Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3132382e302f31392d3234203d3e203238323130.roa
File:                     3137392e3130392e3132382e302f31392d3234203d3e203238323130.roa (raw, json)
Hash identifier:          xM6xK7OX7aJbcD/ntta3uiUtFErtQcXLQvoyb+rh1Xg=
Subject key identifier:   82:AF:0C:CA:F3:47:9D:42:CA:84:98:A7:3B:01:24:95:08:7D:80:D7
Certificate issuer:       /CN=EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6
Certificate serial:       6BAA4AAB68D1F98BCAEB5865FD2A43971C5CD02C
Authority key identifier: EB:60:FF:6B:02:73:73:0C:27:BE:59:AF:B4:BE:CA:4F:11:C7:D8:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3132382e302f31392d3234203d3e203238323130.roa
Signing time:             Wed 21 Feb 2024 15:38:13 +0000
ROA not before:           Wed 21 Feb 2024 15:33:13 +0000
ROA not after:            Fri 21 Feb 2025 15:38:13 +0000
asID:                     28210
IP address blocks:        179.109.128.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:aa:4a:ab:68:d1:f9:8b:ca:eb:58:65:fd:2a:43:97:1c:5c:d0:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6
        Validity
            Not Before: Feb 21 15:33:13 2024 GMT
            Not After : Feb 21 15:38:13 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0e:eb:44:e9:b8:78:22:f2:b9:53:19:db:0b:
                    94:19:df:bb:9b:b0:b6:c4:00:70:f5:f1:d2:a0:e0:
                    1c:a4:fa:e8:ba:1d:3b:b6:b9:5a:be:29:ff:06:f6:
                    04:43:cd:82:92:34:04:5e:3d:2c:c6:9b:22:22:63:
                    0e:f6:3c:df:d1:95:7b:17:34:69:a9:5b:21:2b:e8:
                    17:c2:5a:88:e9:22:90:30:b0:0c:37:80:e7:68:76:
                    ac:0d:6b:9a:d7:fa:f3:87:72:3f:84:22:16:14:b8:
                    c6:3a:ed:6e:c8:5a:c6:7d:80:d7:54:ec:01:2e:d4:
                    b0:69:79:6b:c7:2c:c1:a1:e2:84:5f:cb:ad:2b:67:
                    31:9c:a3:89:0f:2b:f1:a1:6a:fc:90:b6:4b:6c:9f:
                    da:2c:c3:b9:16:4c:48:c2:8f:b5:bf:a9:7a:da:42:
                    5f:75:74:c1:58:46:14:0a:12:7c:9e:17:ac:47:2c:
                    c1:b2:6b:c5:de:19:33:9d:5f:5c:d2:91:49:62:0b:
                    d6:cf:44:82:8d:67:f5:28:94:dd:38:c9:20:c0:d8:
                    3b:19:eb:97:70:51:62:05:c4:97:c4:c0:ad:e8:c1:
                    4d:ea:b2:97:cb:ee:62:b4:4d:85:87:d7:10:e9:83:
                    3d:2c:92:1c:f5:84:78:dc:7e:60:c4:f6:31:30:52:
                    f3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AF:0C:CA:F3:47:9D:42:CA:84:98:A7:3B:01:24:95:08:7D:80:D7
            X509v3 Authority Key Identifier:
                keyid:EB:60:FF:6B:02:73:73:0C:27:BE:59:AF:B4:BE:CA:4F:11:C7:D8:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3132382e302f31392d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c2:cb:b9:34:47:e9:55:14:6a:ea:2e:6d:07:c7:1b:a9:2a:27:
         ab:69:d6:cc:14:4d:1d:79:76:37:9e:de:bc:c5:7d:2d:23:d3:
         37:32:55:70:4d:b6:89:8c:84:ed:79:41:75:54:d2:22:4a:7f:
         e4:b1:bc:63:ec:8e:77:9c:10:cd:8d:f7:31:85:4e:85:c6:bb:
         99:ac:17:ed:b1:fb:41:c2:1e:4f:ee:35:0d:dd:2c:13:e4:29:
         94:8c:aa:ff:37:50:c3:30:bc:72:59:0a:92:2a:4d:73:a1:e2:
         c1:de:ec:f4:4d:4f:f0:7e:40:d7:76:49:36:62:66:0d:03:67:
         f0:6e:5e:83:c9:1f:ae:8c:ef:e4:68:fb:97:6a:f6:bf:06:30:
         c7:7b:a9:cc:6e:7e:a7:de:9c:e7:de:50:2c:e0:9e:52:6e:6a:
         b7:23:be:df:ce:b8:d3:3c:d6:88:7a:5b:93:fa:a3:8a:da:34:
         68:6e:49:7a:b9:1f:9a:01:06:7d:0f:2a:03:9b:03:08:0e:83:
         ae:ae:73:68:94:9a:df:c0:49:8e:8b:a5:b6:d3:eb:5c:cf:c5:
         6b:e6:fa:7c:3c:c3:98:a3:15:85:e5:d1:9e:91:06:cd:6b:b0:
         ae:02:4d:da:fa:8b:c7:f7:9f:6a:1d:27:a8:03:d2:95:1b:be:
         0e:b0:4e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:40:11 2025 by rpki-client