Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a3330303a3a2f34302d3430203d3e20323632383437.roa
File:                     323830343a3265383a3330303a3a2f34302d3430203d3e20323632383437.roa (raw, json)
Hash identifier:          MlykXe+P8oHw+pPERFgLuAusNx1gLohrtl5oLn0eakQ=
Subject key identifier:   F3:FC:67:21:C6:6D:03:12:CD:1A:7E:69:D0:30:FD:98:EC:4E:6C:6E
Certificate issuer:       /CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
Certificate serial:       7973BAA4FAD4C025860CE391FE1D55CF63F2CBB7
Authority key identifier: 25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a3330303a3a2f34302d3430203d3e20323632383437.roa
Signing time:             Sun 11 Dec 2022 18:40:20 +0000
ROA not before:           Sun 11 Dec 2022 18:35:20 +0000
ROA not after:            Sun 10 Dec 2023 18:40:20 +0000
asID:                     262847
IP address blocks:        2804:2e8:300::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:73:ba:a4:fa:d4:c0:25:86:0c:e3:91:fe:1d:55:cf:63:f2:cb:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
        Validity
            Not Before: Dec 11 18:35:20 2022 GMT
            Not After : Dec 10 18:40:20 2023 GMT
        Subject: CN=F3FC6721C66D0312CD1A7E69D030FD98EC4E6C6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e2:e2:a5:1a:8c:b0:b2:38:81:a5:76:9c:46:
                    7f:cc:0f:2d:79:e1:bc:b4:44:6c:ec:04:70:8d:c3:
                    10:02:d4:00:89:4e:c9:fb:18:7d:34:5d:ee:b5:9b:
                    46:5a:8e:a8:28:b8:a7:fa:56:a7:d3:70:82:b2:a5:
                    3a:00:83:1b:59:8c:e2:01:2a:d6:12:19:6e:1a:25:
                    80:e3:0b:7e:89:7a:98:99:68:69:ad:c1:c9:64:46:
                    58:7f:45:b7:55:d0:ce:77:ba:cf:ce:4c:36:bd:c3:
                    40:9e:70:8f:a6:2d:0d:19:ca:98:67:3e:3c:14:68:
                    64:00:4a:3f:76:b7:30:4f:01:ca:e8:96:7d:04:65:
                    71:12:16:52:a5:36:bd:80:51:c5:cf:7e:9a:1b:dd:
                    6a:fd:65:39:75:9b:14:0a:e4:5a:21:18:8b:da:e7:
                    52:e8:55:96:b5:67:ff:3e:2c:38:a9:a2:5c:f3:18:
                    cd:e0:7b:0b:3b:9b:4a:3b:2c:cd:28:bb:47:db:77:
                    3d:e5:eb:33:99:d7:23:d5:fc:63:01:d0:fc:ff:45:
                    15:97:c2:3e:27:7d:7b:3a:2b:bb:15:39:c6:ce:22:
                    43:e0:b1:02:14:ef:d4:1d:58:fc:55:cb:b0:fb:26:
                    d2:5d:df:c4:30:f7:3b:1b:0c:9d:58:11:e5:c1:c9:
                    f8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FC:67:21:C6:6D:03:12:CD:1A:7E:69:D0:30:FD:98:EC:4E:6C:6E
            X509v3 Authority Key Identifier:
                keyid:25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a3330303a3a2f34302d3430203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e8:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:45:10:f2:3d:72:e8:b8:37:ed:85:f0:f2:e6:13:d4:07:9b:
         9a:c9:8a:1e:57:82:35:9f:f7:cd:d2:51:45:be:ca:e2:eb:fd:
         3d:b6:c6:0a:b6:02:f9:4d:8d:73:0b:49:32:26:2f:45:ff:74:
         cb:78:f8:31:02:08:d9:93:3d:07:b7:06:e9:d9:12:b4:4d:ad:
         dd:d1:c1:98:79:97:23:87:42:34:7e:31:ab:8d:0e:78:9a:d6:
         e1:25:37:57:ea:e2:13:ca:90:96:eb:c1:75:f8:a1:f7:5c:8a:
         db:d8:ae:af:03:5f:8d:6e:d3:1c:ba:da:bb:f8:6a:fc:6b:00:
         c9:5e:76:c5:19:a9:1d:fb:65:f1:66:16:ff:d1:2d:e1:49:9f:
         63:54:e0:d1:9c:15:e8:45:f5:84:a4:bd:c8:4a:e4:7d:c9:29:
         82:dd:f6:7b:94:ed:2b:9d:de:da:e5:9a:b1:fd:3a:25:b8:41:
         bd:e9:08:7e:d5:c0:fc:2f:fc:97:d6:12:f9:d6:52:c3:67:72:
         47:38:19:69:9d:88:58:67:eb:8f:0a:f8:99:dd:11:65:56:d5:
         7f:ca:47:10:1c:23:fa:a7:07:d7:e3:42:dc:9c:1b:4f:af:37:
         12:87:6c:c3:56:7d:a4:0f:71:7b:21:74:e4:2d:da:3f:9f:c3:
         11:e0:31:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:23:00 2025 by rpki-client