Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3231302e302f32332d3233203d3e20323730353434.roa
File:                     3138372e39352e3231302e302f32332d3233203d3e20323730353434.roa (raw, json)
Hash identifier:          +UC43VmPOopdMJum3dCIxziMhyqyI8v6s0W3xqrVvLg=
Subject key identifier:   32:A8:33:0C:D1:53:8C:CB:D4:B9:96:2E:E1:4E:CB:68:32:82:DF:9F
Certificate issuer:       /CN=27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76
Certificate serial:       13DA7548B790ADF49808A5B8EA3FDED34A91E866
Authority key identifier: 27:DA:7F:E0:DD:7C:FD:2D:B4:42:1C:E4:84:B9:E9:A0:CD:A1:EE:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3231302e302f32332d3233203d3e20323730353434.roa
Signing time:             Thu 20 Feb 2025 13:41:53 +0000
ROA not before:           Thu 20 Feb 2025 13:36:53 +0000
ROA not after:            Thu 19 Feb 2026 13:41:53 +0000
asID:                     270544
IP address blocks:        187.95.210.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:da:75:48:b7:90:ad:f4:98:08:a5:b8:ea:3f:de:d3:4a:91:e8:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76
        Validity
            Not Before: Feb 20 13:36:53 2025 GMT
            Not After : Feb 19 13:41:53 2026 GMT
        Subject: CN=32A8330CD1538CCBD4B9962EE14ECB683282DF9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c2:2a:c1:33:45:2a:01:2e:dd:14:36:ec:b7:
                    2d:c5:ae:90:17:6e:d6:7f:cf:b4:ac:2d:da:b7:be:
                    2f:3a:b3:eb:a1:84:52:cc:2a:54:d6:f2:be:da:ee:
                    34:f6:05:b5:13:c3:18:d9:66:95:6d:df:cd:14:c8:
                    a8:f9:a6:54:6e:11:ae:49:48:c5:5a:92:fb:c8:d1:
                    52:15:9f:c9:74:2d:e7:f4:ae:bd:8f:bd:f4:12:2c:
                    c6:3c:f3:f2:02:c8:5f:82:5f:af:e2:00:f1:7c:f9:
                    a2:76:af:f5:2a:bf:f2:24:0e:98:16:a5:2c:38:74:
                    4e:d4:d2:f0:67:7f:28:d1:96:53:6f:d8:28:e5:cb:
                    e4:7e:a7:b7:9c:6a:e5:0b:7d:6c:4a:ba:3c:85:cc:
                    aa:bc:c2:f6:e4:be:62:c6:fe:8a:4a:a2:76:ef:fa:
                    63:70:8b:47:cf:e2:ac:8b:4d:26:76:b9:8a:ba:a9:
                    ff:58:46:04:60:5f:b0:a9:59:1c:a0:36:15:3b:de:
                    f7:68:4e:20:1e:f1:d9:f0:56:d6:57:d4:1f:48:8b:
                    85:4e:1e:4f:9c:eb:61:e7:3d:16:5e:d1:d3:99:9f:
                    c3:6b:46:81:8b:94:c6:e2:e2:35:6d:ca:c8:4d:61:
                    be:33:87:b3:02:c8:f2:98:07:cc:f6:e8:ad:72:31:
                    29:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A8:33:0C:D1:53:8C:CB:D4:B9:96:2E:E1:4E:CB:68:32:82:DF:9F
            X509v3 Authority Key Identifier:
                keyid:27:DA:7F:E0:DD:7C:FD:2D:B4:42:1C:E4:84:B9:E9:A0:CD:A1:EE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3231302e302f32332d3233203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:56:76:d5:df:8a:98:87:8c:f9:63:34:f6:0b:ae:e3:7a:90:
         7c:9d:80:70:89:d9:64:fb:c9:1a:df:a2:d0:12:60:c0:4e:a3:
         61:cd:e8:34:ca:6e:3d:3b:1b:48:62:a5:1a:66:a2:7e:25:67:
         c9:15:ec:10:1d:54:16:46:6b:1a:8a:1c:58:bd:d1:72:4a:1f:
         ba:ee:81:7e:d0:31:20:23:e8:c3:d1:a2:22:8d:e9:1a:c9:5b:
         ea:02:03:b7:8d:04:a1:6b:2b:a3:25:02:18:ea:65:8e:62:69:
         be:02:84:12:b5:e9:5c:00:d4:d8:96:84:ef:58:27:83:8d:79:
         99:26:2a:f3:de:20:73:33:a2:e7:da:c7:9d:d2:c9:b5:6f:79:
         c2:15:a6:e6:f5:7f:d3:d1:d2:5c:be:a3:d5:71:38:59:19:e0:
         8f:28:f5:75:cd:13:f3:ed:2e:16:02:b6:d8:58:e5:d2:2a:2c:
         49:da:07:b4:56:3f:74:50:70:f5:0a:68:34:62:26:51:da:90:
         62:25:05:e8:a8:01:a7:ca:ac:6c:27:60:b2:c1:f3:39:0c:5f:
         56:ac:1a:5c:06:71:d7:34:30:d8:38:15:9b:89:f8:08:db:bf:
         e7:03:dc:28:15:b4:cb:83:e3:fa:18:2e:44:b3:d5:1e:6b:78:
         60:1e:16:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:52:22 2025 by rpki-client