Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a633030303a3a2f33362d3336203d3e20323638343330.roa
File:                     323830343a353131383a633030303a3a2f33362d3336203d3e20323638343330.roa (raw, json)
Hash identifier:          vHnHOoe6rOYchDJvPfrlVYTrTbf1ZIUuhPb5duf1YWM=
Subject key identifier:   2C:CF:CA:1E:9B:FB:C3:0A:E3:D1:08:26:20:C6:93:27:6E:6A:7B:4E
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       5A0C8A7A535EA71668BD6623E4EA939C70D26930
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a633030303a3a2f33362d3336203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 18:44:17 +0000
ROA not before:           Thu 17 Nov 2022 18:39:17 +0000
ROA not after:            Thu 16 Nov 2023 18:44:17 +0000
asID:                     268430
IP address blocks:        2804:5118:c000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:0c:8a:7a:53:5e:a7:16:68:bd:66:23:e4:ea:93:9c:70:d2:69:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 18:39:17 2022 GMT
            Not After : Nov 16 18:44:17 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0b:d7:84:4d:1c:e0:d8:eb:d6:e5:5a:fb:fa:
                    71:d2:48:0e:72:fe:72:58:21:4b:51:71:13:4f:61:
                    39:2a:d8:52:c9:a4:19:74:9c:59:e4:d4:0b:85:9c:
                    d2:e1:96:ae:50:64:94:98:dd:b5:2f:dd:b4:ab:d0:
                    42:42:b4:62:0e:b6:92:39:1b:7a:15:a7:8e:2f:4b:
                    cf:8f:8b:e4:60:a9:08:91:e6:de:09:47:4e:9f:27:
                    6b:a3:f8:77:61:76:c5:71:5d:2c:8f:4d:86:46:8a:
                    78:7b:17:9e:e9:1d:bc:69:f0:f1:66:7f:f8:71:0d:
                    46:d0:99:dc:ac:5e:a1:73:ce:0d:af:47:d6:6e:92:
                    64:0a:e5:d2:df:b6:8c:9e:b9:e5:fc:9e:f9:3f:41:
                    69:d8:8d:70:f0:6b:bb:73:c7:51:e8:62:86:de:d9:
                    4a:1a:fc:29:33:f0:08:4d:39:2a:d8:14:63:d9:c4:
                    ba:aa:57:05:a2:07:bf:cc:83:b1:eb:51:c7:c6:74:
                    2f:f4:4b:00:02:97:a9:e8:61:65:eb:c8:5d:d3:66:
                    98:e6:3d:13:60:f4:b2:16:65:a4:66:c6:60:7c:e5:
                    67:84:06:ba:96:e4:26:65:35:21:85:be:9c:51:28:
                    86:d0:24:86:e4:5d:4b:15:a4:c6:44:19:63:a2:05:
                    ed:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CF:CA:1E:9B:FB:C3:0A:E3:D1:08:26:20:C6:93:27:6E:6A:7B:4E
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a633030303a3a2f33362d3336203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8c:76:36:68:22:38:a1:ef:e2:69:bc:44:3b:1f:8e:54:d5:f0:
         11:0c:7d:04:ac:1a:16:58:f0:f9:cc:d6:8e:1c:d9:65:99:d1:
         cd:e3:25:db:db:c7:55:13:d4:33:6d:92:15:fb:88:73:50:77:
         41:56:84:81:5c:6d:5e:95:a5:3e:46:cb:fb:92:30:55:77:bd:
         d9:15:cc:ea:c8:95:6b:0f:3e:6a:1a:49:05:a8:1a:dc:3a:41:
         e2:76:90:f7:4b:3a:83:85:a0:b5:ac:39:f6:8f:5d:2e:eb:c0:
         d8:9a:be:5c:e3:06:12:ab:b8:c5:d5:6b:ad:5f:7c:98:3e:cb:
         30:47:4f:30:a2:17:47:8f:73:f8:dd:48:c9:74:33:e5:52:9b:
         db:76:3d:45:33:97:50:63:d2:3e:57:17:d9:5e:dc:55:d6:20:
         e1:0d:31:8b:11:3b:31:88:41:9a:c3:ba:b4:47:9d:55:53:ae:
         cd:86:44:56:5e:c5:42:59:64:a3:76:e0:f1:e6:88:01:ce:4d:
         fc:5e:95:b6:2d:17:a4:36:5c:33:9a:d0:3e:63:f6:39:1c:bc:
         c7:ed:c8:c0:44:b3:6a:a3:19:94:ae:8d:83:1d:48:2a:f0:a8:
         45:09:0e:a2:bd:4a:6b:fb:f0:bd:3f:0c:8a:04:7f:ba:67:8c:
         db:8b:15:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org