Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3930303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a3930303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          7JlncP6FbQXg0K7i333U0KFf6jQKJq9wcKFnGoMf3wE=
Subject key identifier:   4E:31:A6:1D:00:A5:A8:B2:78:FB:34:F5:55:23:7B:BB:37:B4:3B:E8
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       2AEA0C3AC921C7B73D7A5EB8686FF635064A9CA2
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3930303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 18:56:55 +0000
ROA not before:           Thu 17 Nov 2022 18:51:55 +0000
ROA not after:            Thu 16 Nov 2023 18:56:55 +0000
asID:                     268430
IP address blocks:        2804:5118:900::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ea:0c:3a:c9:21:c7:b7:3d:7a:5e:b8:68:6f:f6:35:06:4a:9c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 18:51:55 2022 GMT
            Not After : Nov 16 18:56:55 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c9:ee:d7:8a:dc:18:5c:9d:f0:43:b1:dd:72:
                    4d:8c:bd:ec:ea:f7:99:d0:15:29:e2:af:f4:60:14:
                    3e:9d:4d:af:cf:14:7d:fd:31:f9:f7:fa:80:ef:6f:
                    d7:13:a4:91:12:73:29:1b:5e:8f:f8:c6:27:b2:1d:
                    7b:30:c4:23:4a:31:80:a6:d5:51:bb:75:b5:d3:1a:
                    da:ee:00:ec:df:02:bb:87:39:39:17:bc:92:4d:5f:
                    f4:0b:27:0f:66:9a:a2:bd:97:b0:33:a8:04:14:08:
                    27:8e:85:6c:ea:e7:62:ff:8f:2a:5a:cb:c0:71:77:
                    55:d5:5a:47:81:69:b1:a8:87:4f:fd:0f:ec:34:b1:
                    6b:f6:32:d4:16:e0:3d:3f:d4:09:3c:51:44:70:36:
                    76:fc:08:5b:08:de:aa:28:6a:35:ea:42:ee:97:90:
                    5e:3c:d3:3f:01:ca:5b:7f:1e:36:52:de:34:e5:33:
                    3d:7d:18:5f:d1:06:17:e1:6b:2d:07:13:a7:5e:f9:
                    a1:31:e3:2b:0b:4f:93:20:97:4f:e6:c8:85:58:6b:
                    bc:49:c6:b4:12:c8:33:75:ea:d4:5f:d9:71:89:ac:
                    60:a2:6e:bd:c2:e4:e5:80:1e:83:e6:4a:78:68:08:
                    ca:95:59:71:e2:be:4e:cb:49:46:f8:69:73:d9:45:
                    b4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:31:A6:1D:00:A5:A8:B2:78:FB:34:F5:55:23:7B:BB:37:B4:3B:E8
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3930303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         4c:86:1e:e9:fd:5b:9b:35:c4:e8:cb:d6:00:93:54:08:df:b7:
         a9:c6:f6:a6:4a:6a:e4:54:5e:ab:65:e1:4a:a4:e4:61:41:a7:
         e6:40:9c:c0:30:68:23:81:39:26:58:ef:e2:f3:de:0e:f1:ef:
         1a:97:ef:3e:77:17:6a:e6:7a:e7:e8:b9:af:8c:79:94:42:99:
         4b:5c:ab:55:7a:0c:cf:2e:98:f6:09:be:07:3a:e0:7e:a6:8d:
         b7:98:69:13:25:7e:4f:f1:61:f3:ed:d0:0d:d6:fc:97:c4:a3:
         15:bf:3d:cc:97:3f:9c:db:a3:00:b9:7e:5f:42:75:5c:98:ef:
         75:ad:34:12:de:dc:e5:d1:30:ed:77:14:66:b9:6c:d8:b0:52:
         c1:13:a3:ac:ac:35:ac:90:68:7b:7c:c6:d0:ad:99:99:48:a4:
         f1:e5:d5:96:26:d9:03:8d:66:d8:00:a0:d2:4c:f7:4d:17:53:
         fc:8f:0d:50:77:c8:ff:25:b9:73:54:fd:e7:f8:8b:d4:c5:1d:
         f6:93:1f:3a:2a:6e:7c:1e:df:cd:0a:5a:1f:80:5d:d4:af:7d:
         69:f0:19:f3:3b:a1:98:08:0d:6e:6f:8c:30:58:8c:d9:9e:d0:
         4a:90:b0:7b:72:22:d0:f4:d8:92:7c:88:20:05:d8:59:84:e2:
         bb:a3:c9:3f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org