Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a3a2f33332d3333203d3e20323730353434.roa
File:                     323830343a366439633a3a2f33332d3333203d3e20323730353434.roa (raw, json)
Hash identifier:          Lq6piADhvi/aA3PSUtedk7pIDJkwHzGkaW+JKX6Z+cI=
Subject key identifier:   29:2D:7C:08:A3:D5:07:E8:C6:E9:E5:0C:9D:AA:37:5F:2C:6D:02:E2
Certificate issuer:       /CN=27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76
Certificate serial:       14D908E64365B07E182D4C91196E4332EEEDD186
Authority key identifier: 27:DA:7F:E0:DD:7C:FD:2D:B4:42:1C:E4:84:B9:E9:A0:CD:A1:EE:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a3a2f33332d3333203d3e20323730353434.roa
Signing time:             Thu 20 Feb 2025 13:41:56 +0000
ROA not before:           Thu 20 Feb 2025 13:36:56 +0000
ROA not after:            Thu 19 Feb 2026 13:41:56 +0000
asID:                     270544
IP address blocks:        2804:6d9c::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d9:08:e6:43:65:b0:7e:18:2d:4c:91:19:6e:43:32:ee:ed:d1:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76
        Validity
            Not Before: Feb 20 13:36:56 2025 GMT
            Not After : Feb 19 13:41:56 2026 GMT
        Subject: CN=292D7C08A3D507E8C6E9E50C9DAA375F2C6D02E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:67:85:00:12:ea:d8:e8:96:ae:cf:3c:4b:9a:
                    8e:90:86:bd:a0:ad:57:70:10:c9:2a:77:1c:6d:48:
                    a9:ea:b6:14:22:8e:6f:e7:b2:ca:b0:71:db:56:1d:
                    46:b2:52:75:9d:1c:7e:16:16:8a:95:0e:10:b7:ce:
                    99:74:1f:59:25:8a:31:53:c3:5e:c7:08:df:22:41:
                    9c:54:45:c7:55:53:b5:5c:42:98:1a:f4:c6:70:11:
                    ab:a6:fa:41:af:ef:2d:8b:dc:6d:27:f2:ef:da:1a:
                    65:93:1d:0d:70:68:97:2f:4e:eb:f4:61:86:ab:11:
                    ea:3b:50:4d:f7:05:b1:88:6e:a1:04:a1:b5:eb:d8:
                    b1:3f:b7:6d:57:e8:53:51:ba:34:bb:49:44:47:f9:
                    ee:75:f4:d3:ce:35:c6:14:20:e2:01:3b:9c:b9:27:
                    de:13:f0:13:d1:35:4d:80:23:50:04:53:48:be:e0:
                    57:38:9d:97:d5:c5:44:b8:58:a8:ad:07:4e:0c:68:
                    a4:dd:ab:e4:f1:ab:c9:f2:56:2c:51:58:66:9e:82:
                    fb:01:50:09:27:b3:bd:2a:a9:31:16:56:68:d8:db:
                    3c:be:f2:ca:01:cf:de:76:f0:25:e2:11:40:73:d6:
                    fe:52:62:04:2d:94:72:23:e9:ec:f1:85:2c:4e:94:
                    1b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2D:7C:08:A3:D5:07:E8:C6:E9:E5:0C:9D:AA:37:5F:2C:6D:02:E2
            X509v3 Authority Key Identifier:
                keyid:27:DA:7F:E0:DD:7C:FD:2D:B4:42:1C:E4:84:B9:E9:A0:CD:A1:EE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a3a2f33332d3333203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d9c::/33

    Signature Algorithm: sha256WithRSAEncryption
         28:d5:f3:a7:da:ec:d2:36:dd:ad:47:89:49:20:fa:98:2c:cb:
         ca:60:19:08:a0:35:35:bb:26:f3:17:b8:14:b4:19:2f:d7:dd:
         3c:d3:e5:5b:05:ec:fe:5f:90:cc:82:ba:72:04:31:f7:03:70:
         7c:7e:b7:5a:c6:7a:39:01:8c:32:77:0d:32:4e:2a:33:d2:86:
         b6:e2:7e:0d:8e:37:e4:86:eb:c9:fb:e3:5f:c5:64:af:2d:9e:
         46:fa:c5:39:c1:2b:36:5c:04:ea:fd:67:d8:12:09:0d:73:a5:
         f3:5d:43:0a:9d:bb:b6:f3:81:49:1d:e2:f1:51:2c:b7:3a:ef:
         25:99:b0:d7:fb:ed:5a:d7:d2:79:b9:5d:6b:b0:43:65:84:d3:
         bb:bb:dc:82:85:0d:a6:5d:08:98:78:61:12:9c:96:09:a8:db:
         a4:71:13:b8:d9:d8:f4:f5:a5:74:9c:91:f8:75:85:fd:d2:e2:
         4b:b8:c8:3e:b9:6c:91:17:54:59:78:52:de:a0:80:29:3a:e8:
         16:19:67:97:f4:b6:21:43:d2:df:b9:d9:49:39:7f:42:75:eb:
         8e:45:b1:c2:a5:01:04:39:02:58:e1:a3:77:73:ef:a4:fb:ef:
         d1:65:15:4d:58:94:d5:44:43:13:b7:17:a5:c0:ec:02:e7:20:
         94:89:ce:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:42:40 2025 by rpki-client