8:5c:12:38:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 10 12:16:28 2022 GMT
            Not After : Nov  9 12:21:28 2023 GMT
        Subject: CN=3082010A0282010100A8A88C936E8CE4EB331392E77179CD3EEDAFCAF777A9ED616214F193F5FC0799FAECBFA425D1DF5EA70F00BF252DC886F25A33AB9F38B9337C821F03E32C23F04BDBCA3B2D52C48834325A12DCEEA3FF777AA038369567957B7A094D7FC61920AF002274F3F613A6FABC4B7AA69CD74928BA04A5BCFA31FBA109D381CF55D016156E48CA5726237079F15A87AB870485B42BE2DA861FC6346F7D4154204021887E6DCF674BDB64297C4C4FABF9B6DE4F53EF06111E5A5AC21A6E1575FCA933898457C19721678BEFD17EC0154F1ED37DF46289135B241C4A3000B633814CB7A9C85DFC9A1475D8DA31C44F163740742C30A13BF0E93A2317C1F5C348146A1E1D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a8:8c:93:6e:8c:e4:eb:33:13:92:e7:71:79:
                    cd:3e:ed:af:ca:f7:77:a9:ed:61:62:14:f1:93:f5:
                    fc:07:99:fa:ec:bf:a4:25:d1:df:5e:a7:0f:00:bf:
                    25:2d:c8:86:f2:5a:33:ab:9f:38:b9:33:7c:82:1f:
                    03:e3:2c:23:f0:4b:db:ca:3b:2d:52:c4:88:34:32:
                    5a:12:dc:ee:a3:ff:77:7a:a0:38:36:95:67:95:7b:
                    7a:09:4d:7f:c6:19:20:af:00:22:74:f3:f6:13:a6:
                    fa:bc:4b:7a:a6:9c:d7:49:28:ba:04:a5:bc:fa:31:
                    fb:a1:09:d3:81:cf:55:d0:16:15:6e:48:ca:57:26:
                    23:70:79:f1:5a:87:ab:87:04:85:b4:2b:e2:da:86:
                    1f:c6:34:6f:7d:41:54:20:40:21:88:7e:6d:cf:67:
                    4b:db:64:29:7c:4c:4f:ab:f9:b6:de:4f:53:ef:06:
                    11:1e:5a:5a:c2:1a:6e:15:75:fc:a9:33:89:84:57:
                    c1:97:21:67:8b:ef:d1:7e:c0:15:4f:1e:d3:7d:f4:
                    62:89:13:5b:24:1c:4a:30:00:b6:33:81:4c:b7:a9:
                    c8:5d:fc:9a:14:75:d8:da:31:c4:4f:16:37:40:74:
                    2c:30:a1:3b:f0:e9:3a:23:17:c1:f5:c3:48:14:6a:
                    1e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:52:EF:73:3A:74:C8:75:85:9E:CE:25:EC:29:40:13:82:36:23:13
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a363030303a3a2f33362d3336203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a8:6c:c0:92:a9:10:26:ac:57:8b:73:6b:f2:a6:3e:ff:e0:ae:
         38:63:a2:00:f1:31:71:33:95:69:ba:35:25:60:ae:1d:4b:a2:
         42:23:88:1f:d6:f9:66:ac:68:27:3d:2d:8c:c7:41:2e:d0:5b:
         30:69:75:91:e4:e3:35:7c:4c:d7:25:b4:07:fe:06:b1:2a:4a:
         ae:87:a0:69:b3:af:25:b6:03:3a:ff:cd:78:f0:08:40:1b:0d:
         c9:8e:01:94:2d:3b:ea:b8:74:9a:07:5f:98:ac:60:b3:a2:4f:
         25:6b:f8:88:9f:ed:a0:44:28:de:55:3f:8d:8a:d2:ec:92:ca:
         02:e0:bf:dc:1d:27:ec:c4:8a:cb:c2:a6:db:bd:60:5a:ef:bb:
         b0:48:91:83:fc:4e:ed:07:60:76:cf:88:94:8f:be:ec:e8:90:
         5c:bb:ec:a7:a5:b6:02:dd:62:fd:e6:c9:9d:7a:a4:f7:14:df:
         28:15:33:f6:7e:c8:31:6d:69:59:b3:b8:90:0c:c3:4d:d7:f3:
         5c:81:c8:bf:13:95:10:d7:c5:86:e2:35:b9:9e:6f:90:b7:24:
         8f:60:fb:1f:ad:52:f4:b6:01:97:91:c6:e0:fc:49:5b:a3:81:
         c2:98:75:52:4a:89:bc:f2:2e:6d:62:7e:e1:2e:e7:69:28:1d:
         1c:1a:bc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org