Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a6130303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a6130303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          Q3v0QWzhGLA0bcjwLMZu4lCCC8SgBwScOTBbr1BUQWQ=
Subject key identifier:   94:72:EA:8F:9E:CE:B7:1A:3C:4F:1E:64:88:82:E4:6D:95:99:F2:ED
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       3ABFEAE6A94E341C286B13B27ADC652F3A6AB440
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a6130303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 18:57:20 +0000
ROA not before:           Thu 17 Nov 2022 18:52:20 +0000
ROA not after:            Thu 16 Nov 2023 18:57:20 +0000
asID:                     268430
IP address blocks:        2804:5118:a00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:bf:ea:e6:a9:4e:34:1c:28:6b:13:b2:7a:dc:65:2f:3a:6a:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 18:52:20 2022 GMT
            Not After : Nov 16 18:57:20 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:6b:dd:87:7a:d9:bf:4b:78:bf:d0:e0:3c:
                    67:26:1b:20:66:a0:54:19:af:af:e1:c0:7f:d1:09:
                    76:7b:09:ce:45:89:d8:85:92:a0:1d:bf:22:d6:7b:
                    b2:64:39:29:d1:e2:76:70:ce:67:27:dd:38:45:01:
                    36:bd:03:a1:82:6f:d4:ad:fa:85:cf:54:62:06:b6:
                    17:b1:0a:9d:b9:5e:d7:b9:b3:8d:71:6a:c3:ad:15:
                    8a:82:52:91:30:e3:db:be:6b:25:19:05:d0:8e:14:
                    25:d8:34:a5:d2:d9:f7:d7:52:fd:d3:21:10:3f:6f:
                    cf:53:de:ad:65:29:42:39:e9:00:dd:49:45:84:ba:
                    ef:ce:d7:1d:01:8b:3f:9d:45:12:0c:a7:b2:e5:c7:
                    b4:25:c4:50:88:4a:55:0e:ea:06:21:71:99:4d:c6:
                    84:ae:e0:e6:19:46:8d:02:15:50:c6:4b:49:c4:64:
                    06:72:56:ce:78:2c:f7:ef:04:36:53:6e:61:2c:3e:
                    45:0a:22:94:db:15:ef:ba:f8:f4:7e:77:cc:99:40:
                    a1:12:fd:b6:1f:f0:7b:05:d8:0b:ef:d1:df:66:65:
                    44:e0:6f:6c:fe:c6:ee:80:b2:d3:ed:5e:4f:43:03:
                    1a:d5:c6:75:cb:0c:77:34:e9:77:ad:b6:4c:15:6d:
                    24:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:72:EA:8F:9E:CE:B7:1A:3C:4F:1E:64:88:82:E4:6D:95:99:F2:ED
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a6130303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         55:c8:28:6b:17:67:8f:ac:8d:f2:5a:de:88:5a:7b:00:87:16:
         eb:3b:20:e4:21:b6:26:42:89:a5:fd:19:83:e6:6d:5e:4f:ed:
         33:c1:86:63:0a:53:04:e2:98:f0:eb:12:1f:40:71:8a:29:0a:
         dc:e1:ef:09:7e:e1:16:04:48:be:b3:1e:d9:f2:62:f3:19:4f:
         dc:3f:8e:3d:19:c4:21:05:1e:5a:48:5b:95:59:31:5c:25:07:
         1e:bb:63:cd:99:4d:6d:d0:5d:09:81:4a:e5:87:b8:67:79:16:
         ca:33:43:db:e1:f9:ff:68:72:a4:6d:d8:f8:bc:3e:be:90:c2:
         a4:ce:da:2c:98:e2:1b:85:27:5d:45:1b:53:53:60:ab:7a:4e:
         9b:75:21:c7:17:ab:99:70:d1:5d:e2:5c:20:c6:38:c1:42:db:
         d5:ce:86:43:6f:f3:86:f1:a4:12:86:db:cd:c4:e7:74:2d:6c:
         b2:79:3a:66:c3:bf:0b:84:ea:ed:1a:cd:8f:26:72:07:cf:a9:
         e5:85:95:4c:0c:2f:e0:92:22:89:79:8b:2f:a0:5d:2f:81:de:
         19:ad:1c:44:0d:1c:82:f6:84:bd:f9:3c:d1:cd:13:31:1d:9f:
         75:f7:78:ef:37:37:39:fc:06:fc:08:c2:fc:87:37:d2:ea:4e:
         a5:7c:e7:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org