Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a32333a3a2f34382d3438203d3e20323632383437.roa
File:                     323830343a3265383a32333a3a2f34382d3438203d3e20323632383437.roa (raw, json)
Hash identifier:          hkQ+b/aCuHeGRo1pUZSlteYEZ0tFXgHTMjKIMsg+c6U=
Subject key identifier:   7F:40:AA:5F:83:83:50:4A:DA:AA:D3:07:0A:4C:A1:E3:EA:E8:DE:4B
Certificate issuer:       /CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
Certificate serial:       5AF3B9534EF2AAA0371179538ADE8C89D4B58675
Authority key identifier: 25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a32333a3a2f34382d3438203d3e20323632383437.roa
Signing time:             Sun 11 Dec 2022 18:40:17 +0000
ROA not before:           Sun 11 Dec 2022 18:35:17 +0000
ROA not after:            Sun 10 Dec 2023 18:40:17 +0000
asID:                     262847
IP address blocks:        2804:2e8:23::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f3:b9:53:4e:f2:aa:a0:37:11:79:53:8a:de:8c:89:d4:b5:86:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
        Validity
            Not Before: Dec 11 18:35:17 2022 GMT
            Not After : Dec 10 18:40:17 2023 GMT
        Subject: CN=7F40AA5F8383504ADAAAD3070A4CA1E3EAE8DE4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:e8:31:3d:5f:01:2a:14:06:42:47:97:e0:
                    36:57:61:9c:54:54:98:8c:98:d8:ce:f8:7b:36:73:
                    ac:70:a0:dc:64:89:3f:a6:9e:2e:90:74:71:56:8d:
                    2f:5f:08:dd:ba:11:c7:0d:c8:cc:dd:a5:09:f2:3a:
                    a6:62:3d:5a:4f:7c:36:71:19:05:07:11:c3:94:fd:
                    64:a7:4d:ee:e2:91:4e:0a:de:2b:9d:37:25:99:f0:
                    1e:e1:33:12:42:37:5d:3e:84:f4:34:06:07:6b:4e:
                    9d:16:e1:3f:7e:5a:19:44:41:71:8c:25:fe:27:b1:
                    5c:1b:28:98:35:1b:58:c1:2d:26:c8:6c:11:f6:e7:
                    18:ea:1a:78:f7:b2:6e:e1:94:6f:ff:4d:0e:04:7a:
                    3b:36:7f:ab:0c:7b:7c:20:05:75:04:0f:16:24:c5:
                    86:72:26:eb:0e:9b:32:8d:6c:5b:a0:77:a1:1a:e7:
                    d9:0d:58:26:e2:ee:d5:6f:81:a9:40:43:d6:78:68:
                    54:57:03:a3:17:3c:8b:51:e2:93:5b:96:ad:84:d7:
                    c1:e9:d4:c7:8d:83:ca:d9:8c:5f:06:c4:c6:5f:15:
                    5d:10:46:de:fe:6c:14:c1:49:02:74:d8:f2:4b:93:
                    5e:73:fb:05:3b:17:5f:aa:ad:3c:ed:86:ef:a5:b2:
                    f4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:40:AA:5F:83:83:50:4A:DA:AA:D3:07:0A:4C:A1:E3:EA:E8:DE:4B
            X509v3 Authority Key Identifier:
                keyid:25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a32333a3a2f34382d3438203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e8:23::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:fc:e8:74:21:5a:6d:48:ee:09:91:30:f8:6a:fd:44:b8:ae:
