Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/323830343a366438633a3a2f33322d3334203d3e20323730353430.roa
File:                     323830343a366438633a3a2f33322d3334203d3e20323730353430.roa (raw, json)
Hash identifier:          e5g6uwXi8HJvYw7fI6TwtQtfc2/AeEqZl9sGgQsh0xc=
Subject key identifier:   E2:17:AC:E4:F2:73:58:78:03:CF:D1:DC:3E:AD:FC:45:C5:6C:76:04
Certificate issuer:       /CN=73E65EE174B429E845F371CDDD00B81BC489A017
Certificate serial:       07ADA601DC51FED15D16764AAFA1E7EC51457DCA
Authority key identifier: 73:E6:5E:E1:74:B4:29:E8:45:F3:71:CD:DD:00:B8:1B:C4:89:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73E65EE174B429E845F371CDDD00B81BC489A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/323830343a366438633a3a2f33322d3334203d3e20323730353430.roa
Signing time:             Wed 05 Mar 2025 19:00:05 +0000
ROA not before:           Wed 05 Mar 2025 18:55:05 +0000
ROA not after:            Wed 04 Mar 2026 19:00:05 +0000
asID:                     270540
IP address blocks:        2804:6d8c::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ad:a6:01:dc:51:fe:d1:5d:16:76:4a:af:a1:e7:ec:51:45:7d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73E65EE174B429E845F371CDDD00B81BC489A017
        Validity
            Not Before: Mar  5 18:55:05 2025 GMT
            Not After : Mar  4 19:00:05 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d7:7f:5e:76:bd:03:82:4f:fa:8a:78:b4:7f:
                    89:fa:c1:30:fc:0f:c3:58:04:4e:1d:51:f3:6e:ea:
                    5d:85:9f:26:86:48:32:7c:7e:83:66:59:2f:7a:f0:
                    83:df:45:7f:0c:27:85:23:fc:c6:a5:91:5a:7f:d0:
                    07:2a:bf:a3:3c:f4:3a:de:0e:c8:fa:c4:f3:95:05:
                    25:9a:b6:61:b1:dc:88:94:2e:47:cf:d2:68:2b:29:
                    4e:35:4c:dc:aa:23:3e:bc:a1:6e:79:23:49:15:77:
                    b3:38:2d:ac:89:58:bf:3a:ad:93:0d:e5:19:01:3e:
                    1c:e2:9c:10:b1:78:cd:1b:f8:b0:86:f4:44:d7:8e:
                    95:07:bb:29:cf:c1:5f:5c:0d:2c:0d:fb:a7:c4:5f:
                    c3:23:f7:c1:a7:8c:af:23:74:1e:ea:76:4e:c7:88:
                    50:bf:75:a5:de:3d:4a:82:ee:4f:dc:03:00:92:d2:
                    84:ec:ae:a2:0c:68:de:e5:51:35:0c:d3:3a:60:59:
                    53:86:d3:16:be:e2:ad:57:2b:f0:b4:1b:3b:a7:5a:
                    f2:a6:cf:07:70:a6:92:13:d2:79:56:e3:82:ea:1e:
                    34:47:00:d2:14:db:1d:ba:39:24:d7:22:8d:fd:81:
                    af:df:5a:7a:aa:56:cf:ce:ca:ea:6d:bf:00:41:3c:
                    99:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:17:AC:E4:F2:73:58:78:03:CF:D1:DC:3E:AD:FC:45:C5:6C:76:04
            X509v3 Authority Key Identifier:
                keyid:73:E6:5E:E1:74:B4:29:E8:45:F3:71:CD:DD:00:B8:1B:C4:89:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/73E65EE174B429E845F371CDDD00B81BC489A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73E65EE174B429E845F371CDDD00B81BC489A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/323830343a366438633a3a2f33322d3334203d3e20323730353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:6e:64:da:9f:a0:ee:0d:b6:53:3d:0e:7a:82:7f:4e:db:a3:
         ea:8f:07:1d:40:7f:c5:d2:ac:30:7e:01:73:03:09:33:7a:91:
         fe:50:76:fd:2f:16:a9:f0:c8:f3:fc:1e:ee:c5:24:48:d9:1b:
         68:82:ef:c1:28:d0:79:66:17:d9:04:f6:70:77:8b:d6:44:41:
         a9:93:2f:c3:35:49:40:ae:3f:89:70:9c:6d:ad:39:94:78:5f:
         e2:c8:68:9f:8e:66:ae:ff:38:1e:19:5a:00:c4:01:1e:d1:78:
         f4:c0:88:d2:d6:56:48:9e:36:a1:93:77:2f:d8:f5:1b:e0:c0:
         15:38:cc:d9:52:4c:eb:ae:e2:10:80:b4:bd:9f:67:9f:ea:76:
         60:e6:83:a9:45:a4:6e:a8:85:51:48:53:08:ad:b6:8f:78:39:
         1b:27:ec:82:52:49:aa:18:b7:ad:db:bf:65:4c:65:0f:ee:fe:
         32:7f:58:5f:db:53:d2:40:f7:69:0b:67:9b:0b:03:17:2b:1d:
         c1:a6:d2:fe:fb:cc:0b:f8:41:8d:c9:8b:25:89:34:41:5f:fc:
         72:c2:f0:7b:5a:5f:90:a6:5f:62:f8:e8:96:f4:8b:b6:b3:44:
         d9:82:0f:ef:f9:95:39:1a:95:62:b5:4b:ac:4f:12:70:1f:b3:
         54:e3:03:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:32:35 2025 by rpki-client