Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a383063313a3a2f34382d3438203d3e20323632383437.roa
File:                     323830343a3265383a383063313a3a2f34382d3438203d3e20323632383437.roa (raw, json)
Hash identifier:          Gm9Jq3XTgeRkt9TaUToabJ8w3ny1G4iyRKNkMRkp3IA=
Subject key identifier:   65:99:49:7B:F2:ED:34:06:77:F0:FB:AB:88:BC:A9:43:99:B2:C2:55
Certificate issuer:       /CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
Certificate serial:       7F81B847CE60FF39CF9BCDAEBB0B3E81FFCF45C3
Authority key identifier: 25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a383063313a3a2f34382d3438203d3e20323632383437.roa
Signing time:             Sun 11 Dec 2022 18:40:51 +0000
ROA not before:           Sun 11 Dec 2022 18:35:51 +0000
ROA not after:            Sun 10 Dec 2023 18:40:51 +0000
asID:                     262847
IP address blocks:        2804:2e8:80c1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:81:b8:47:ce:60:ff:39:cf:9b:cd:ae:bb:0b:3e:81:ff:cf:45:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
        Validity
            Not Before: Dec 11 18:35:51 2022 GMT
            Not After : Dec 10 18:40:51 2023 GMT
        Subject: CN=6599497BF2ED340677F0FBAB88BCA94399B2C255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:4e:e4:8f:ed:83:e5:7e:13:86:18:41:20:
                    b9:24:53:90:fb:cf:36:96:01:5c:88:72:da:5b:38:
                    69:0f:32:e0:b0:d8:ff:42:05:8d:53:b6:f4:61:9b:
                    10:7f:55:3f:24:16:63:a0:c7:12:37:bf:83:11:92:
                    a4:2f:4e:7b:ac:76:99:80:b7:6a:91:de:60:46:99:
                    2d:a0:cf:c8:8e:ab:e5:a0:fc:75:60:97:f8:79:6f:
                    01:01:d0:9a:af:e6:3c:c1:3d:c4:70:db:23:d5:cb:
                    89:d7:42:53:42:f1:9e:15:fa:41:b7:5d:13:d3:36:
                    14:1d:17:21:91:33:a3:bc:c2:39:d8:c9:22:53:5f:
                    8e:b4:e3:60:32:82:aa:6d:69:ec:3f:4e:86:a5:8f:
                    35:7b:0b:2b:37:51:c9:9f:97:dd:1e:82:ea:28:18:
                    bb:77:dc:8a:3e:4a:96:52:5f:0f:57:6d:0f:2a:48:
                    5b:99:aa:76:1b:79:95:69:36:67:d0:88:4d:67:1c:
                    aa:48:ec:04:28:7d:80:a1:3f:c4:7d:89:ed:03:b2:
                    46:42:2b:3d:e6:ab:5e:11:ff:13:8c:b9:e3:cc:e5:
                    61:5c:b1:bf:f1:ec:7f:ba:7b:61:8e:86:d0:70:aa:
                    d8:56:22:f4:ed:99:eb:ef:69:e5:99:ef:f9:f7:30:
                    2e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:99:49:7B:F2:ED:34:06:77:F0:FB:AB:88:BC:A9:43:99:B2:C2:55
            X509v3 Authority Key Identifier:
                keyid:25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a383063313a3a2f34382d3438203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e8:80c1::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:02:b2:e7:91:3a:64:be:65:fd:8a:b3:be:7c:06:65:ad:fe:
