Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1/323830343a353037383a3a2f33322d313238203d3e20323638333931.roa
File:                     323830343a353037383a3a2f33322d313238203d3e20323638333931.roa (raw, json)
Hash identifier:          dJoPEjZMCGyIoa73VkCvkhYSacQEIuzsmqT+J3nqTx0=
Subject key identifier:   72:A6:10:01:7F:F5:62:1B:F0:E4:E0:26:4C:60:BA:3D:EF:7E:01:32
Certificate issuer:       /CN=37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97
Certificate serial:       14A9D763A5D947A2B976DCCC606672146F6A0D6C
Authority key identifier: 37:FE:03:60:BF:70:C2:BB:2E:6A:D3:D3:4F:0D:94:2B:07:6F:AA:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1/323830343a353037383a3a2f33322d313238203d3e20323638333931.roa
Signing time:             Thu 06 Mar 2025 00:32:02 +0000
ROA not before:           Thu 06 Mar 2025 00:27:02 +0000
ROA not after:            Thu 05 Mar 2026 00:32:02 +0000
asID:                     268391
IP address blocks:        2804:5078::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a9:d7:63:a5:d9:47:a2:b9:76:dc:cc:60:66:72:14:6f:6a:0d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97
        Validity
            Not Before: Mar  6 00:27:02 2025 GMT
            Not After : Mar  5 00:32:02 2026 GMT
        Subject: CN=72A610017FF5621BF0E4E0264C60BA3DEF7E0132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:36:ab:47:78:d7:15:57:59:4b:dd:99:40:89:
                    31:48:6e:84:cf:94:01:40:df:3a:f0:00:2d:52:15:
                    5f:79:af:ae:3a:72:5a:b5:51:65:6e:d7:1f:38:13:
                    12:af:7b:ec:76:00:b3:71:d9:ca:63:c6:ab:84:03:
                    33:b1:38:a5:01:7c:64:a7:59:4b:74:8b:26:aa:02:
                    f2:91:b2:27:e4:42:70:39:a6:bb:88:41:39:79:4c:
                    e1:82:ab:3e:63:e1:cf:0a:c8:5b:58:b0:95:4a:f5:
                    61:e0:1e:29:81:33:fa:6f:22:13:86:4f:7d:a7:05:
                    57:50:fb:6b:00:3a:92:c7:9c:e5:fe:f9:99:df:fe:
                    ec:77:e6:2d:55:67:3c:75:b2:7a:49:1a:26:0e:27:
                    64:2a:89:5c:87:bb:19:b4:a2:2c:85:f5:66:9c:23:
                    ee:27:f8:f9:a8:77:92:50:1f:5f:7c:8e:94:f5:db:
                    af:04:3a:2f:fb:df:e4:ce:4e:8e:80:f9:85:f9:9e:
                    08:d8:75:32:70:d1:ac:cc:ac:97:da:ac:bb:b0:a3:
                    da:36:9c:cf:d9:70:14:ec:21:fc:0d:db:5a:64:94:
                    f9:0e:bf:38:d6:f9:b3:23:21:6a:b1:9f:d3:5f:c2:
                    50:51:70:5c:ab:0e:b9:74:9e:27:90:47:32:c0:1b:
                    be:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A6:10:01:7F:F5:62:1B:F0:E4:E0:26:4C:60:BA:3D:EF:7E:01:32
            X509v3 Authority Key Identifier:
                keyid:37:FE:03:60:BF:70:C2:BB:2E:6A:D3:D3:4F:0D:94:2B:07:6F:AA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1/37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1/323830343a353037383a3a2f33322d313238203d3e20323638333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5078::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:55:4d:8b:8e:59:47:5e:fd:a8:24:58:41:ea:a3:ff:16:6c:
         95:d4:ef:a3:5d:01:de:ee:11:d1:4b:11:4f:70:08:3e:7a:1c:
         f5:aa:16:b1:ed:ae:e4:61:15:15:10:3e:4f:24:39:1e:3b:a7:
         7b:60:8b:b4:9a:8d:81:34:aa:16:3b:7d:f4:2c:28:e4:33:45:
         5b:17:82:67:0d:5f:e9:61:5a:59:d8:33:f6:28:c6:3c:46:4a:
         42:47:90:e2:45:e5:5f:2b:d6:86:5b:78:51:fa:fc:60:3d:eb:
         e6:48:2e:1b:0b:a4:4b:56:fb:e8:9c:00:ba:fe:f6:bd:d9:be:
         e1:61:d5:37:14:c5:57:b3:3e:89:70:b3:f8:a9:a7:01:aa:b4:
         d9:24:b7:7b:ab:3b:1b:ef:23:7c:b9:55:8a:6b:05:ec:b4:22:
         a3:f4:62:11:f9:e0:03:48:e4:24:6e:95:1f:b9:6c:d7:f8:1f:
         bc:93:a8:5b:d9:28:49:38:ba:d1:20:2d:d2:32:3a:ea:5c:c5:
         7d:8c:44:f6:3d:97:c7:ff:a3:62:09:81:10:c7:28:e7:db:6f:
         55:af:e1:bf:14:af:7c:2d:ab:81:e1:d6:89:fd:cd:68:33:a2:
         b8:f3:b8:28:3a:94:45:6a:fa:f9:9e:fd:72:5a:79:4d:7b:f1:
         b2:ab:94:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:19:58 2025 by rpki-client