Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a623030303a3a2f33362d3336203d3e20323638343330.roa
File:                     323830343a353131383a623030303a3a2f33362d3336203d3e20323638343330.roa (raw, json)
Hash identifier:          X91182l3fuhQ86bXEPVYeT5olAbRZQe6eHiQUSk/25E=
Subject key identifier:   00:0E:F9:6B:B0:78:BE:C8:69:95:AF:9A:66:77:4C:F6:9F:53:A6:7E
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       7CBD73FDFB2AAB7E650D6303500F1CDB8828925C
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a623030303a3a2f33362d3336203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 18:44:07 +0000
ROA not before:           Thu 17 Nov 2022 18:39:07 +0000
ROA not after:            Thu 16 Nov 2023 18:44:07 +0000
asID:                     268430
IP address blocks:        2804:5118:b000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:bd:73:fd:fb:2a:ab:7e:65:0d:63:03:50:0f:1c:db:88:28:92:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 18:39:07 2022 GMT
            Not After : Nov 16 18:44:07 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:97:25:e3:ba:e8:02:27:b2:55:0a:bd:4d:a1:
                    f7:f4:d5:7a:45:c2:9e:b4:84:df:42:90:31:83:1e:
                    de:4d:15:5a:52:f0:a2:d5:7f:ca:fe:7a:a5:5b:67:
                    f0:a6:53:33:42:dd:ad:28:69:4f:20:4d:c0:9a:83:
                    93:e6:c7:76:1f:5f:e3:7f:0e:76:d6:b2:af:e6:d1:
                    e9:94:85:95:c1:85:bd:ce:00:1e:94:69:58:b2:45:
                    ef:29:c8:79:96:12:e6:47:4e:2a:24:df:75:fe:fb:
                    f5:b3:95:55:02:94:08:bd:51:29:fc:ce:c6:c4:95:
                    71:fc:8e:df:af:1f:0d:31:52:bf:e5:67:05:77:9f:
                    6f:ce:a6:fa:b8:33:02:26:d8:b8:78:f3:88:2f:78:
                    4f:80:0d:59:d1:2d:18:0d:31:92:72:45:95:48:82:
                    82:22:f9:a0:94:4d:5e:d1:09:60:ed:19:b0:e5:5f:
                    99:bf:93:f2:38:90:b7:e9:d9:0a:ad:a4:d1:ca:aa:
                    45:d3:0b:f6:3d:82:dd:a4:31:15:23:d2:e1:0f:4e:
                    ec:73:ab:4f:27:d4:db:18:c0:ff:30:5d:26:e8:98:
                    06:db:e0:d7:2c:d7:a5:06:52:08:76:6c:bd:e7:b7:
                    d2:2a:9b:c0:5c:af:e4:8f:5e:fa:a1:73:f3:a7:bc:
                    2b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0E:F9:6B:B0:78:BE:C8:69:95:AF:9A:66:77:4C:F6:9F:53:A6:7E
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a623030303a3a2f33362d3336203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         18:24:26:ec:41:6e:6c:30:a1:56:ff:f9:58:ac:14:6d:93:8d:
         bb:26:a8:94:af:d4:e2:67:d0:17:d7:14:12:11:0f:e4:ca:1f:
         55:6e:b7:ad:dc:22:55:33:be:88:51:b6:d4:81:64:7b:f3:b1:
         f4:f7:73:b2:38:8c:38:e0:8c:f9:3b:9a:6e:9b:59:63:cc:5d:
         e8:54:1b:f7:0e:d3:38:63:ca:66:90:a2:1c:a4:f1:77:f2:a4:
         55:5b:aa:0f:00:27:35:14:20:b9:50:cd:fe:05:f6:21:d8:cc:
         a2:79:75:a5:d9:01:c6:e6:ca:2c:62:e4:a4:66:5e:df:e4:55:
