Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/0/323830343a376231303a383030303a3a2f33332d3333203d3e20323731343038.roa
File:                     323830343a376231303a383030303a3a2f33332d3333203d3e20323731343038.roa (raw, json)
Hash identifier:          x8H6kNHWLLn0VUP2wNLu+YFA3Yg6RGEjfrj4+8USsf0=
Subject key identifier:   97:37:A2:ED:17:CF:A4:34:4E:DF:7B:B0:40:A2:91:47:A4:37:E5:CB
Certificate issuer:       /CN=75EB4782E85658A9CEBD0E1D11D7D80696006B00
Certificate serial:       559563F11354957E4CE88A7DEEDB0FFAACC58A18
Authority key identifier: 75:EB:47:82:E8:56:58:A9:CE:BD:0E:1D:11:D7:D8:06:96:00:6B:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75EB4782E85658A9CEBD0E1D11D7D80696006B00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/0/323830343a376231303a383030303a3a2f33332d3333203d3e20323731343038.roa
Signing time:             Mon 04 Mar 2024 23:05:50 +0000
ROA not before:           Mon 04 Mar 2024 23:00:50 +0000
ROA not after:            Mon 03 Mar 2025 23:05:50 +0000
asID:                     271408
IP address blocks:        2804:7b10:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:95:63:f1:13:54:95:7e:4c:e8:8a:7d:ee:db:0f:fa:ac:c5:8a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75EB4782E85658A9CEBD0E1D11D7D80696006B00
        Validity
            Not Before: Mar  4 23:00:50 2024 GMT
            Not After : Mar  3 23:05:50 2025 GMT
        Subject: CN=9737A2ED17CFA4344EDF7BB040A29147A437E5CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:03:ec:04:10:5f:59:0a:0d:b5:15:ca:66:73:
                    7b:12:16:55:cb:8d:27:79:fa:15:f6:a2:b7:1a:35:
                    ee:77:96:71:b2:a9:8c:78:6f:23:aa:c9:7b:b5:7a:
                    1f:cf:b0:15:63:8e:dc:e4:ad:3a:ec:47:38:47:03:
                    c8:12:4d:cd:87:82:53:2c:6a:7a:2f:7a:e2:fb:3c:
                    78:bb:63:25:7f:8a:c8:be:22:36:2e:ba:82:7d:31:
                    f7:f3:60:80:d7:a4:e8:c1:ec:04:4e:17:86:2a:0b:
                    83:81:8d:4d:b4:c1:7c:7f:f8:14:80:0a:ee:67:ba:
                    f3:7a:08:6a:de:29:d6:ce:9a:48:f5:24:d3:aa:5b:
                    c6:89:db:b5:e5:97:35:1d:11:57:39:a6:2f:6d:9f:
                    93:b4:f7:ad:dc:e5:37:f8:59:d4:4d:46:4a:72:22:
                    ba:10:91:d2:28:5a:d0:83:f6:6a:eb:34:81:93:86:
                    f8:e8:91:1c:d0:1b:33:d9:ca:bd:f0:15:92:71:cf:
                    9a:4e:a7:bf:27:4a:52:d0:a3:31:f3:6f:9d:fd:41:
                    03:ec:03:d3:11:37:fa:79:5c:2c:f7:fc:d4:3b:68:
                    16:65:3b:13:e6:50:63:c3:e2:19:bc:40:39:64:f4:
                    0c:3e:a5:b3:a2:27:33:c5:26:49:3e:ba:f5:b6:23:
                    66:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:37:A2:ED:17:CF:A4:34:4E:DF:7B:B0:40:A2:91:47:A4:37:E5:CB
            X509v3 Authority Key Identifier:
                keyid:75:EB:47:82:E8:56:58:A9:CE:BD:0E:1D:11:D7:D8:06:96:00:6B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/0/75EB4782E85658A9CEBD0E1D11D7D80696006B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75EB4782E85658A9CEBD0E1D11D7D80696006B00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/0/323830343a376231303a383030303a3a2f33332d3333203d3e20323731343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b10:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         01:53:ec:71:68:8c:e1:04:e4:7a:d7:f7:f6:e6:f5:a8:c8:cb:
         a3:2c:17:12:5f:84:04:b2:0c:3b:22:a9:61:a1:e0:95:bd:e8:
         e3:78:c1:07:c0:0d:7c:67:d7:b9:ac:12:f6:72:94:6f:49:cc:
         87:39:5a:57:8f:76:62:5c:04:29:52:c8:13:97:06:78:6c:99:
         16:f8:10:a5:22:6e:d1:ee:b4:8e:94:c1:f7:89:48:76:89:f7:
         e6:89:b7:e1:da:b8:c1:f8:b3:25:da:26:02:0a:cc:f7:ab:4e:
         ef:be:80:9b:d2:60:54:6c:14:60:37:0e:48:3f:bc:5f:60:31:
         89:8e:cc:89:54:90:21:d2:86:9a:7b:22:96:7c:2e:54:4f:9f:
         0a:52:ed:e1:94:3d:5b:15:c1:0a:15:b9:73:0a:7a:5a:9b:37:
         e1:01:93:39:ec:3f:5d:75:48:72:37:8d:b2:9c:80:8e:5a:2e:
         79:b5:bf:51:4e:1f:57:ab:e9:ae:64:31:bf:ec:2e:84:fa:ff:
         22:7f:05:bc:f2:4a:d2:06:18:6b:b7:28:87:d0:c7:20:9e:ec:
         08:09:3f:4b:79:65:f5:3f:d2:c7:bd:7d:cf:95:74:87:90:31:
         d2:5e:13:2d:82:9a:be:4f:3d:63:f9:81:93:27:b3:20:47:2b:
         e9:6a:04:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:57:04 2025 by rpki-client