Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3230382e302f32332d3233203d3e20323730353434.roa
File:                     3138372e39352e3230382e302f32332d3233203d3e20323730353434.roa (raw, json)
Hash identifier:          7dTQispbSNxbpwCgkblpAeqR3LY5qrhOlEnVbMrhr9g=
Subject key identifier:   E2:D7:42:9F:B4:81:18:02:CC:4F:75:E0:07:33:CB:97:B6:C7:FC:8E
Certificate issuer:       /CN=27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76
Certificate serial:       6295F4A17B8ECA3530F40F53A47E76D1E73D1B41
Authority key identifier: 27:DA:7F:E0:DD:7C:FD:2D:B4:42:1C:E4:84:B9:E9:A0:CD:A1:EE:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3230382e302f32332d3233203d3e20323730353434.roa
Signing time:             Thu 20 Feb 2025 13:41:56 +0000
ROA not before:           Thu 20 Feb 2025 13:36:56 +0000
ROA not after:            Thu 19 Feb 2026 13:41:56 +0000
asID:                     270544
IP address blocks:        187.95.208.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:95:f4:a1:7b:8e:ca:35:30:f4:0f:53:a4:7e:76:d1:e7:3d:1b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76
        Validity
            Not Before: Feb 20 13:36:56 2025 GMT
            Not After : Feb 19 13:41:56 2026 GMT
        Subject: CN=E2D7429FB4811802CC4F75E00733CB97B6C7FC8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f2:72:5c:78:51:cd:94:a2:bc:1d:96:6a:28:
                    a1:74:15:ac:77:37:59:7b:09:29:0b:78:c1:37:21:
                    a5:8c:c4:f2:07:9a:f2:ac:a6:e0:f0:ba:51:3b:dd:
                    52:7f:a7:f4:f6:86:6f:3c:d6:9d:b1:0d:2e:10:98:
                    0a:b2:d1:e9:1d:20:73:d3:0e:87:fa:bd:17:83:75:
                    af:88:bc:39:40:7f:85:6e:f4:0b:c8:19:88:cf:49:
                    ec:94:2e:f7:71:1e:64:24:8b:29:b4:93:1a:3a:5b:
                    82:ee:5a:bc:f0:0d:06:d7:96:69:aa:47:49:62:e9:
                    c4:9d:17:8a:90:6e:25:08:d1:0c:ec:e4:47:29:9f:
                    c7:e3:62:ac:ab:af:40:99:fc:b4:8f:01:2e:28:92:
                    5a:08:2a:1f:bb:92:fb:b7:d8:1e:cc:7e:b6:d6:33:
                    de:8f:97:aa:5f:dd:0d:9a:62:e9:8d:36:66:f1:f5:
                    43:83:62:c9:1d:ae:6d:35:d0:34:78:9b:7e:bb:e4:
                    f7:a2:3c:1c:c3:09:40:12:e5:f2:da:ff:4e:64:38:
                    8f:b4:91:40:64:2a:ed:e7:0e:51:2b:4a:f1:63:ab:
                    e6:ba:c8:c7:6b:74:b2:4f:94:39:02:c9:a0:9d:47:
                    1a:cd:1c:0f:8f:7c:b2:e9:91:38:5e:75:a1:f3:c2:
                    01:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D7:42:9F:B4:81:18:02:CC:4F:75:E0:07:33:CB:97:B6:C7:FC:8E
            X509v3 Authority Key Identifier:
                keyid:27:DA:7F:E0:DD:7C:FD:2D:B4:42:1C:E4:84:B9:E9:A0:CD:A1:EE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3230382e302f32332d3233203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:52:8c:4d:25:f5:93:d9:14:0a:72:19:78:d0:4e:5e:81:12:
         92:e6:ce:23:f7:b2:6d:23:45:be:62:13:0c:3a:03:ef:2b:f9:
         ef:b4:46:9d:2f:bd:f3:92:68:18:9c:f7:a7:4b:4c:c8:de:9b:
         d6:33:3a:48:b2:e8:0b:b3:0d:11:fb:0b:f0:d7:42:2c:a6:66:
         21:81:58:31:bc:57:96:76:0e:e3:82:46:11:fe:32:2f:12:62:
         7f:0b:76:46:ec:71:09:ba:7c:a7:ee:d3:b0:97:e8:4a:51:75:
         d4:1d:91:0b:a2:fb:13:11:7c:8e:d5:7a:2c:c3:f1:fc:27:f4:
         86:22:d9:e9:b8:34:db:29:87:85:5b:26:da:89:5a:69:03:50:
         c7:e0:3e:bc:94:45:40:6b:41:c4:e0:dc:9f:b2:63:44:d4:78:
         fe:ee:6e:24:c1:a9:18:e6:21:fc:1a:08:4b:63:28:db:a0:9a:
         ec:89:6f:7c:67:93:89:82:69:cf:15:32:06:ea:2a:9d:fc:1e:
         2b:05:80:d2:42:52:be:34:cd:5b:da:cf:fc:b1:44:15:14:82:
         bd:0e:a3:97:48:fe:e9:92:9c:c2:44:d3:3a:06:c5:25:21:5f:
         13:e2:e0:38:b7:a6:76:44:bb:3a:ef:0d:fd:d4:fc:c4:8b:b0:
         80:63:3b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 11:44:40 2025 by rpki-client