Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a383030383a3a2f34352d3435203d3e20323632383437.roa
File:                     323830343a3265383a383030383a3a2f34352d3435203d3e20323632383437.roa (raw, json)
Hash identifier:          Bybr663ssfGvRQRLR24VkgYgWGaVW8QhFzJ2dGAYj0s=
Subject key identifier:   C1:12:40:93:AA:5A:85:7D:84:A9:36:66:7F:C1:D7:79:AB:39:FE:87
Certificate issuer:       /CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
Certificate serial:       669259B5595CD46FD22508197198701387766E6E
Authority key identifier: 25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a383030383a3a2f34352d3435203d3e20323632383437.roa
Signing time:             Sun 11 Dec 2022 18:40:32 +0000
ROA not before:           Sun 11 Dec 2022 18:35:32 +0000
ROA not after:            Sun 10 Dec 2023 18:40:32 +0000
asID:                     262847
IP address blocks:        2804:2e8:8008::/45 maxlen: 45
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:92:59:b5:59:5c:d4:6f:d2:25:08:19:71:98:70:13:87:76:6e:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
        Validity
            Not Before: Dec 11 18:35:32 2022 GMT
            Not After : Dec 10 18:40:32 2023 GMT
        Subject: CN=C1124093AA5A857D84A936667FC1D779AB39FE87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:84:ed:b1:42:ae:9c:2c:53:70:74:09:6c:92:
                    09:b3:47:9b:ac:5b:8c:b9:97:37:81:aa:af:30:b8:
                    c2:d5:73:2e:c3:4e:d3:de:c1:b3:c2:9f:0b:1f:14:
                    25:44:de:96:13:06:32:66:51:f5:3b:7f:34:e5:da:
                    90:01:9f:d6:dd:2b:78:d4:f9:fc:1b:5b:84:04:20:
                    a7:54:74:f8:60:45:53:3e:88:40:45:7d:27:73:ba:
                    4e:1b:64:29:65:e4:c4:aa:5a:82:35:da:8c:ec:ad:
                    b1:59:37:a4:d4:fb:38:e2:86:21:b2:25:0c:0a:cf:
                    a5:79:cf:53:7f:c4:8e:7c:6b:12:2a:7a:29:f8:67:
                    36:84:04:1d:64:f2:f2:06:62:e9:5c:71:74:21:e3:
                    4a:46:62:e4:82:78:61:9a:30:ca:a0:8c:ed:fd:97:
                    6c:89:7a:2b:8d:3c:b1:32:92:21:d6:54:13:1d:8b:
                    3c:9f:23:a6:13:82:67:4f:00:29:91:75:b6:08:76:
                    e9:3b:40:2d:bc:ec:63:a8:d6:e1:88:4c:1b:7d:67:
                    76:5d:86:8a:02:7d:87:41:ad:a4:0c:4a:29:a8:43:
                    f5:77:ad:47:6a:7d:8c:45:fa:e7:d6:0c:b7:95:f6:
                    c5:93:18:c8:c4:18:2c:c4:79:84:dc:76:6a:3b:ab:
                    dc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:12:40:93:AA:5A:85:7D:84:A9:36:66:7F:C1:D7:79:AB:39:FE:87
            X509v3 Authority Key Identifier:
                keyid:25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a383030383a3a2f34352d3435203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e8:8008::/45

    Signature Algorithm: sha256WithRSAEncryption
         c6:4a:b8:e1:a3:49:7b:85:90:25:4c:c1:7d:b0:3b:b6:32:11:
         51:83:f2:ba:87:92:f2:e6:b0:0f:04:33:db:e2:6e:2e:af:f6:
         ea:d2:5f:99:2b:74:80:c2:1d:64:17:ce:02:d5:03:4b:14:32:
         9d:db:66:34:eb:67:b1:e8:06:49:4c:88:76:5e:5f:0f:1a:07:
         21:ac:b0:63:bd:80:cc:61:7d:8e:c5:5f:26:ca:d7:79:7f:0d:
         ed:c5:3f:a1:c1:4d:0f:f1:0d:f6:79:85:7e:f1:d4:90:2c:50:
         6b:bd:91:79:00:ba:22:39:48:81:f6:bb:b5:06:34:e7:5f:7c:
         4a:97:0d:e4:22:15:96:d8:a2:87:b3:94:89:29:0f:33:02:4e:
         38:27:d0:fc:ed:7a:e8:c6:c9:14:6a:b9:2c:77:14:5c:32:d3:
         a4:e0:90:8c:b7:c8:f8:08:cf:3c:70:57:91:7b:9f:23:b8:82:
         72:d8:de:f3:db:b0:23:52:5b:e1:f8:42:dd:ce:5f:f2:d4:4b:
         97:c7:cf:76:5e:04:e9:5e:29:35:e2:22:d2:40:21:08:4d:f9:
         ae:52:82:9a:c9:8b:c2:4b:6a:e2:e3:0b:c9:09:fc:e1:42:c3:
         e1:2b:ed:4e:5d:86:45:c6:0c:9c:ee:4b:16:52:58:de:af:f2:
         bf:d6:57:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:15:00 2025 by rpki-client