         98:2c:46:1b:1a:fa:69:bf:f5:7b:e6:7a:74:95:3a:1a:71:98:
         73:cd:63:58:64:fc:80:18:77:6f:49:9f:6f:38:95:07:c2:0e:
         07:71:e5:a0:78:a9:1f:72:a6:f2:88:98:57:2f:a7:a9:38:54:
         7d:6d:dd:9d:2f:c6:fd:5c:f1:7a:42:bb:3e:b8:13:fa:4c:7a:
         f8:03:a0:e6:49:4e:cd:37:f8:f1:45:6e:14:cb:83:fd:f2:12:
         4a:50:bd:b9:ab:a7:d8:47:b7:8b:cf:92:e1:b9:90:aa:9b:5d:
         53:93:f0:40:a8:c5:0e:5f:00:b4:e5:5b:fd:31:20:29:f0:c3:
         11:aa:2e:25:0a:ab:95:9d:f9:71:52:d5:51:87:17:f4:84:29:
         64:37:19:1d:20:4c:94:e9:fd:85:5e:59:68:7f:4f:d0:c2:b2:
         93:85:af:e2:2f:49:aa:29:4d:89:b0:14:ae:ab:e6:3a:93:61:
         98:8f:dd:63:aa:0c:45:b7:07:0b:34:af:88:fe:e9:be:63:e4:
         59:aa:f4:78:4f:8c:63:9c:35:dc:c3:f3:33:85:2f:6f:c3:1d:
         48:d6:fa:41:27:c8:6b:44:cf:1b:12:05:01:87:aa:5f:f7:ce:
         ff:76:43:d7
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUWvO5U07yqqA3EXlTit6MidS1hnUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU5ODI1QkZGM0VDQTY0MjQ1QjY4RkFFMDdDRUVDQkMy
NUUzNTUwMDAeFw0yMjEyMTExODM1MTdaFw0yMzEyMTAxODQwMTdaMDMxMTAvBgNV
BAMTKDdGNDBBQTVGODM4MzUwNEFEQUFBRDMwNzBBNENBMUUzRUFFOERFNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Y+gxPV8BKhQGQkeX4DZXYZxU
VJiMmNjO+Hs2c6xwoNxkiT+mni6QdHFWjS9fCN26EccNyMzdpQnyOqZiPVpPfDZx
GQUHEcOU/WSnTe7ikU4K3iudNyWZ8B7hMxJCN10+hPQ0BgdrTp0W4T9+WhlEQXGM
Jf4nsVwbKJg1G1jBLSbIbBH25xjqGnj3sm7hlG//TQ4Eejs2f6sMe3wgBXUEDxYk
xYZyJusOmzKNbFugd6Ea59kNWCbi7tVvgalAQ9Z4aFRXA6MXPItR4pNblq2E18Hp
1MeNg8rZjF8GxMZfFV0QRt7+bBTBSQJ02PJLk15z+wU7F1+qrTzthu+lsvT9AgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUf0CqX4ODUEraqtMHCkyh4+ro3kswHwYDVR0j
BBgwFoAUJZglv/PspkJFto+uB87svCXjVQAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2JBYmJaNng1RnJ3QTRKNmFkNjFKZW90d2RZQ3hSM3Z2ZER1VjdoSEdx
QmYvMC8yNTk4MjVCRkYzRUNBNjQyNDVCNjhGQUUwN0NFRUNCQzI1RTM1NTAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI1OTgyNUJGRjNFQ0E2NDI0
NUI2OEZBRTA3Q0VFQ0JDMjVFMzU1MDAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNiQWJiWjZ4NUZyd0E0SjZhZDYxSmVvdHdkWUN4UjN2dmREdVY3aEhHcUJmLzAv
MzIzODMwMzQzYTMyNjUzODNhMzIzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzYzMjM4MzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEAugAIzANBgkqhkiG9w0BAQsFAAOCAQEA
b/zodCFabUjuCZEw+Gr9RLiumCxGGxr6ab/1e+Z6dJU6GnGYc81jWGT8gBh3b0mf
bziVB8IOB3HloHipH3Km8oiYVy+nqThUfW3dnS/G/VzxekK7PrgT+kx6+AOg5klO
zTf48UVuFMuD/fISSlC9uaun2Ee3i8+S4bmQqptdU5PwQKjFDl8AtOVb/TEgKfDD
EaouJQqrlZ35cVLVUYcX9IQpZDcZHSBMlOn9hV5ZaH9P0MKyk4Wv4i9JqilNibAU
rqvmOpNhmI/dY6oMRbcHCzSviP7pvmPkWar0eE+MY5w13MPzM4Uvb8MdSNb6QSfI
a0TPGxIFAYeqX/fO/3ZD1w==
-----END CERTIFICATE-----
Generated at Fri Feb 21 10:58:59 2025 by rpki-client