Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/0/323830343a376231303a343030303a3a2f33342d3334203d3e20323731343038.roa
File:                     323830343a376231303a343030303a3a2f33342d3334203d3e20323731343038.roa (raw, json)
Hash identifier:          cfw4TuHAQ5CqeiS0CZepnuRej36ACYRijXf8ffh30TU=
Subject key identifier:   7D:A7:97:94:FC:36:55:78:69:D0:9E:3F:07:A4:D4:68:09:2C:FE:DB
Certificate issuer:       /CN=75EB4782E85658A9CEBD0E1D11D7D80696006B00
Certificate serial:       36664BEB5D31856B10473A90E2AA1A2ADA016462
Authority key identifier: 75:EB:47:82:E8:56:58:A9:CE:BD:0E:1D:11:D7:D8:06:96:00:6B:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75EB4782E85658A9CEBD0E1D11D7D80696006B00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/0/323830343a376231303a343030303a3a2f33342d3334203d3e20323731343038.roa
Signing time:             Mon 04 Mar 2024 23:05:47 +0000
ROA not before:           Mon 04 Mar 2024 23:00:47 +0000
ROA not after:            Mon 03 Mar 2025 23:05:47 +0000
asID:                     271408
IP address blocks:        2804:7b10:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:66:4b:eb:5d:31:85:6b:10:47:3a:90:e2:aa:1a:2a:da:01:64:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75EB4782E85658A9CEBD0E1D11D7D80696006B00
        Validity
            Not Before: Mar  4 23:00:47 2024 GMT
            Not After : Mar  3 23:05:47 2025 GMT
        Subject: CN=7DA79794FC36557869D09E3F07A4D468092CFEDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:91:2f:22:e2:99:2e:65:93:28:57:fa:57:0e:
                    42:0c:75:97:73:e4:e6:b0:8c:07:e6:84:24:85:6a:
                    97:73:9d:10:04:bd:fb:f3:2e:45:01:39:20:31:db:
                    94:08:be:f9:54:f9:9a:b7:31:44:47:38:e1:b2:ac:
                    12:0e:b4:0d:a3:76:c8:ce:41:fc:03:79:2f:d6:4d:
                    2b:cb:4a:1a:47:24:bb:85:36:61:ab:34:8a:44:b4:
                    48:a7:aa:d2:c3:d4:4d:4b:0d:0a:d0:e0:d3:23:b8:
                    4d:67:4b:33:60:a6:4b:a5:25:e6:ab:b0:32:70:15:
                    41:75:1c:b4:37:e1:61:5c:d9:38:05:3e:00:72:23:
                    98:8f:e2:49:8a:b3:32:3a:24:b7:60:60:0e:27:44:
                    58:fc:da:78:b3:f0:8a:66:77:86:42:47:e9:39:fc:
                    ce:3b:9a:dd:23:39:39:95:1e:5e:42:62:93:88:6a:
                    b3:ce:85:b7:90:d5:f9:59:6d:ac:da:db:3e:a1:11:
                    d5:68:b8:c3:2b:c9:19:cf:6a:99:1b:40:e9:06:d5:
                    d1:74:9d:f5:2e:a5:16:2f:c5:0d:12:dc:3c:4c:4b:
                    66:fc:fe:b0:e9:2e:80:3e:fb:32:4d:cd:36:52:44:
                    59:bf:77:9e:7b:4b:f3:a8:69:1c:1b:db:71:87:0f:
                    54:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A7:97:94:FC:36:55:78:69:D0:9E:3F:07:A4:D4:68:09:2C:FE:DB
            X509v3 Authority Key Identifier:
                keyid:75:EB:47:82:E8:56:58:A9:CE:BD:0E:1D:11:D7:D8:06:96:00:6B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/0/75EB4782E85658A9CEBD0E1D11D7D80696006B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75EB4782E85658A9CEBD0E1D11D7D80696006B00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/0/323830343a376231303a343030303a3a2f33342d3334203d3e20323731343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b10:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1a:bf:62:7c:b3:03:19:de:9e:15:ad:6b:96:57:c7:e7:99:26:
         b7:27:87:00:68:cd:d7:f0:0b:a0:28:00:d7:99:e2:c2:a3:54:
         af:ef:c2:5c:3e:fe:7c:8d:fe:14:99:fa:84:9a:73:dc:de:0e:
         20:33:36:e7:e2:ac:2e:31:b8:fe:58:86:35:4b:7e:7d:5a:9f:
         9f:f6:a9:ab:00:a2:17:eb:39:a1:0c:9a:96:d4:08:fd:d5:92:
         4f:80:78:01:37:a7:b8:1d:d1:d0:ee:bd:90:3e:30:bd:da:16:
         5f:96:ff:f8:92:bf:b2:9d:26:c9:dc:c3:af:87:f8:be:21:ef:
         4f:38:09:9e:28:ef:37:22:84:35:d5:62:60:45:40:b9:40:f7:
         16:49:72:a6:76:ba:f8:c5:1b:ba:44:60:3f:db:09:5c:d7:07:
         68:c1:11:bc:1f:ce:a3:fa:23:47:a9:d6:2b:0b:4e:33:17:89:
         d7:09:93:29:51:94:c6:e1:2b:15:f1:2e:22:e9:83:d3:28:e1:
         9b:28:16:2b:97:ef:9c:06:70:a2:a3:3c:db:2a:23:e5:56:da:
         13:e7:ad:35:66:c6:56:57:ab:eb:d7:59:5d:b4:b4:2e:6f:5b:
         f8:d4:07:c5:2b:ce:ee:a7:5d:c1:0e:a8:ea:50:6a:3c:19:04:
         13:5c:43:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:43 2025 by rpki-client