Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a6430303a3a2f34302d3438203d3e20323638343330.roa
File:                     323830343a353131383a6430303a3a2f34302d3438203d3e20323638343330.roa (raw, json)
Hash identifier:          TJtfLCSI4h99pHZnWBqGFKk4b0CFZrAhAmE+zMC43WQ=
Subject key identifier:   C1:E5:4E:D1:01:22:C2:39:4E:7F:19:88:7C:42:E2:6D:43:1D:1D:20
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       47285239CE3F4FEA40957D02257B557F3F08F92D
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a6430303a3a2f34302d3438203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 18:59:53 +0000
ROA not before:           Thu 17 Nov 2022 18:54:53 +0000
ROA not after:            Thu 16 Nov 2023 18:59:53 +0000
asID:                     268430
IP address blocks:        2804:5118:d00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:28:52:39:ce:3f:4f:ea:40:95:7d:02:25:7b:55:7f:3f:08:f9:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 18:54:53 2022 GMT
            Not After : Nov 16 18:59:53 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0c:27:00:e8:e2:a4:11:21:dd:90:43:34:39:
                    9b:78:d6:c1:6c:80:80:8a:0d:96:ec:49:e6:b6:b8:
                    eb:41:e6:7d:b7:c1:b4:35:0c:33:62:06:a8:c8:8f:
                    25:14:97:cf:e5:5e:e8:2f:6f:6c:3c:0f:0f:32:ab:
                    66:92:80:ad:57:d2:6a:38:03:ab:f9:29:59:f4:71:
                    29:44:d8:7a:e6:8e:3c:a0:99:b2:51:82:9a:e9:d4:
                    4c:cb:25:cd:4e:c9:10:a0:80:4a:69:31:3e:8d:c6:
                    2e:58:6b:ce:26:53:e7:f7:e6:0b:3c:bf:a8:b1:49:
                    a2:ea:b2:8b:27:1b:c5:cf:95:fc:c5:30:fe:80:fd:
                    11:90:fe:1d:41:cb:32:a8:fd:20:05:ee:01:e1:9f:
                    8f:e3:4c:70:6b:8a:25:8f:10:b1:db:10:93:d9:79:
                    d0:b8:09:7c:5b:fa:3a:fa:f4:68:12:ab:15:d8:70:
                    6b:04:21:34:7d:3e:e4:34:b5:d7:36:84:6f:7c:a8:
                    16:57:97:64:ad:ff:4e:64:11:27:32:8d:71:2d:bc:
                    9b:60:a5:f4:6b:f3:5e:4d:a8:c2:3b:42:0a:5d:01:
                    ab:46:8f:e3:8c:08:09:86:01:b4:dc:ac:91:6e:0d:
                    27:f9:ad:a9:da:f3:fb:b4:30:9e:7b:2e:b5:14:28:
                    28:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E5:4E:D1:01:22:C2:39:4E:7F:19:88:7C:42:E2:6D:43:1D:1D:20
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a6430303a3a2f34302d3438203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         11:30:18:f8:64:20:78:db:1f:05:a4:29:d3:c5:21:81:73:c4:
         9a:23:ac:40:cc:2e:f9:1d:3b:43:c9:38:92:34:86:a3:67:72:
         e9:ab:a7:5f:8b:6f:53:69:0c:42:e5:97:25:c1:77:76:0a:68:
         7f:e2:53:db:dd:8a:05:fe:09:4e:47:5f:dc:4a:67:98:51:f7:
         4a:51:88:5b:bd:89:03:fa:d3:d8:5d:84:d2:67:2d:2b:72:ab:
         33:78:1a:f7:7a:50:d3:8e:05:3b:11:24:4c:5e:3d:3c:c1:a9:
         7a:4d:de:86:5d:49:39:3f:02:eb:db:96:e1:08:6f:37:68:44:
         39:af:75:8c:40:8f:68:6a:bf:ad:44:e4:a1:e3:3d:b2:cb:ec:
         dc:21:af:9a:23:07:cf:ec:b7:11:1d:8c:94:89:f1:09:02:aa:
         fd:95:71:1d:98:20:0b:f3:75:67:0f:46:df:8d:bc:7c:e4:fa:
         3e:33:42:3c:03:0f:82:a4:1f:6f:b0:2f:df:24:8f:13:15:81:
         4f:fb:79:03:83:36:95:2d:25:2d:64:69:99:43:6e:62:95:6e:
         9a:72:6b:00:fe:ac:32:e0:7e:10:13:90:3f:11:90:06:b5:ab:
         be:d3:f1:4c:cc:77:24:b5:d4:04:42:c5:bd:1a:98:c6:91:c1:
         5a:c6:05:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org