Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3630303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a3630303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          DyNwVbXEoFmPkRKYY6Xf0vmByTTKtS4460nE8II85Ww=
Subject key identifier:   A6:A1:7B:D8:18:F6:A1:54:D2:EA:1B:78:BF:31:ED:77:9E:F5:63:E3
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       7C1DF37788397013D8A9D8C6205C3E743D30BB9A
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3630303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 18:53:31 +0000
ROA not before:           Thu 17 Nov 2022 18:48:31 +0000
ROA not after:            Thu 16 Nov 2023 18:53:31 +0000
asID:                     268430
IP address blocks:        2804:5118:600::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:1d:f3:77:88:39:70:13:d8:a9:d8:c6:20:5c:3e:74:3d:30:bb:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 18:48:31 2022 GMT
            Not After : Nov 16 18:53:31 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5f:ea:84:58:ed:9b:ba:55:ce:8b:2c:1e:ec:
                    c8:89:b9:d6:10:10:65:d9:27:b4:62:72:24:b3:d5:
                    6b:2f:66:14:d3:c0:09:74:02:4a:ad:98:22:7e:a5:
                    89:35:76:50:a6:04:d2:19:ec:43:d1:c0:0c:3b:e7:
                    bc:0c:ab:00:a6:b3:22:b6:86:ed:fa:a4:1a:2d:30:
                    ad:46:e2:aa:83:cd:aa:6d:a1:b3:ea:0d:af:b6:95:
                    dd:a9:82:df:48:f3:21:ff:82:91:7d:6b:cd:bf:14:
                    1f:b6:fb:ff:24:e1:31:d5:bd:9a:2e:3c:92:d0:af:
                    df:2a:9d:d5:9d:d5:5e:a0:51:16:b6:a0:91:ce:77:
                    0d:ed:07:6d:e8:88:d6:78:f5:c3:84:0a:38:35:9b:
                    27:c5:e2:b2:dd:fa:81:70:2d:e9:11:00:e5:f5:66:
                    da:4b:09:1c:a5:85:a6:af:f6:21:10:b0:9c:d6:b0:
                    35:10:e5:28:1b:af:df:4a:44:34:0a:7b:1a:13:ab:
                    26:d3:76:f9:22:dd:e5:b4:0b:de:23:3f:e9:2d:22:
                    88:b9:ae:d1:d2:a3:e0:b4:79:ba:0c:60:13:4a:a8:
                    2c:8f:13:46:e8:49:d2:15:77:dc:c6:df:8e:e4:68:
                    db:cf:fd:10:5e:5d:7d:f6:cb:43:71:01:20:12:28:
                    36:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A1:7B:D8:18:F6:A1:54:D2:EA:1B:78:BF:31:ED:77:9E:F5:63:E3
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3630303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         60:db:00:88:6e:5d:62:55:58:08:af:c8:64:a6:96:ec:5d:25:
         a8:b9:4e:fd:d2:e1:d8:6c:05:14:ef:02:6a:4b:c8:4a:0c:a1:
         48:30:61:94:78:cc:e3:32:66:3d:cb:c0:af:07:02:da:61:96:
         78:a5:58:64:fb:c0:b5:97:a3:a0:1c:97:89:fa:8f:46:8e:56:
         d4:95:ca:a0:1f:da:52:f9:64:a9:f0:ff:27:33:ee:3a:bb:bc:
         7f:e9:0f:67:1d:a1:44:73:8c:7e:53:d0:b7:81:5f:96:54:bc:
         8a:0c:d2:20:42:be:dc:9a:3c:69:6a:8a:6a:27:2e:03:38:79:
         68:87:6f:d9:5e:7c:58:bd:5d:8b:7f:29:6d:01:d0:04:cf:8e:
         b9:43:6d:86:55:0a:50:22:f3:fd:c5:71:ae:60:53:71:43:ce:
         4e:31:0f:07:8a:6a:3e:12:79:db:0b:f8:6f:ad:66:ca:32:21:
         90:ef:a2:52:d4:0e:22:51:49:b2:6d:61:07:77:c5:1c:ac:3b:
         08:23:ce:b5:b9:3e:69:e1:5d:6f:44:f0:c8:27:1c:85:01:4b:
         d1:7a:be:c0:94:9b:4a:ea:95:ee:fb:3e:37:ab:b5:8f:da:ea:
         4b:22:3c:3b:ec:4f:ed:a3:66:a6:6b:31:bb:9d:56:04:ba:f6:
         1a:87:99:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org