Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3230382e302f32342d3234203d3e20323730353434.roa
File:                     3138372e39352e3230382e302f32342d3234203d3e20323730353434.roa (raw, json)
Hash identifier:          uWOU7RrUujGnjZNzi9yb7njhF7qIwCfgAwAF9lwkipA=
Subject key identifier:   16:8B:9B:DE:E8:F3:65:1C:2D:4F:BC:B9:C7:3D:3A:C6:4F:DF:C4:DF
Certificate issuer:       /CN=27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76
Certificate serial:       282BFCDB6C128079726E0BAFE1E51459BFA932C5
Authority key identifier: 27:DA:7F:E0:DD:7C:FD:2D:B4:42:1C:E4:84:B9:E9:A0:CD:A1:EE:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3230382e302f32342d3234203d3e20323730353434.roa
Signing time:             Thu 20 Feb 2025 13:41:53 +0000
ROA not before:           Thu 20 Feb 2025 13:36:53 +0000
ROA not after:            Thu 19 Feb 2026 13:41:53 +0000
asID:                     270544
IP address blocks:        187.95.208.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2b:fc:db:6c:12:80:79:72:6e:0b:af:e1:e5:14:59:bf:a9:32:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76
        Validity
            Not Before: Feb 20 13:36:53 2025 GMT
            Not After : Feb 19 13:41:53 2026 GMT
        Subject: CN=168B9BDEE8F3651C2D4FBCB9C73D3AC64FDFC4DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7c:55:b4:ee:0d:d3:46:25:25:32:c2:94:86:
                    f1:07:d6:82:92:73:26:7c:7d:56:f7:1d:f2:9b:8e:
                    25:b2:0f:b1:91:60:58:e0:3c:e7:c9:84:e7:19:00:
                    32:47:7b:24:a4:31:53:4e:00:f1:21:06:ff:b8:75:
                    e8:8e:11:8e:4b:7b:ce:2e:a1:8a:0a:43:68:1d:85:
                    79:ea:8d:fa:eb:f6:dc:24:f7:af:bc:11:fb:67:ae:
                    fc:3e:0e:58:f8:f9:72:48:5e:ce:ea:31:5f:c7:f7:
                    b8:24:bb:56:a7:03:df:f6:4d:94:98:7e:d7:df:81:
                    d2:65:c0:51:37:4a:e5:76:af:30:64:99:5c:2d:1c:
                    a3:68:2d:ed:07:3b:98:38:1d:3a:ab:3e:bb:ea:33:
                    1d:0d:64:fe:da:35:a1:20:08:1d:12:de:b9:bb:3b:
                    8b:13:7a:e9:a8:65:c9:f2:ea:b8:7a:25:f7:09:50:
                    19:e3:e0:23:37:2f:7d:41:5b:a2:6a:53:42:39:1c:
                    7f:33:de:52:31:2a:17:4e:ba:1a:e6:05:01:5a:45:
                    61:ad:fd:60:73:e5:fc:3d:e5:92:a8:e4:44:32:1b:
                    47:72:1f:56:39:c3:13:cd:a5:3c:6b:66:fc:da:36:
                    52:e0:29:29:87:01:9a:14:e3:dd:6b:9e:59:5b:f0:
                    fc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8B:9B:DE:E8:F3:65:1C:2D:4F:BC:B9:C7:3D:3A:C6:4F:DF:C4:DF
            X509v3 Authority Key Identifier:
                keyid:27:DA:7F:E0:DD:7C:FD:2D:B4:42:1C:E4:84:B9:E9:A0:CD:A1:EE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3230382e302f32342d3234203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:16:8b:d5:9b:68:7e:77:c2:7f:c1:e8:c3:38:5e:c6:46:22:
         f2:62:99:14:c2:64:33:61:df:58:29:b5:dc:48:36:c2:04:1f:
         0c:d0:38:65:d2:23:43:b5:81:65:d7:c4:15:7e:db:53:b2:dc:
         1c:df:69:ed:52:f3:9e:d5:81:04:7a:46:1d:a2:9a:9c:1d:4f:
         c3:03:7b:cd:88:c8:96:52:dc:02:3e:f8:eb:1d:dc:91:ad:00:
         86:b3:13:ba:6b:23:3d:fa:2c:dd:66:23:b7:3f:7e:5d:91:40:
         e7:d1:a8:13:2e:d6:3b:50:25:15:53:81:cc:7c:e8:f0:0b:2e:
         ef:db:60:8e:52:1f:21:e0:4f:de:4b:4b:b4:3f:7d:83:17:95:
         ed:0f:bd:22:89:95:ab:e1:d9:68:71:57:39:ee:0d:93:75:d7:
         42:48:00:9c:18:7b:f6:3f:38:44:80:74:43:d9:72:88:73:76:
         42:38:7e:64:80:5d:b3:a4:7c:b1:04:38:51:57:cd:d5:e7:4d:
         32:35:9c:ce:ff:26:4b:8a:3d:6d:f2:ba:de:e5:d2:5d:a7:6f:
         53:1a:78:3c:6a:50:22:f1:b5:cd:bd:79:37:0b:ca:99:49:96:
         6e:4e:23:c4:6f:f0:94:4c:fd:47:5f:a8:cf:0d:cd:bd:1e:3e:
         b6:a9:77:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:51:59 2025 by rpki-client