         b3:b4:d3:ab:32:c5:9e:f7:19:81:33:fb:b9:53:d8:e2:ef:e7:
         ea:89:fe:0c:80:92:da:ef:0f:33:49:d6:59:75:46:c4:f0:bc:
         35:ac:d7:e1:13:81:e9:6e:f3:0f:11:c7:88:f7:27:18:a0:82:
         0b:db:d0:ea:e7:e2:67:7d:77:a8:b9:8d:3c:26:4a:27:98:4f:
         be:42:c9:e4:a2:b1:f6:24:3d:82:99:00:32:b5:0a:4b:f7:e4:
         d6:e0:a3:ba:2b:0a:6e:d1:7e:ce:fb:c8:f2:83:b5:9a:86:e7:
         7d:88:ce:d5:26:da:b4:64:a9:52:0a:ed:6f:d9:e8:c4:cd:55:
         f3:96:b7:8a:57:9d:19:dc:e3:01:19:73:96:96:41:d2:ea:c8:
         e9:83:7f:77:17:b0:3d:d1:01:fb:2c:4f:92:2d:67:eb:aa:28:
         99:4d:88:71:0e:c5:d9:79:57:bc:6f:43:60:cd:87:20:02:4c:
         f4:1c:fc:0d:aa:62:df:e7:d6:6e:68:46:67:bf:c3:05:ac:c3:
         37:47:71:49:fc:6b:38:7c:f5:32:4f:bc:0f:92:16:2d:f9:e9:
         6f:79:62:3e:d1:65:a4:40:38:80:49:dd:d7:98:fa:04:6b:8c:
         2a:99:0b:ff
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUf4G4R85g/znPm82uuws+gf/PRcMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU5ODI1QkZGM0VDQTY0MjQ1QjY4RkFFMDdDRUVDQkMy
NUUzNTUwMDAeFw0yMjEyMTExODM1NTFaFw0yMzEyMTAxODQwNTFaMDMxMTAvBgNV
BAMTKDY1OTk0OTdCRjJFRDM0MDY3N0YwRkJBQjg4QkNBOTQzOTlCMkMyNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5zE7kj+2D5X4ThhhBILkkU5D7
zzaWAVyIctpbOGkPMuCw2P9CBY1TtvRhmxB/VT8kFmOgxxI3v4MRkqQvTnusdpmA
t2qR3mBGmS2gz8iOq+Wg/HVgl/h5bwEB0Jqv5jzBPcRw2yPVy4nXQlNC8Z4V+kG3
XRPTNhQdFyGRM6O8wjnYySJTX46042Aygqptaew/ToaljzV7Cys3Ucmfl90eguoo
GLt33Io+SpZSXw9XbQ8qSFuZqnYbeZVpNmfQiE1nHKpI7AQofYChP8R9ie0DskZC
Kz3mq14R/xOMuePM5WFcsb/x7H+6e2GOhtBwqthWIvTtmevvaeWZ7/n3MC71AgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUZZlJe/LtNAZ38PuriLypQ5mywlUwHwYDVR0j
BBgwFoAUJZglv/PspkJFto+uB87svCXjVQAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2JBYmJaNng1RnJ3QTRKNmFkNjFKZW90d2RZQ3hSM3Z2ZER1VjdoSEdx
QmYvMC8yNTk4MjVCRkYzRUNBNjQyNDVCNjhGQUUwN0NFRUNCQzI1RTM1NTAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI1OTgyNUJGRjNFQ0E2NDI0
NUI2OEZBRTA3Q0VFQ0JDMjVFMzU1MDAuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNiQWJiWjZ4NUZyd0E0SjZhZDYxSmVvdHdkWUN4UjN2dmREdVY3aEhHcUJmLzAv
MzIzODMwMzQzYTMyNjUzODNhMzgzMDYzMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzMjM2MzIzODM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBALogMEwDQYJKoZIhvcNAQELBQAD
ggEBAKICsueROmS+Zf2Ks758BmWt/rO006syxZ73GYEz+7lT2OLv5+qJ/gyAktrv
DzNJ1ll1RsTwvDWs1+ETgelu8w8Rx4j3Jxigggvb0Orn4md9d6i5jTwmSieYT75C
yeSisfYkPYKZADK1Ckv35Nbgo7orCm7Rfs77yPKDtZqG532IztUm2rRkqVIK7W/Z
6MTNVfOWt4pXnRnc4wEZc5aWQdLqyOmDf3cXsD3RAfssT5ItZ+uqKJlNiHEOxdl5
V7xvQ2DNhyACTPQc/A2qYt/n1m5oRme/wwWswzdHcUn8azh89TJPvA+SFi356W95
Yj7RZaRAOIBJ3deY+gRrjCqZC/8=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:19:58 2025 by rpki-client