Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a383038303a3a2f34322d3432203d3e20323632383437.roa
File:                     323830343a3265383a383038303a3a2f34322d3432203d3e20323632383437.roa (raw, json)
Hash identifier:          9N7rpB4f8UH12+dEPKmoL/8ON+jkBNgCosZfOz4HgYA=
Subject key identifier:   60:9B:B1:91:AC:8D:01:BC:B1:5F:52:FD:0A:F6:D9:CE:4C:64:E5:69
Certificate issuer:       /CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
Certificate serial:       6F5D160E653423B495EF33848812536E8D79D560
Authority key identifier: 25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a383038303a3a2f34322d3432203d3e20323632383437.roa
Signing time:             Sun 11 Dec 2022 18:40:48 +0000
ROA not before:           Sun 11 Dec 2022 18:35:48 +0000
ROA not after:            Sun 10 Dec 2023 18:40:48 +0000
asID:                     262847
IP address blocks:        2804:2e8:8080::/42 maxlen: 42
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:5d:16:0e:65:34:23:b4:95:ef:33:84:88:12:53:6e:8d:79:d5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
        Validity
            Not Before: Dec 11 18:35:48 2022 GMT
            Not After : Dec 10 18:40:48 2023 GMT
        Subject: CN=609BB191AC8D01BCB15F52FD0AF6D9CE4C64E569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:31:52:7d:e8:66:04:c3:28:d2:88:3b:e8:ed:
                    61:65:23:b3:fd:da:aa:a2:37:d0:ca:18:83:b3:1d:
                    1c:15:92:5c:b8:70:94:4f:47:c8:7d:be:d6:7f:82:
                    55:fe:0e:56:e8:d2:04:99:4e:69:bf:85:ae:b9:2b:
                    87:cf:22:dd:40:e3:da:78:d7:19:2a:7a:c0:e4:fa:
                    a3:39:22:15:e8:45:5a:11:45:e4:86:f7:ad:ca:fa:
                    5b:f9:f1:a6:3a:8c:ca:53:99:3b:5c:a9:69:e0:93:
                    14:12:7b:76:21:e9:e3:74:b5:ea:49:5a:dc:00:5f:
                    2f:3e:d9:ae:60:7e:5b:d0:c5:7d:2c:bd:e1:61:79:
                    86:db:55:e8:10:b2:13:43:af:c0:7a:72:82:f9:2a:
                    c2:bc:6d:8e:b5:3a:49:97:47:08:24:c3:02:59:14:
                    6a:36:ff:eb:cb:d3:83:67:fa:a1:aa:15:f0:17:27:
                    cb:12:25:7c:b6:c8:f7:cf:cd:04:21:2f:b5:b8:74:
                    70:b2:c0:01:e2:5a:50:1c:ff:40:23:74:41:d3:61:
                    4b:ca:71:5e:bb:85:0a:b6:fd:06:9d:01:8f:df:43:
                    36:87:9a:aa:84:b4:24:a3:1d:a1:24:55:3b:8d:c8:
                    2b:45:67:17:e4:99:f8:fb:81:dc:72:0b:09:a7:36:
                    b9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9B:B1:91:AC:8D:01:BC:B1:5F:52:FD:0A:F6:D9:CE:4C:64:E5:69
            X509v3 Authority Key Identifier:
                keyid:25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a383038303a3a2f34322d3432203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e8:8080::/42

    Signature Algorithm: sha256WithRSAEncryption
         c5:7a:24:93:a3:bd:86:e3:6e:b9:30:16:84:24:8e:0e:ad:ea:
         b6:2c:c7:39:1e:55:26:01:ad:49:07:3b:9c:1a:04:2a:8a:d8:
         a1:3e:83:47:a0:7d:24:ae:e3:46:0f:ce:af:da:9c:96:d9:9a:
         bf:db:47:34:0c:9a:f6:7c:9f:90:ec:85:66:30:97:0f:07:a0:
         72:8e:8d:46:d6:e8:67:1d:15:32:91:4f:80:f6:a8:c3:62:82:
         a8:69:30:7b:7f:7a:f6:81:28:40:6f:68:ff:69:a3:cd:de:7e:
         99:af:c0:3b:04:e8:ce:24:f5:f0:ff:9c:40:fa:4a:61:7b:8f:
         88:1e:2c:66:8a:e0:9f:bf:1e:e8:f9:88:76:13:5c:78:7b:e9:
         fe:95:17:e4:03:d4:c5:10:fb:d2:e0:0d:14:0e:2e:71:e9:d2:
         53:74:4c:ab:f7:d1:e5:5c:9d:21:75:7f:e8:ba:40:6b:f7:c2:
         59:fb:e4:e0:95:13:99:52:7a:5a:96:98:d2:43:e5:27:60:b9:
         50:95:3d:5d:51:36:10:f7:1e:bc:11:80:6b:98:16:f8:e4:5f:
         1c:25:7d:56:e4:dc:93:d6:08:22:94:b3:84:64:a6:b9:5f:61:
         be:08:35:99:d1:c6:4a:e7:b4:6e:c3:f8:8a:15:71:27:c7:5e:
         ef:55:1c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:03:39 2025 by rpki-client