Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a343a3a2f34362d3436203d3e20323632383437.roa
File:                     323830343a3265383a343a3a2f34362d3436203d3e20323632383437.roa (raw, json)
Hash identifier:          bQBX+KC7r410jqODViUB6mYQ3+dLHSe66PXb1hIPzfY=
Subject key identifier:   2E:81:4A:C0:01:89:64:FB:29:EA:96:C9:8E:56:44:47:1F:1E:73:55
Certificate issuer:       /CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
Certificate serial:       3E18DB4B3D44955E3AC9316E1748F4CDF67868B9
Authority key identifier: 25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a343a3a2f34362d3436203d3e20323632383437.roa
Signing time:             Sun 11 Dec 2022 18:40:13 +0000
ROA not before:           Sun 11 Dec 2022 18:35:13 +0000
ROA not after:            Sun 10 Dec 2023 18:40:13 +0000
asID:                     262847
IP address blocks:        2804:2e8:4::/46 maxlen: 46
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:18:db:4b:3d:44:95:5e:3a:c9:31:6e:17:48:f4:cd:f6:78:68:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
        Validity
            Not Before: Dec 11 18:35:13 2022 GMT
            Not After : Dec 10 18:40:13 2023 GMT
        Subject: CN=2E814AC0018964FB29EA96C98E5644471F1E7355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1f:c9:e1:ef:d4:d3:42:24:16:c3:fb:d6:98:
                    f8:fa:6f:db:26:c4:e1:04:19:53:14:68:c3:db:df:
                    6b:c6:aa:dd:3c:1b:53:32:51:25:00:e3:1f:c0:fa:
                    15:66:1a:25:19:e5:5b:a2:92:ff:a2:d5:d8:31:99:
                    4f:5c:79:56:b3:24:f4:57:82:3d:6f:30:ae:aa:74:
                    a7:1a:7b:60:65:97:eb:c4:b2:d2:78:9d:c4:23:ed:
                    75:6a:d9:9f:5d:1c:36:65:40:c4:2e:49:2b:3c:4a:
                    eb:ff:8e:b1:12:4d:2b:a9:cd:f3:33:32:8f:e9:50:
                    c2:91:4c:19:9f:a8:67:88:b8:17:ad:0c:7b:34:d7:
                    3e:15:d6:db:12:34:1c:38:c1:94:fc:54:d6:cb:84:
                    9a:60:18:2c:d5:86:fb:50:9e:65:b5:64:d4:97:a8:
                    b2:d2:bc:d2:ea:6e:37:f6:56:cb:b2:81:ee:11:d3:
                    f5:c8:16:00:9e:a7:42:41:48:20:2c:cc:20:aa:d7:
                    a1:69:be:c2:8b:85:2a:3e:7f:b6:15:41:1c:da:78:
                    5b:1e:d5:7b:e9:0c:4a:46:1c:e2:95:da:6f:9c:69:
                    99:9c:fa:f0:1c:35:9e:a3:ae:30:6c:a7:14:59:50:
                    fc:62:2c:f6:d8:54:a4:3c:4b:93:18:2e:0e:8e:c3:
                    1f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:81:4A:C0:01:89:64:FB:29:EA:96:C9:8E:56:44:47:1F:1E:73:55
            X509v3 Authority Key Identifier:
                keyid:25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a343a3a2f34362d3436203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e8:4::/46

    Signature Algorithm: sha256WithRSAEncryption
         8b:cf:8e:21:b0:dd:67:58:26:4b:78:83:68:06:17:18:37:f2:
         2d:e3:bc:f7:9a:5a:35:27:79:e8:50:5f:fe:af:30:48:83:a3:
         b8:06:38:a1:19:39:cd:53:e8:61:40:14:bc:fd:33:7e:09:24:
         f9:9a:9b:42:90:99:46:79:f2:34:49:af:04:54:05:67:55:30:
         63:d4:db:af:31:13:af:85:f0:2e:b5:aa:93:84:9a:a8:a5:56:
         a1:bb:d2:18:ac:f5:e5:0f:26:e9:6c:fa:a3:b8:c8:77:d5:1d:
         c2:54:29:56:18:93:9c:89:c3:cc:17:52:c6:b5:4a:db:8b:8b:
         e9:f0:8c:f7:12:c9:9f:c1:46:f3:6c:57:0e:8c:c5:cb:43:2f:
         c0:93:d0:3d:5d:73:ee:53:65:22:61:b5:88:96:5d:2d:52:30:
         cd:a4:65:99:7e:80:04:de:f6:42:6e:ff:32:30:1a:c0:67:f3:
         81:12:cc:93:9a:9c:b3:88:42:ef:d6:d9:d9:42:ef:cf:a8:ef:
         e3:c3:a6:13:1b:b3:c5:7a:39:81:e2:c5:a8:df:51:3c:24:42:
         ab:46:a6:4e:f2:9a:e1:47:92:c3:a4:42:01:95:5a:63:dc:89:
         a9:8c:6b:ee:d1:5b:4c:14:01:de:08:ad:12:b0:5e:fd:4c:d1:
         cc:d6:9c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:24 2025 by rpki-client