Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a343030303a3a2f33342d3334203d3e20323730353434.roa
File:                     323830343a366439633a343030303a3a2f33342d3334203d3e20323730353434.roa (raw, json)
Hash identifier:          qMnQ5j5V0nTFLrUzm2ri+RB2E41kJNFzK6FrycLjeIg=
Subject key identifier:   C8:B8:73:F2:25:BE:71:54:7F:10:66:3B:76:4A:1E:09:48:D2:79:BD
Certificate issuer:       /CN=27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76
Certificate serial:       2F5B6EE17C53865A0585B3ADDE8412ECE045AF9F
Authority key identifier: 27:DA:7F:E0:DD:7C:FD:2D:B4:42:1C:E4:84:B9:E9:A0:CD:A1:EE:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a343030303a3a2f33342d3334203d3e20323730353434.roa
Signing time:             Thu 20 Feb 2025 13:41:54 +0000
ROA not before:           Thu 20 Feb 2025 13:36:54 +0000
ROA not after:            Thu 19 Feb 2026 13:41:54 +0000
asID:                     270544
IP address blocks:        2804:6d9c:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:5b:6e:e1:7c:53:86:5a:05:85:b3:ad:de:84:12:ec:e0:45:af:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76
        Validity
            Not Before: Feb 20 13:36:54 2025 GMT
            Not After : Feb 19 13:41:54 2026 GMT
        Subject: CN=C8B873F225BE71547F10663B764A1E0948D279BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:de:81:9b:9b:80:4d:d8:ac:5e:56:87:85:b2:
                    c7:97:b8:aa:16:a8:c7:94:50:cc:15:95:04:c7:a2:
                    51:68:34:68:cd:17:dd:c9:15:65:94:56:69:ae:e6:
                    a2:67:8b:fa:ca:fd:f9:65:90:a0:f1:d3:15:bf:3e:
                    86:7e:71:b9:e8:85:9b:18:09:5e:f9:34:e8:d3:ca:
                    14:7c:54:21:ef:00:83:c4:7a:73:3f:42:87:77:ef:
                    fe:e4:e0:fa:4e:51:07:89:27:97:0a:f9:bd:80:8a:
                    45:71:64:35:6a:bf:aa:98:3f:60:b4:34:aa:1b:df:
                    65:21:97:f8:4f:e0:06:99:a9:e0:69:8c:8f:75:b6:
                    e3:98:58:4f:f9:82:f8:c8:85:f2:a7:42:09:04:8b:
                    ac:3d:cd:4c:98:c3:00:27:8b:c3:66:3c:30:de:b5:
                    77:2c:35:7b:e3:47:c6:7f:cb:dd:91:be:1f:de:03:
                    8d:c6:63:c5:c7:8b:37:be:46:39:a5:12:cc:ac:53:
                    d3:f4:13:f4:a0:b2:fe:9e:fa:6c:af:5e:95:bf:c3:
                    f2:3e:75:9e:85:ee:89:51:44:01:28:20:87:aa:bb:
                    5d:17:ed:0e:ce:c4:b4:ce:26:da:ad:2d:22:cd:88:
                    96:6d:37:bc:ae:ed:c6:25:65:d7:fd:19:a2:fd:cc:
                    4b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B8:73:F2:25:BE:71:54:7F:10:66:3B:76:4A:1E:09:48:D2:79:BD
            X509v3 Authority Key Identifier:
                keyid:27:DA:7F:E0:DD:7C:FD:2D:B4:42:1C:E4:84:B9:E9:A0:CD:A1:EE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a343030303a3a2f33342d3334203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d9c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         be:ea:b2:da:a9:a3:70:a6:9f:46:fa:71:3f:f2:d4:14:d5:fd:
         7a:67:0d:9a:1d:9f:f7:3c:e6:15:6e:6c:54:1c:55:ab:a7:34:
         a9:1d:7e:d5:d7:cd:1f:f0:26:72:44:7f:84:4f:4f:0d:dc:28:
         3a:5d:64:87:16:9d:f9:f5:9f:92:74:c4:0b:26:7e:d2:da:a9:
         8f:3f:03:d6:7c:54:1b:18:2e:59:7f:1e:09:25:57:c9:9d:18:
         45:20:fb:f3:b9:b0:a6:92:54:df:a4:ce:8d:17:9a:ed:db:4e:
         34:68:71:a7:92:d1:d9:73:4e:88:0d:41:7b:81:c1:fc:69:de:
         f3:0e:6e:55:c3:3d:0d:da:df:75:d0:91:30:80:4a:10:55:27:
         f9:6f:b5:d6:19:8d:b9:c9:c6:33:17:21:0c:f8:ee:0a:e6:e4:
         a5:84:c2:46:20:c8:b9:55:20:45:7a:58:41:8a:31:19:a2:79:
         16:86:48:0c:42:1a:cd:a5:5c:3d:0f:38:17:53:51:6d:14:8b:
         9c:5e:5d:87:e1:17:72:23:9c:fb:58:0c:65:26:2a:44:5b:5b:
         45:9a:14:54:ae:0b:dd:72:9c:e2:78:e7:2c:28:62:b1:5d:cd:
         14:8b:9d:07:1d:09:7d:ee:66:45:a5:f7:87:c2:28:97:f3:03:
         de:66:52:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:14:58 2025 by rpki-client