Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3730303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a3730303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          tpMsY+je/xGaQ/34wbK5PPDYLHbExOiRCGeb0Pk5DXA=
Subject key identifier:   D2:81:22:6E:14:1E:F0:F7:0C:08:C0:88:60:99:F4:26:08:5F:4E:8A
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       77B973840B74552B848ACC6D1C85F09872320BAF
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3730303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 18:56:07 +0000
ROA not before:           Thu 17 Nov 2022 18:51:07 +0000
ROA not after:            Thu 16 Nov 2023 18:56:07 +0000
asID:                     268430
IP address blocks:        2804:5118:700::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b9:73:84:0b:74:55:2b:84:8a:cc:6d:1c:85:f0:98:72:32:0b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 18:51:07 2022 GMT
            Not After : Nov 16 18:56:07 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:24:1c:c0:17:1f:2f:f8:69:a4:93:fc:f3:6a:
                    3b:c1:a4:d5:0e:f0:40:f4:62:ec:9f:5e:c9:99:61:
                    86:e5:cf:ea:f0:6e:36:fb:79:d9:8e:ff:21:cb:6b:
                    a4:5c:c1:72:b7:88:ae:94:65:ac:d6:f7:09:e8:cc:
                    64:e1:ad:64:22:3e:ce:0a:30:15:0e:51:c7:a4:da:
                    18:ee:6b:79:a3:62:c1:6c:a8:35:a5:7f:35:f2:28:
                    cd:5b:ed:73:37:22:74:27:6a:20:6e:42:2c:ca:46:
                    e2:b4:a7:3f:3c:51:a8:1d:03:cd:2a:35:a1:22:4c:
                    b4:43:dc:ff:2c:c3:9b:ed:8d:0b:3c:4f:6e:7f:b7:
                    0f:9c:d6:43:af:0a:b3:1f:9f:36:ab:fc:1e:d7:b4:
                    99:e2:0e:f0:85:d1:20:6c:ca:17:f3:3e:3e:76:5c:
                    2e:77:15:56:46:9b:48:be:d3:5a:7c:b2:68:7b:26:
                    b5:62:68:85:c7:41:63:cf:3b:ab:51:0c:a5:3a:0b:
                    ee:c0:59:3a:1a:1a:92:34:8b:75:a2:0d:e2:de:12:
                    7b:1a:33:8e:29:c5:7e:7a:de:9c:3b:a1:70:91:21:
                    a6:9a:9f:4f:db:03:00:8e:c6:30:f8:a0:1a:9c:9b:
                    6d:dd:81:e8:4d:ff:2a:66:75:10:bc:6e:ff:77:b8:
                    e6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:81:22:6E:14:1E:F0:F7:0C:08:C0:88:60:99:F4:26:08:5F:4E:8A
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3730303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         b5:23:14:9f:1f:88:5a:2c:3b:91:96:b6:94:2f:d2:ed:30:38:
         66:ee:b2:b5:61:a9:68:e5:dc:bb:4e:01:59:81:e3:d3:1c:db:
         99:3d:ea:ee:02:bb:3d:ce:b2:50:80:31:b9:b8:e3:71:61:02:
         d3:cb:c4:62:55:65:3e:2a:bd:74:fe:44:d2:28:87:82:30:54:
         9e:e7:4e:10:d5:48:c2:e9:de:f4:30:ce:52:c7:a4:dc:3d:34:
         70:42:22:73:7d:8b:b8:c4:e0:fa:bd:ae:62:d4:9f:e1:62:18:
         29:4d:68:c0:44:e9:a3:c1:d0:dd:33:d3:11:fe:00:da:21:4d:
         85:80:d2:7d:ff:55:47:d2:a9:08:6e:6d:58:69:2d:18:3d:c5:
         cb:aa:a9:67:90:5a:de:d1:68:b6:44:81:02:5f:a9:8c:1e:8a:
         45:db:f5:78:8b:03:a5:fa:72:f8:4e:96:30:8e:67:94:2e:07:
         45:38:05:32:2b:77:c8:4b:93:24:b2:7b:7f:d7:e9:52:4d:43:
         61:9d:d4:f7:d2:a2:52:62:26:cb:cc:2d:6b:5d:17:f1:2e:8c:
         4b:54:33:63:a8:e4:35:c9:c6:64:62:4e:f5:43:ba:04:2d:61:
         08:d6:97:40:be:6d:a5:3a:22:35:90:11:7a:9b:af:08:ee:6e:
         ed:78:71:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org