Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a6230303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a6230303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          PDgaYD7eHQm90Fc8EAMsKM+ZUfnPiRII7NcfZsRDQmM=
Subject key identifier:   DC:C3:8E:6B:41:B0:B9:9C:06:1F:D6:9D:49:5F:67:F7:27:CB:47:83
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       627F6FC1D9B2FD1B61A10367D3DF33D1D260FC5A
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a6230303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 18:57:39 +0000
ROA not before:           Thu 17 Nov 2022 18:52:39 +0000
ROA not after:            Thu 16 Nov 2023 18:57:39 +0000
asID:                     268430
IP address blocks:        2804:5118:b00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:7f:6f:c1:d9:b2:fd:1b:61:a1:03:67:d3:df:33:d1:d2:60:fc:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 18:52:39 2022 GMT
            Not After : Nov 16 18:57:39 2023 GMT
        Subject: CN=3082010A0282010100B0FA4B51BB7AC9F4B3C43E545A5CF72EAC184C30C1EF8AC88D90D14A9267E813B02DACEED07A319A0C784DEA31B9E3DF078A43B1448C1A96DCEA4BE60E98EDF6086F6C922A5DD383EEDC2B6FADAD364A4C0F544716682413F07910499365596C1D5725092F995D042F5E9A5FEF20E183140786A718970E179687EBB30B9049A81906C406B525152F022E9F712922FD8BF707824996C89C552E78DB599FBD22F3D5B2D69D70D46C4447F362F7BFA804247DDF9CEEDC7FBC10D26F96F43D9BE8256BBECF2E4C4FD36E3C0340560D32752923618B1991DDC42FA6084D13F11A995B58E42BE60E540E171295DF0B28713037ACAB06F58411EB3C3E866F7DEB619E430203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fa:4b:51:bb:7a:c9:f4:b3:c4:3e:54:5a:5c:
                    f7:2e:ac:18:4c:30:c1:ef:8a:c8:8d:90:d1:4a:92:
                    67:e8:13:b0:2d:ac:ee:d0:7a:31:9a:0c:78:4d:ea:
                    31:b9:e3:df:07:8a:43:b1:44:8c:1a:96:dc:ea:4b:
                    e6:0e:98:ed:f6:08:6f:6c:92:2a:5d:d3:83:ee:dc:
                    2b:6f:ad:ad:36:4a:4c:0f:54:47:16:68:24:13:f0:
                    79:10:49:93:65:59:6c:1d:57:25:09:2f:99:5d:04:
                    2f:5e:9a:5f:ef:20:e1:83:14:07:86:a7:18:97:0e:
                    17:96:87:eb:b3:0b:90:49:a8:19:06:c4:06:b5:25:
                    15:2f:02:2e:9f:71:29:22:fd:8b:f7:07:82:49:96:
                    c8:9c:55:2e:78:db:59:9f:bd:22:f3:d5:b2:d6:9d:
                    70:d4:6c:44:47:f3:62:f7:bf:a8:04:24:7d:df:9c:
                    ee:dc:7f:bc:10:d2:6f:96:f4:3d:9b:e8:25:6b:be:
                    cf:2e:4c:4f:d3:6e:3c:03:40:56:0d:32:75:29:23:
                    61:8b:19:91:dd:c4:2f:a6:08:4d:13:f1:1a:99:5b:
                    58:e4:2b:e6:0e:54:0e:17:12:95:df:0b:28:71:30:
                    37:ac:ab:06:f5:84:11:eb:3c:3e:86:6f:7d:eb:61:
                    9e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C3:8E:6B:41:B0:B9:9C:06:1F:D6:9D:49:5F:67:F7:27:CB:47:83
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a6230303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         37:25:88:cd:35:11:3f:3c:52:64:05:02:60:e0:17:ba:ed:12:
         18:f7:b8:30:3c:c0:b4:8d:06:e0:7d:a5:9b:be:e8:3c:d9:7a:
         2b:e8:c9:e0:17:99:3e:2b:00:a0:c0:7b:3f:c2:12:c9:88:8b:
         8e:83:8c:06:db:6e:f5:6e:0a:8d:8b:7a:85:da:aa:2c:d8:51:
