Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/323830343a366231303a3a2f33322d3332203d3e20323730333735.roa
File:                     323830343a366231303a3a2f33322d3332203d3e20323730333735.roa (raw, json)
Hash identifier:          Ht4hdDhW7DHwYOMlqVNDKg7NI93Tq9nj7ANeS7Av54E=
Subject key identifier:   09:E9:7C:92:72:8C:31:A6:55:D2:A5:EC:D8:DD:60:C4:3E:A1:64:30
Certificate issuer:       /CN=729E2197FDAAE4A2E93BC258E258A5D2C023B204
Certificate serial:       3316C53FA0E160D8F4047DC1E5D772729509A395
Authority key identifier: 72:9E:21:97:FD:AA:E4:A2:E9:3B:C2:58:E2:58:A5:D2:C0:23:B2:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/323830343a366231303a3a2f33322d3332203d3e20323730333735.roa
Signing time:             Thu 06 Mar 2025 13:20:06 +0000
ROA not before:           Thu 06 Mar 2025 13:15:06 +0000
ROA not after:            Thu 05 Mar 2026 13:20:06 +0000
asID:                     270375
IP address blocks:        2804:6b10::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:16:c5:3f:a0:e1:60:d8:f4:04:7d:c1:e5:d7:72:72:95:09:a3:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729E2197FDAAE4A2E93BC258E258A5D2C023B204
        Validity
            Not Before: Mar  6 13:15:06 2025 GMT
            Not After : Mar  5 13:20:06 2026 GMT
        Subject: CN=09E97C92728C31A655D2A5ECD8DD60C43EA16430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:af:f0:6f:c3:65:59:ac:85:0d:ce:42:d6:08:
                    60:ad:b4:24:65:6b:c9:7a:81:8d:78:bc:5b:ff:82:
                    40:d5:94:50:af:ab:cd:48:6d:1b:75:05:1d:eb:b8:
                    c0:85:c2:5a:2a:c7:48:41:e5:1e:a7:3e:54:24:ad:
                    ae:35:b0:b9:8a:64:5f:d4:58:20:f4:d0:31:60:b6:
                    bf:aa:89:fb:be:25:3a:23:72:90:1b:56:de:58:7c:
                    37:da:d0:6d:33:cf:88:37:73:45:99:84:29:80:1f:
                    10:2d:cb:04:f3:ba:ba:cd:53:d3:98:2f:06:74:ea:
                    2b:c7:01:e1:17:89:8a:58:eb:f5:8f:12:df:13:76:
                    e3:05:f1:d6:84:9c:c3:d7:b9:12:64:a1:77:41:ea:
                    0a:0f:ce:49:e4:a9:ab:bc:40:41:55:2e:1b:b6:bc:
                    5a:0e:cb:c7:d3:d1:63:79:31:4e:a9:2e:9b:92:0e:
                    f3:15:02:e4:10:56:90:da:01:53:eb:51:5a:f9:89:
                    87:6d:6a:51:f1:73:55:42:0f:24:c6:4e:f1:9f:0c:
                    81:45:8e:a1:4b:bf:3c:80:60:93:1e:07:26:e0:ff:
                    63:eb:e9:74:7b:cd:9b:12:a7:4c:b0:a4:20:b6:e8:
                    18:a4:0a:25:65:e0:98:db:f4:c3:08:45:6f:36:9d:
                    71:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E9:7C:92:72:8C:31:A6:55:D2:A5:EC:D8:DD:60:C4:3E:A1:64:30
            X509v3 Authority Key Identifier:
                keyid:72:9E:21:97:FD:AA:E4:A2:E9:3B:C2:58:E2:58:A5:D2:C0:23:B2:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/729E2197FDAAE4A2E93BC258E258A5D2C023B204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/1/323830343a366231303a3a2f33322d3332203d3e20323730333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b10::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:93:fb:b7:06:53:ab:32:66:e7:f4:60:db:59:95:07:05:e8:
         c2:b0:1f:66:10:dc:96:c6:97:bb:ab:ab:d9:cb:bf:d2:6c:4b:
         c5:86:1e:f7:e7:66:f0:07:98:f9:dd:58:8a:b7:52:0e:c3:f6:
         4e:32:fb:8b:88:85:88:81:42:6e:b2:87:3f:9d:1f:cd:2e:77:
         02:79:ed:8a:55:f9:01:23:ed:dd:57:66:ef:80:d8:2f:ab:3f:
         7b:4c:d3:6d:2b:f9:07:d8:18:bd:15:a4:81:e2:5c:36:40:33:
         5b:b0:2f:fc:6b:45:91:01:b9:0a:67:28:11:d3:56:70:ba:6c:
         9a:3a:ae:0e:9f:da:70:a3:4a:c7:3b:3b:89:17:08:d9:e7:a2:
         54:ed:be:a9:40:61:2d:fa:02:e1:66:60:c5:a6:9a:7c:1f:3b:
         eb:aa:95:e9:3f:2f:4d:88:e5:2f:6d:df:17:1b:bb:e6:bd:5f:
         e9:f2:bf:61:ca:d7:99:1b:f3:af:e9:5d:b4:d5:fa:3a:da:df:
         f2:03:f1:12:33:81:d9:28:50:d7:49:05:08:f0:a9:ea:c0:1e:
         c8:ca:5b:73:a3:db:f5:20:e5:de:d3:7c:6f:0d:aa:54:62:e1:
         6e:2c:f4:65:fd:81:b7:7a:f0:40:4a:f6:af:6c:8f:5e:f6:4c:
         d5:ae:3b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:44:30 2025 by rpki-client