Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a653030303a3a2f33362d3336203d3e20323638343330.roa
File:                     323830343a353131383a653030303a3a2f33362d3336203d3e20323638343330.roa (raw, json)
Hash identifier:          jj79O+5yIAlW8EodZfGV6rk776K+2fezQKFImLdO2O0=
Subject key identifier:   35:F7:E8:77:C9:4B:11:D3:C5:75:57:F8:B6:D0:D5:D4:53:3F:14:C9
Certificate issuer:       /CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
Certificate serial:       4E89AFAC428E1FDC532EA69B03FC2EBF79712F90
Authority key identifier: 1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a653030303a3a2f33362d3336203d3e20323638343330.roa
Signing time:             Thu 17 Nov 2022 18:44:50 +0000
ROA not before:           Thu 17 Nov 2022 18:39:50 +0000
ROA not after:            Thu 16 Nov 2023 18:44:50 +0000
asID:                     268430
IP address blocks:        2804:5118:e000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:89:af:ac:42:8e:1f:dc:53:2e:a6:9b:03:fc:2e:bf:79:71:2f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91
        Validity
            Not Before: Nov 17 18:39:50 2022 GMT
            Not After : Nov 16 18:44:50 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4c:06:5f:98:76:90:28:48:dd:73:4d:03:3c:
                    4c:9d:9f:75:fb:94:01:b8:3b:e7:7c:14:e6:d9:fa:
                    2d:8d:d8:1c:69:d7:76:7a:72:3f:ce:6a:00:67:c6:
                    db:94:57:c2:a8:7c:2e:2e:bd:ad:02:56:e3:48:73:
                    34:2d:94:ad:d4:b5:a9:c3:a2:b0:b0:8a:73:33:2a:
                    ec:53:33:3f:12:86:70:52:ed:a0:55:62:48:9c:f3:
                    d1:f4:20:0c:b4:6b:49:ed:37:e2:bf:9d:5b:4d:1e:
                    cb:dd:c0:0d:81:9d:27:98:28:20:1a:b7:c0:78:a1:
                    42:b9:c2:6c:b2:02:b0:af:d3:0d:33:23:c3:9e:f0:
                    ef:73:96:3c:22:20:a7:a2:f8:bb:88:71:2f:31:1d:
                    6a:45:2c:58:6c:06:30:2b:a5:1e:e8:70:a9:71:f1:
                    60:0d:5d:0c:cf:20:1f:b6:b0:9e:49:f9:88:0e:2e:
                    27:3b:08:e8:33:fe:03:39:a7:f8:0d:af:5c:53:f0:
                    e3:12:89:79:f5:35:ca:90:f6:ae:f9:44:75:01:bc:
                    ac:00:3f:94:4d:06:3d:6d:b0:4f:36:1e:65:29:72:
                    1a:e0:c6:e7:a1:ea:a1:94:7f:0a:a2:72:bd:e9:76:
                    28:2d:14:2c:c4:4c:a3:1c:eb:2a:b8:9a:15:d4:75:
                    7c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F7:E8:77:C9:4B:11:D3:C5:75:57:F8:B6:D0:D5:D4:53:3F:14:C9
            X509v3 Authority Key Identifier:
                keyid:1E:28:80:C3:04:B5:A4:D4:F2:5A:B2:7D:25:AC:D7:EB:8E:69:3D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2880C304B5A4D4F25AB27D25ACD7EB8E693D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGojCccZg7ApKAyGLNKAnbw3ceYk3Q815atSDac8iwj7/0/323830343a353131383a653030303a3a2f33362d3336203d3e20323638343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5118:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         70:12:48:48:98:fb:10:86:db:70:5e:11:1c:75:88:1e:47:02:
         85:0c:f9:48:ee:cc:39:af:7f:33:52:25:f9:2e:79:bb:1d:80:
         51:4f:2d:b6:5e:3c:ec:ec:b5:9c:56:66:bc:dc:70:94:c7:29:
         b0:8a:7d:16:c6:e3:40:86:52:e2:6c:f5:ad:b3:ec:04:41:ce:
         17:6d:96:6c:ef:c3:4e:1c:b4:f6:fe:88:b2:1a:73:95:ec:e8:
         4f:7f:b1:58:3f:69:b3:24:15:2c:c3:58:db:66:ee:8c:ad:c7:
         83:f2:5d:4c:75:9b:a9:18:6b:68:a8:1d:5b:03:db:1d:c0:4f:
         43:b3:14:19:7b:0b:11:5e:77:d1:bc:26:2d:9d:7a:71:a1:ab:
         be:e8:50:74:aa:1c:5d:d9:20:89:33:17:24:5b:f1:b1:93:fb:
         10:cf:7f:9e:3a:b9:24:36:60:84:f4:b4:a5:ae:fe:e5:19:65:
         6e:2e:49:a2:dc:09:43:ef:f4:5b:69:e0:b1:07:5f:6c:2e:cb:
         6f:67:df:c6:63:35:a9:83:d1:1a:59:5d:5d:d7:73:57:30:e1:
         80:5c:a4:c2:17:b3:9e:6e:94:b6:2e:82:1a:39:7b:8c:37:07:
         f2:af:33:26:07:e5:af:43:62:3c:30:a7:4c:1b:20:08:2c:4d:
         5e:bd:b8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org