         f1:4b:09:76:1a:69:f4:4e:7a:43:56:ec:a4:09:96:b8:b7:4b:
         dc:78:23:bf:13:df:b0:13:1f:e6:f3:c9:6e:20:a1:11:5d:40:
         2f:82:d5:a5:2a:86:19:05:6e:46:36:a7:9a:00:53:09:95:03:
         ae:5f:4a:93:79:8e:50:8a:c3:a5:38:07:c7:de:1f:90:c5:bb:
         37:db:f7:25:8f:cf:74:c3:41:23:9d:c6:29:c8:2f:f2:43:11:
         64:e0:10:99:bf:4f:16:87:25:8f:54:3d:ee:33:8e:83:b9:fd:
         76:ad:2a:62:98:53:f8:95:a5:5d:26:3b:17:f4:bb:8d:63:30:
         44:43:68:d7:6c:b8:e9:73:d8:62:31:89:dc:0b:ca:e9:a2:20:
         1b:b0:f8:57:a0:dc:37:f7:64:7f:69:5e:c9:0c:d1:3b:65:93:
         d6:7e:f1:b3:6d:a3:15:a2:93:78:a7:d6:d5:13:d5:8e:c1:cf:
         00:08:60:11
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUYn9vwdmy/RthoQNn098z0dJg/FowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUyODgwQzMwNEI1QTRENEYyNUFCMjdEMjVBQ0Q3RUI4
RTY5M0Q5MTAeFw0yMjExMTcxODUyMzlaFw0yMzExMTYxODU3MzlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjBGQTRCNTFCQjdBQzlGNEIz
QzQzRTU0NUE1Q0Y3MkVBQzE4NEMzMEMxRUY4QUM4OEQ5MEQxNEE5MjY3RTgxM0Iw
MkRBQ0VFRDA3QTMxOUEwQzc4NERFQTMxQjlFM0RGMDc4QTQzQjE0NDhDMUE5NkRD
RUE0QkU2MEU5OEVERjYwODZGNkM5MjJBNUREMzgzRUVEQzJCNkZBREFEMzY0QTRD
MEY1NDQ3MTY2ODI0MTNGMDc5MTA0OTkzNjU1OTZDMUQ1NzI1MDkyRjk5NUQwNDJG
NUU5QTVGRUYyMEUxODMxNDA3ODZBNzE4OTcwRTE3OTY4N0VCQjMwQjkwNDlBODE5
MDZDNDA2QjUyNTE1MkYwMjJFOUY3MTI5MjJGRDhCRjcwNzgyNDk5NkM4OUM1NTJF
NzhEQjU5OUZCRDIyRjNENUIyRDY5RDcwRDQ2QzQ0NDdGMzYyRjdCRkE4MDQyNDdE
REY5Q0VFREM3RkJDMTBEMjZGOTZGNDNEOUJFODI1NkJCRUNGMkU0QzRGRDM2RTND
MDM0MDU2MEQzMjc1MjkyMzYxOEIxOTkxRERDNDJGQTYwODREMTNGMTFBOTk1QjU4
RTQyQkU2MEU1NDBFMTcxMjk1REYwQjI4NzEzMDM3QUNBQjA2RjU4NDExRUIzQzNF
ODY2RjdERUI2MTlFNDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsPpLUbt6yfSzxD5UWlz3LqwYTDDB74rIjZDRSpJn6BOwLazu0Hox
mgx4TeoxuePfB4pDsUSMGpbc6kvmDpjt9ghvbJIqXdOD7twrb62tNkpMD1RHFmgk
E/B5EEmTZVlsHVclCS+ZXQQvXppf7yDhgxQHhqcYlw4XlofrswuQSagZBsQGtSUV
LwIun3EpIv2L9weCSZbInFUueNtZn70i89Wy1p1w1GxER/Ni97+oBCR935zu3H+8
ENJvlvQ9m+gla77PLkxP0248A0BWDTJ1KSNhixmR3cQvpghNE/EamVtY5CvmDlQO
FxKV3wsocTA3rKsG9YQR6zw+hm9962GeQwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FNzDjmtBsLmcBh/WnUlfZ/cny0eDMB8GA1UdIwQYMBaAFB4ogMMEtaTU8lqyfSWs
1+uOaT2RMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dHb2pDY2NaZzdBcEtB
eUdMTktBbmJ3M2NlWWszUTgxNWF0U0RhYzhpd2o3LzAvMUUyODgwQzMwNEI1QTRE
NEYyNUFCMjdEMjVBQ0Q3RUI4RTY5M0Q5MS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xRTI4ODBDMzA0QjVBNEQ0RjI1QUIyN0QyNUFDRDdFQjhFNjkz
RDkxLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HR29qQ2NjWmc3QXBLQXlHTE5L
QW5idzNjZVlrM1E4MTVhdFNEYWM4aXdqNy8wLzMyMzgzMDM0M2EzNTMxMzEzODNh
NjIzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIzNjM4MzQzMzMwLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA
AjAIAwYAKARRGAswDQYJKoZIhvcNAQELBQADggEBADcliM01ET88UmQFAmDgF7rt
Ehj3uDA8wLSNBuB9pZu+6DzZeivoyeAXmT4rAKDAez/CEsmIi46DjAbbbvVuCo2L
eoXaqizYUfFLCXYaafROekNW7KQJlri3S9x4I78T37ATH+bzyW4goRFdQC+C1aUq
hhkFbkY2p5oAUwmVA65fSpN5jlCKw6U4B8feH5DFuzfb9yWPz3TDQSOdxinIL/JD
EWTgEJm/TxaHJY9UPe4zjoO5/XatKmKYU/iVpV0mOxf0u41jMERDaNdsuOlz2GIx
idwLyumiIBuw+Feg3Df3ZH9pXskM0Ttlk9Z+8bNtoxWik3in1tUT1Y7BzwAIYBE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org