Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a3734303a3a2f34322d3432203d3e20323632383437.roa
File:                     323830343a3265383a3734303a3a2f34322d3432203d3e20323632383437.roa (raw, json)
Hash identifier:          N/rX6IubVGziZ7orF67tzO4UUYaRMOU/UqErh75fP88=
Subject key identifier:   3B:AF:04:94:46:4A:1D:63:82:7C:EA:8F:55:2B:8D:B7:4C:1A:AC:D0
Certificate issuer:       /CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
Certificate serial:       665041055099CB09380AC5511B80551AA14B5E18
Authority key identifier: 25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a3734303a3a2f34322d3432203d3e20323632383437.roa
Signing time:             Sun 11 Dec 2022 18:40:22 +0000
ROA not before:           Sun 11 Dec 2022 18:35:22 +0000
ROA not after:            Sun 10 Dec 2023 18:40:22 +0000
asID:                     262847
IP address blocks:        2804:2e8:740::/42 maxlen: 42
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:50:41:05:50:99:cb:09:38:0a:c5:51:1b:80:55:1a:a1:4b:5e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
        Validity
            Not Before: Dec 11 18:35:22 2022 GMT
            Not After : Dec 10 18:40:22 2023 GMT
        Subject: CN=3BAF0494464A1D63827CEA8F552B8DB74C1AACD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8f:f4:39:ad:91:55:75:a0:1b:e7:70:cd:2b:
                    c2:65:f3:df:1e:ef:d9:9e:75:47:cf:2f:e9:fb:63:
                    1a:a7:72:3f:20:d3:80:fa:f7:8e:52:67:cc:2c:74:
                    0f:ca:00:f3:83:a8:84:8c:bb:c8:be:5a:f6:1d:2a:
                    14:38:00:2b:94:d0:b0:50:8c:42:08:02:59:5f:c0:
                    5e:fa:02:c1:bb:f1:6b:3d:56:28:a4:61:f1:66:5b:
                    50:42:0f:b0:67:e6:b6:8d:ac:ed:52:e2:78:58:6c:
                    84:77:8e:18:8b:0e:62:6a:96:6d:58:9e:a2:89:0d:
                    b8:11:05:5a:f9:6d:1a:39:3f:f1:8b:f6:45:8c:08:
                    f9:76:4f:c1:25:f7:06:68:67:b2:52:c6:31:07:9c:
                    f9:7c:4a:22:aa:58:76:8d:7f:27:e3:fc:78:a1:f9:
                    95:a8:e9:fa:5b:c1:6f:2e:53:f3:b4:66:ab:20:b3:
                    90:c6:84:47:40:2f:c5:21:d4:27:a8:35:52:a4:d4:
                    16:95:0b:e3:a0:e5:1a:32:e4:93:7f:b0:6d:29:24:
                    b7:c7:d0:f1:3b:37:ff:64:55:82:3d:a3:d8:e6:dd:
                    9b:cc:41:43:de:7b:27:13:d1:e6:65:33:5e:51:6a:
                    38:e4:ab:b2:6a:55:d0:4d:a8:30:9c:4c:07:56:f5:
                    f4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AF:04:94:46:4A:1D:63:82:7C:EA:8F:55:2B:8D:B7:4C:1A:AC:D0
            X509v3 Authority Key Identifier:
                keyid:25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a3734303a3a2f34322d3432203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e8:740::/42

    Signature Algorithm: sha256WithRSAEncryption
         9f:75:a7:f3:36:d9:c2:f6:bc:b4:f2:42:8f:88:63:56:5d:71:
         ef:a3:4f:5e:fd:82:bc:f1:52:d5:af:f9:3d:5c:d8:b7:74:d5:
         07:bd:7d:38:2b:6d:c9:22:b1:0d:1b:82:bc:ac:e2:04:09:d5:
         c6:67:1c:f0:88:45:97:fe:bf:c9:9e:49:9a:78:8d:b1:a7:98:
         38:81:36:94:c9:19:c3:1a:b0:57:bc:6d:e0:36:d6:ce:ce:0b:
         b7:cf:79:78:1b:0b:2f:3d:c7:8e:0f:2d:29:e7:9c:5b:86:34:
         0f:71:33:99:78:1f:06:0f:84:c0:92:12:87:e1:a1:f6:5d:eb:
         01:f1:70:a4:1d:fd:b4:f0:28:69:5f:d7:1b:cf:de:c8:f9:cc:
         88:8e:c1:06:eb:55:88:0f:fb:c1:72:4f:2c:f8:11:d5:4c:20:
         2b:bd:a0:96:8c:52:2a:99:ef:32:72:de:af:f4:d6:7e:0f:48:
         60:d1:0f:33:84:fc:e9:5e:60:29:15:22:28:25:41:bd:52:3e:
         a5:3f:dc:fc:c3:fd:28:ef:b6:c2:25:4a:5d:40:23:94:d0:43:
         b9:30:fc:f5:0c:da:06:6c:2d:4e:5f:a0:ab:f5:be:80:8a:54:
         c7:6e:05:1b:17:49:33:9a:f2:fd:9a:8e:30:f6:fb:0b:eb:69:
         d1:a6:b5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:19:24 2025 by rpki-client