         e7:1a:82:e3:5d:f3:40:36:b3:22:07:a5:6a:29:92:de:08:6d:
         b2:fe:68:ad:58:b9:2a:79:f6:d4:a5:7c:08:c1:d5:03:1f:4b:
         55:14:96:c9:8e:91:36:e8:3e:e5:f4:d1:0a:6b:64:aa:26:59:
         c7:fc:2c:3b:39:e5:ed:1c:f0:35:f6:28:ae:a6:5d:f8:42:0d:
         26:ac:c1:f2:51:03:70:fd:33:8e:97:99:f4:b1:0a:38:12:3d:
         06:b6:4f:4c:80:e7:eb:4f:09:47:7b:ad:7e:4c:3c:03:69:21:
         45:42:e0:a8:91:82:df:7c:52:81:22:cf:35:22:69:d0:03:96:
         b0:7e:e7:fa
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUfL1z/fsqq35lDWMDUA8c24goklwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUyODgwQzMwNEI1QTRENEYyNUFCMjdEMjVBQ0Q3RUI4
RTY5M0Q5MTAeFw0yMjExMTcxODM5MDdaFw0yMzExMTYxODQ0MDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzQ5NzI1RTNCQUU4MDIyN0Iy
NTUwQUJENERBMUY3RjRENTdBNDVDMjlFQjQ4NERGNDI5MDMxODMxRURFNEQxNTVB
NTJGMEEyRDU3RkNBRkU3QUE1NUI2N0YwQTY1MzMzNDJEREFEMjg2OTRGMjA0REMw
OUE4MzkzRTZDNzc2MUY1RkUzN0YwRTc2RDZCMkFGRTZEMUU5OTQ4NTk1QzE4NUJE
Q0UwMDFFOTQ2OTU4QjI0NUVGMjlDODc5OTYxMkU2NDc0RTJBMjRERjc1RkVGQkY1
QjM5NTU1MDI5NDA4QkQ1MTI5RkNDRUM2QzQ5NTcxRkM4RURGQUYxRjBEMzE1MkJG
RTU2NzA1Nzc5RjZGQ0VBNkZBQjgzMzAyMjZEOEI4NzhGMzg4MkY3ODRGODAwRDU5
RDEyRDE4MEQzMTkyNzI0NTk1NDg4MjgyMjJGOUEwOTQ0RDVFRDEwOTYwRUQxOUIw
RTU1Rjk5QkY5M0YyMzg5MEI3RTlEOTBBQURBNEQxQ0FBQTQ1RDMwQkY2M0Q4MkRE
QTQzMTE1MjNEMkUxMEY0RUVDNzNBQjRGMjdENERCMThDMEZGMzA1RDI2RTg5ODA2
REJFMEQ3MkNEN0E1MDY1MjA4NzY2Q0JERTdCN0QyMkE5QkMwNUNBRkU0OEY1RUZB
QTE3M0YzQTdCQzJCRTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxJcl47roAieyVQq9TaH39NV6RcKetITfQpAxgx7eTRVaUvCi1X/K
/nqlW2fwplMzQt2tKGlPIE3AmoOT5sd2H1/jfw521rKv5tHplIWVwYW9zgAelGlY
skXvKch5lhLmR04qJN91/vv1s5VVApQIvVEp/M7GxJVx/I7frx8NMVK/5WcFd59v
zqb6uDMCJti4ePOIL3hPgA1Z0S0YDTGSckWVSIKCIvmglE1e0Qlg7Rmw5V+Zv5Py
OJC36dkKraTRyqpF0wv2PYLdpDEVI9LhD07sc6tPJ9TbGMD/MF0m6JgG2+DXLNel
BlIIdmy957fSKpvAXK/kj176oXPzp7wr4QIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FAAO+WuweL7IaZWvmmZ3TPafU6Z+MB8GA1UdIwQYMBaAFB4ogMMEtaTU8lqyfSWs
1+uOaT2RMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dHb2pDY2NaZzdBcEtB
eUdMTktBbmJ3M2NlWWszUTgxNWF0U0RhYzhpd2o3LzAvMUUyODgwQzMwNEI1QTRE
NEYyNUFCMjdEMjVBQ0Q3RUI4RTY5M0Q5MS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xRTI4ODBDMzA0QjVBNEQ0RjI1QUIyN0QyNUFDRDdFQjhFNjkz
RDkxLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HR29qQ2NjWmc3QXBLQXlHTE5L
QW5idzNjZVlrM1E4MTVhdFNEYWM4aXdqNy8wLzMyMzgzMDM0M2EzNTMxMzEzODNh
NjIzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzgzNDMzMzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBFEYsDANBgkqhkiG9w0BAQsFAAOCAQEAGCQm7EFubDChVv/5WKwU
bZONuyaolK/U4mfQF9cUEhEP5MofVW63rdwiVTO+iFG21IFke/Ox9PdzsjiMOOCM
+TuabptZY8xd6FQb9w7TOGPKZpCiHKTxd/KkVVuqDwAnNRQguVDN/gX2IdjMonl1
pdkBxubKLGLkpGZe3+RV5xqC413zQDazIgelaimS3ghtsv5orVi5Knn21KV8CMHV
Ax9LVRSWyY6RNug+5fTRCmtkqiZZx/wsOznl7RzwNfYorqZd+EINJqzB8lEDcP0z
jpeZ9LEKOBI9BrZPTIDn608JR3utfkw8A2khRULgqJGC33xSgSLPNSJp0AOWsH7n
+g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org