Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a363030303a3a2f34302d3430203d3e20323638343330.roa
File:                     323830343a353131383a363030303a3a2f34302d3430203d3e20323638343330.roa (raw, json)
Hash identifier:          B5ZWCW/M/Oluoo99qo10TAXIpB7/jatP53C359N3PiE=
Subject key identifier:   FB:9A:38:97:55:79:38:BD:4D:42:FF:31:4B:07:7A:B3:94:8A:1D:57
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       2101D4A4973BD6070CDA4185D74072C849E1D625
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a363030303a3a2f34302d3430203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 02:57:16 +0000
ROA not before:           Thu 17 Nov 2022 02:52:16 +0000
ROA not after:            Thu 16 Nov 2023 02:57:16 +0000
asID:                     268430
IP address blocks:        2804:5118:6000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:01:d4:a4:97:3b:d6:07:0c:da:41:85:d7:40:72:c8:49:e1:d6:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 02:52:16 2022 GMT
            Not After : Nov 16 02:57:16 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3e:97:8f:1b:5a:c6:2e:1e:4a:35:22:36:dd:
                    18:ed:fb:1f:c9:ff:1f:db:ab:c0:c1:d3:4e:b6:96:
                    cd:13:f9:13:75:84:06:7a:24:4c:93:65:78:6d:87:
                    0b:09:41:3d:0c:b0:80:a7:69:60:eb:c0:3d:a9:15:
                    ad:75:36:ba:ea:2a:70:dd:1f:db:c3:77:6b:29:cf:
                    ed:f5:00:44:35:54:ba:70:e8:2f:8b:fe:18:23:71:
                    dc:09:0f:d7:36:6e:9c:c2:4e:1b:66:d5:b6:d4:dd:
                    68:f7:53:6a:66:17:29:29:d3:74:e3:76:6b:45:bd:
                    17:6f:f8:76:a7:5e:bb:fa:ee:ba:3c:d7:84:bb:86:
                    62:3b:ac:a1:4a:4b:0d:e0:e9:77:9c:25:87:16:38:
                    cb:59:c1:79:aa:13:72:0d:f8:03:61:d9:71:09:4c:
                    47:79:9a:2c:8c:e4:cd:3e:9a:f0:8d:b3:78:70:94:
                    17:09:4e:40:dd:d6:9d:7e:56:72:e2:61:32:b6:96:
                    f5:29:66:38:6a:23:b4:0d:6d:80:fb:2f:57:7f:ec:
                    67:9b:10:a4:7d:38:87:f0:f1:85:8d:5f:39:e9:67:
                    5f:f5:fb:dd:dd:f8:ec:89:40:05:c2:c5:6b:11:41:
                    c5:5e:14:24:f4:15:cc:c2:da:e6:92:31:f0:e4:e3:
                    e6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9A:38:97:55:79:38:BD:4D:42:FF:31:4B:07:7A:B3:94:8A:1D:57
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a363030303a3a2f34302d3430203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         9e:ae:34:50:87:e3:4c:d4:7f:a4:c4:37:83:f9:0a:32:96:15:
         04:39:79:a3:68:8e:f2:04:78:6c:e3:a6:20:32:f6:15:d8:90:
         fd:4c:bf:21:ac:8e:a4:45:cb:55:12:7a:94:c4:70:73:ba:17:
         47:3a:98:bf:0a:fe:00:84:e0:6e:43:6c:49:65:30:bf:d5:43:
         91:2d:c8:d8:09:dc:26:3a:5d:55:b9:7e:d4:38:28:42:15:d4:
         51:0e:58:4b:ac:20:7f:d2:4b:1f:18:89:9a:52:71:d8:08:6b:
         bc:69:39:8e:bd:a9:4c:a2:f4:31:1f:52:ed:f3:ee:40:2e:db:
         be:a7:e2:05:94:ad:83:ff:95:b4:a1:f4:2c:d4:53:a8:b6:2a:
         fe:5d:19:2a:77:fe:1e:44:62:c1:33:5d:78:0f:5f:1b:d9:cf:
         69:26:6f:4a:5e:2a:b4:d2:0b:51:66:e7:c4:f2:33:cc:27:6d:
         54:68:fe:47:1a:d3:f4:ce:98:8d:3f:2f:c0:97:63:ab:f5:8d:
         bc:a2:f2:62:31:2b:ad:00:d7:33:8d:d8:07:a6:cb:e2:49:6f:
         1f:99:2a:db:7c:43:aa:35:c7:6a:8b:40:5a:74:fe:08:6f:09:
         b6:f5:c2:e2:27:2c:96:ca:01:b2:6f:d3:2b:1d:c9:92:f5:bb:
         ba:9d:43:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org