Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a3730333a3a2f34382d3438203d3e20323632383437.roa
File:                     323830343a3265383a3730333a3a2f34382d3438203d3e20323632383437.roa (raw, json)
Hash identifier:          cQl63kWHB8cEVnZaa+NbkcPiL3AAgKrKTM1ulSpmHIo=
Subject key identifier:   9E:EE:C4:D2:DA:6D:D4:AB:45:74:01:53:B8:70:E4:D4:67:8B:89:6B
Certificate issuer:       /CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
Certificate serial:       13AE650920D1A2D1EDE69171B8279519142AFE68
Authority key identifier: 25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a3730333a3a2f34382d3438203d3e20323632383437.roa
Signing time:             Sun 11 Dec 2022 18:40:25 +0000
ROA not before:           Sun 11 Dec 2022 18:35:25 +0000
ROA not after:            Sun 10 Dec 2023 18:40:25 +0000
asID:                     262847
IP address blocks:        2804:2e8:703::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ae:65:09:20:d1:a2:d1:ed:e6:91:71:b8:27:95:19:14:2a:fe:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
        Validity
            Not Before: Dec 11 18:35:25 2022 GMT
            Not After : Dec 10 18:40:25 2023 GMT
        Subject: CN=9EEEC4D2DA6DD4AB45740153B870E4D4678B896B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:82:a9:61:eb:5f:85:86:06:85:d9:bc:f9:2d:
                    5c:7a:bf:02:05:b0:38:e1:d8:f6:67:44:e0:fb:f4:
                    98:57:7c:5e:78:c3:dd:42:bd:cc:76:05:d8:b8:88:
                    c4:63:2e:d8:72:9b:80:91:0b:62:dc:6e:97:0f:07:
                    76:c8:c2:65:87:18:dc:7b:3c:61:19:1d:9c:83:d0:
                    cd:95:61:d8:f9:0e:2e:b7:b7:76:43:5b:28:44:2e:
                    fc:b3:b3:93:9b:e5:1f:a9:49:f5:bc:ad:08:32:db:
                    bb:2b:af:2e:12:c7:39:0b:ea:1a:fc:2b:c9:c9:15:
                    13:4d:c2:e9:04:51:fb:62:b3:f9:31:6d:31:c2:83:
                    86:56:ea:86:14:c0:9c:7c:8d:42:6b:0c:4a:77:d3:
                    08:3a:36:22:c2:c8:ea:d8:0e:7a:07:1f:e9:fd:59:
                    dd:58:18:43:71:57:a9:79:6c:05:fa:48:6b:a5:81:
                    cf:15:5d:f7:e5:23:04:2d:9d:48:2f:08:9b:13:b3:
                    a8:21:1d:f5:c6:65:15:d1:c0:97:5c:fc:f4:14:61:
                    98:ac:e9:85:47:d6:43:2d:f5:5d:c4:7d:43:29:ab:
                    eb:a7:b4:04:22:8c:47:20:47:01:a7:23:2f:c0:5a:
                    ac:bf:63:5c:36:12:2c:80:cb:21:f0:9a:b8:ed:db:
                    b7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:EE:C4:D2:DA:6D:D4:AB:45:74:01:53:B8:70:E4:D4:67:8B:89:6B
            X509v3 Authority Key Identifier:
                keyid:25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a3730333a3a2f34382d3438203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e8:703::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:b0:f2:6f:06:da:2f:5d:4d:04:85:c7:77:7a:0e:fd:ff:41:
         01:6c:82:b6:46:17:58:b1:a9:ec:82:92:54:6e:a3:f8:95:e8:
         5f:22:2f:2a:f9:d9:91:08:75:09:79:67:f7:9f:dc:03:69:86:
         4f:d9:ef:3b:0f:24:2c:1f:43:65:50:4d:f4:32:02:18:0c:0c:
         d4:6f:8d:3e:18:bf:8b:5d:97:d2:e5:a9:fd:62:63:65:91:02:
         c6:69:24:06:e4:8b:dc:14:fd:30:53:3f:6c:cc:3c:87:0a:41:
         b2:05:a1:82:89:d7:ff:69:26:6f:9f:3b:be:e5:68:94:09:62:
         94:23:ca:cf:28:52:0f:7e:df:b7:45:f6:3a:05:25:47:73:09:
         fb:a8:d8:fd:b5:ba:37:ff:40:94:4b:64:c1:e4:f5:71:6f:28:
         ad:f8:bd:f6:8b:1b:0f:f0:64:48:24:24:c9:4a:f9:2b:bb:05:
         83:19:f7:66:74:bf:a7:8b:ff:fd:e9:04:9b:2e:39:61:f6:86:
         75:8e:8e:ff:3c:7f:87:11:02:26:ee:63:ed:eb:a9:cd:30:46:
         51:76:a8:1d:5b:cf:34:78:ec:55:9d:72:6f:1c:54:5b:c2:1d:
         bb:94:8e:4b:e1:a8:07:4f:a5:00:c0:0d:49:20:da:bd:d2:e0:
         7f:a6:f1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:59:02 2025 by rpki-client