Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          52MdZmeumWsfU5R+ZFXeqOnq/sgixJICuXAynZXUuB8=
Subject key identifier:   53:99:6A:F7:5F:AE:2E:C7:28:96:6D:3E:47:FE:94:2C:1D:A4:46:8C
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       682D07D8FDA66276E1754B3B819D33836879502B
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 18:50:10 +0000
ROA not before:           Thu 17 Nov 2022 18:45:10 +0000
ROA not after:            Thu 16 Nov 2023 18:50:10 +0000
asID:                     268430
IP address blocks:        2804:5118::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2d:07:d8:fd:a6:62:76:e1:75:4b:3b:81:9d:33:83:68:79:50:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 18:45:10 2022 GMT
            Not After : Nov 16 18:50:10 2023 GMT
        Subject: CN=3082010A0282010100B2C349417B9856589FC5FBBA22041CC6A29EC25508504E4563F52C15C531A1814160A5637CC4E3F16700FF54D7314CBDACFBF0191FAE1D7DCE5E34E18695D0D5E7CF8DB47F0C3891EAB4B08DAD9742ED31B3F5CDF1B9DAA0A8D7EC4AFB1FBC217D951D0774B7AD6BA7524CCDCB4D56CE2C4440F2C23E0869248EA66F0B62870A800DB3683BBBE3D912825FB4892592E15057F1C891DC6BCCD59F8E06D093AE20D6D3F2EE853F1DE1E0D265E9B1A76BA191465787A94F01B446652CA8B786DB6E52320818D822F2064235F26E899502547B43CF41A73348227F098EECE9C22D01CF5B83002A2880DC5CED86931BE268C09C9C3F608A2B94CD1005EC72DAD81BDD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:49:41:7b:98:56:58:9f:c5:fb:ba:22:04:
                    1c:c6:a2:9e:c2:55:08:50:4e:45:63:f5:2c:15:c5:
                    31:a1:81:41:60:a5:63:7c:c4:e3:f1:67:00:ff:54:
                    d7:31:4c:bd:ac:fb:f0:19:1f:ae:1d:7d:ce:5e:34:
                    e1:86:95:d0:d5:e7:cf:8d:b4:7f:0c:38:91:ea:b4:
                    b0:8d:ad:97:42:ed:31:b3:f5:cd:f1:b9:da:a0:a8:
                    d7:ec:4a:fb:1f:bc:21:7d:95:1d:07:74:b7:ad:6b:
                    a7:52:4c:cd:cb:4d:56:ce:2c:44:40:f2:c2:3e:08:
                    69:24:8e:a6:6f:0b:62:87:0a:80:0d:b3:68:3b:bb:
                    e3:d9:12:82:5f:b4:89:25:92:e1:50:57:f1:c8:91:
                    dc:6b:cc:d5:9f:8e:06:d0:93:ae:20:d6:d3:f2:ee:
                    85:3f:1d:e1:e0:d2:65:e9:b1:a7:6b:a1:91:46:57:
                    87:a9:4f:01:b4:46:65:2c:a8:b7:86:db:6e:52:32:
                    08:18:d8:22:f2:06:42:35:f2:6e:89:95:02:54:7b:
                    43:cf:41:a7:33:48:22:7f:09:8e:ec:e9:c2:2d:01:
                    cf:5b:83:00:2a:28:80:dc:5c:ed:86:93:1b:e2:68:
                    c0:9c:9c:3f:60:8a:2b:94:cd:10:05:ec:72:da:d8:
                    1b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:99:6A:F7:5F:AE:2E:C7:28:96:6D:3E:47:FE:94:2C:1D:A4:46:8C
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118::/40

    Signature Algorithm: sha256WithRSAEncryption
         82:f5:78:2a:73:fc:06:2e:b5:83:21:50:37:06:ac:8c:24:27:
         a8:fb:cf:03:f7:60:87:5b:cc:ac:78:ff:90:43:28:34:8f:62:
         22:6a:65:a2:c3:9f:bd:00:d0:85:93:41:40:ed:2d:fc:7b:36:
         30:56:51:5c:08:8c:18:0f:ac:ea:b2:84:cc:e9:95:cc:e6:93:
         62:7c:65:2d:f9:63:4c:0a:7b:b6:cb:db:70:2d:bc:2b:29:06:
         02:56:d4:b8:45:99:ef:d2:e3:a4:34:b2:85:65:4d:14:5c:21:
         33:54:fc:59:45:c1:1a:0a:f4:8d:c0:a2:25:ef:88:88:dc:84:
         55:82:19:8d:91:97:28:f7:37:67:ad:f1:49:25:43:b8:fb:04:
         77:ae:1b:08:93:ab:15:24:ff:54:5a:19:4a:26:a8:ab:af:fc:
         e6:c8:1d:26:95:6a:d8:18:96:9e:70:93:0f:5e:2e:56:02:7e:
         0c:ba:15:16:f0:42:5b:e3:91:bf:7d:a6:61:a9:6c:6b:93:e7:
         93:a3:31:6f:88:2e:7b:55:39:32:79:df:7e:07:df:f2:1a:ff:
         98:c0:05:58:8f:d5:12:5b:2e:53:cd:e6:ab:79:c5:3c:2b:83:
         a5:14:52:64:56:4b:88:1f:48:0a:be:b7:90:14:3b:c4:60:2a:
         a0:e8:6f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org