Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a383030303a3a2f33362d3336203d3e20323638343330.roa
File:                     323830343a353131383a383030303a3a2f33362d3336203d3e20323638343330.roa (raw, json)
Hash identifier:          U7EN7RJEAwLwn0So94uWRyDylc2Vmb+ttBstq3pOhjg=
Subject key identifier:   F4:65:03:EA:94:AD:F8:F7:E5:EA:A1:CC:C3:E1:1A:46:63:95:0C:E6
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       5B440150249F1C425145145D16175926F8AF8A86
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a383030303a3a2f33362d3336203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 18:42:57 +0000
ROA not before:           Thu 17 Nov 2022 18:37:57 +0000
ROA not after:            Thu 16 Nov 2023 18:42:57 +0000
asID:                     268430
IP address blocks:        2804:5118:8000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:44:01:50:24:9f:1c:42:51:45:14:5d:16:17:59:26:f8:af:8a:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 18:37:57 2022 GMT
            Not After : Nov 16 18:42:57 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f9:e2:0e:3f:5f:a4:e5:24:d2:36:28:eb:b1:
                    56:c1:a1:82:bb:23:5b:0f:d8:59:02:44:f0:0b:c9:
                    61:e8:38:79:3b:dc:8c:f8:06:37:7d:84:11:99:53:
                    75:76:f5:9d:20:73:61:1d:1a:4c:91:65:e1:8c:84:
                    c2:c0:ce:34:27:9b:2e:68:50:bc:a7:02:f7:86:09:
                    fe:9b:45:c5:47:b2:06:2d:4e:44:1d:06:87:0b:b9:
                    c0:35:4f:c5:07:f1:5f:62:60:4e:3f:74:0d:70:68:
                    71:e1:b2:24:f0:72:a0:94:cc:c7:21:2b:dd:1c:3a:
                    ff:f7:c7:4e:49:c3:77:05:f6:26:07:e1:66:8b:53:
                    45:56:e3:f4:55:4e:c0:47:82:46:21:2e:1e:98:6e:
                    c3:cf:48:04:4c:2f:78:fe:b6:2c:94:40:e2:14:2b:
                    56:be:8a:e1:6c:53:f3:7e:94:2e:44:8e:13:1e:52:
                    b0:55:8c:34:09:98:e5:75:3c:de:69:d6:00:e0:ae:
                    18:35:e6:83:d1:13:c5:9e:f1:de:ff:02:a5:2a:78:
                    5b:ca:ce:57:8b:0f:b5:63:02:5f:12:47:9c:2b:a8:
                    93:02:7c:90:79:d3:9f:f5:77:b9:5c:c4:95:d3:6e:
                    98:13:4c:3b:25:35:2b:e2:82:6d:67:21:4c:3c:75:
                    88:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:65:03:EA:94:AD:F8:F7:E5:EA:A1:CC:C3:E1:1A:46:63:95:0C:E6
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a383030303a3a2f33362d3336203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5e:ef:c5:c1:fe:2a:8a:11:86:30:71:d8:30:59:a2:47:99:5a:
         1b:c1:21:ba:a3:8b:d6:58:c1:6a:1d:a9:31:a8:4e:41:44:12:
         90:46:c2:1e:4d:ff:8f:45:9b:31:6c:87:7d:10:68:ae:a3:29:
         08:ef:9c:16:7d:2b:a1:ec:8b:4d:82:73:de:e0:e5:0a:23:b7:
         5f:3a:13:25:df:a4:83:7a:bb:b1:5d:e3:f1:67:b4:f6:33:9d:
         8e:cd:e5:d1:79:f5:4b:f3:90:49:7a:6c:9c:0b:cf:33:a5:66:
         b0:aa:27:85:3d:a0:91:9e:4c:ce:19:60:b7:2c:60:1c:04:27:
         0b:e9:8a:31:c7:fc:73:e6:16:d0:ce:de:8c:a4:ea:44:74:ea:
         ab:8c:59:b0:ed:c6:4b:a7:a7:ee:09:49:4a:bb:44:bb:5a:5b:
         83:ca:89:e2:57:f7:a7:7d:13:e0:8a:86:7f:26:d3:4e:fc:17:
         f7:db:26:62:c3:28:0d:35:1a:52:81:30:a2:02:57:42:af:18:
         66:8b:d3:cc:a3:ab:d0:2b:64:e3:0d:23:c1:7c:92:67:ac:1e:
         4f:2c:69:46:51:0e:fd:ba:42:dd:55:9a:e3:bf:2a:13:35:68:
         5e:c2:4f:28:f9:93:98:e0:a6:5e:0b:9b:9b:3c:1a:bf:97:0d:
         00:e9:fd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org