Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a633030303a3a2f33342d3334203d3e20323730353434.roa
File:                     323830343a366439633a633030303a3a2f33342d3334203d3e20323730353434.roa (raw, json)
Hash identifier:          Bwzrj/5l1qXa6BLu/3WelpkXK2sayYDKWksCfaMOULg=
Subject key identifier:   81:55:77:11:A4:AC:8F:83:5C:50:8A:E9:38:D0:81:3A:52:48:13:0F
Certificate issuer:       /CN=27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76
Certificate serial:       5DE4E9E35F4235B3FA39910EE408B25DF71399A6
Authority key identifier: 27:DA:7F:E0:DD:7C:FD:2D:B4:42:1C:E4:84:B9:E9:A0:CD:A1:EE:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a633030303a3a2f33342d3334203d3e20323730353434.roa
Signing time:             Thu 20 Feb 2025 13:41:56 +0000
ROA not before:           Thu 20 Feb 2025 13:36:56 +0000
ROA not after:            Thu 19 Feb 2026 13:41:56 +0000
asID:                     270544
IP address blocks:        2804:6d9c:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e4:e9:e3:5f:42:35:b3:fa:39:91:0e:e4:08:b2:5d:f7:13:99:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76
        Validity
            Not Before: Feb 20 13:36:56 2025 GMT
            Not After : Feb 19 13:41:56 2026 GMT
        Subject: CN=81557711A4AC8F835C508AE938D0813A5248130F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8e:7d:51:9f:58:40:77:e7:d5:91:d0:2c:cc:
                    93:ab:96:21:c1:ac:93:e6:b7:05:cc:2e:67:b9:d3:
                    d3:bb:8f:87:6c:3d:35:b8:66:84:7c:fa:5f:01:55:
                    ea:90:69:2e:f2:a6:c9:ab:d0:31:52:cd:aa:a2:08:
                    16:c8:a3:ea:cf:1f:6d:52:91:55:0d:2c:c9:72:7a:
                    44:bf:00:43:17:be:3d:12:1a:f8:0e:19:5a:39:fd:
                    04:64:ef:85:9d:42:b1:f9:88:a9:f3:11:70:5e:f9:
                    6d:d7:14:63:2b:26:88:cf:b7:9e:3c:b3:4d:b1:92:
                    67:38:73:ce:b6:c1:1c:28:d4:1d:95:7f:b5:fa:03:
                    62:7a:e0:0b:62:72:96:d2:f4:5e:e0:f9:2f:5a:b0:
                    d8:29:31:3f:84:c3:13:07:75:3d:b0:95:67:97:6a:
                    11:22:3b:53:34:9b:5f:a2:b9:f2:1d:1e:ad:66:d6:
                    a0:8c:ae:df:09:8c:2b:c8:e7:37:cf:8b:46:a6:55:
                    ff:cf:15:79:88:6f:25:52:78:f2:75:95:6a:9b:af:
                    07:64:39:61:a6:03:dc:2c:15:e3:ce:3c:62:3e:db:
                    0b:7e:85:77:1f:a8:da:b7:89:5c:91:45:4f:6e:a9:
                    08:63:3c:ca:bc:09:f1:2d:d5:44:67:f1:4c:75:13:
                    0a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:55:77:11:A4:AC:8F:83:5C:50:8A:E9:38:D0:81:3A:52:48:13:0F
            X509v3 Authority Key Identifier:
                keyid:27:DA:7F:E0:DD:7C:FD:2D:B4:42:1C:E4:84:B9:E9:A0:CD:A1:EE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27DA7FE0DD7CFD2DB4421CE484B9E9A0CDA1EE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a633030303a3a2f33342d3334203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d9c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ad:a8:17:c8:d4:ba:25:2b:9d:fe:76:66:d8:68:5a:55:30:d7:
         88:9c:b7:0b:75:45:73:0b:1f:25:6f:1f:26:c3:80:c9:dc:f1:
         95:08:c2:61:f7:a5:9c:de:37:45:89:75:f0:c7:49:3b:d8:13:
         67:0a:0e:e4:80:6c:7f:9d:cb:a9:69:e9:63:86:2e:2b:97:aa:
         c6:26:a3:2d:96:0a:df:71:81:ec:a0:c4:5c:2d:2b:a6:d5:93:
         b8:6f:88:21:a4:75:82:b0:8f:6f:25:8d:55:33:20:21:6b:f6:
         98:c1:3b:4d:9d:9e:18:7e:8a:29:c9:92:39:d3:89:3d:10:b4:
         bf:ba:a5:43:66:29:0f:87:c0:f7:e3:b5:f4:16:32:5d:e0:b8:
         38:37:00:1f:5e:3e:31:5e:09:a3:bd:e2:d0:42:9f:6a:23:ac:
         50:c2:28:33:b7:3f:2b:73:43:f7:97:e3:e2:e4:87:00:e9:b4:
         3e:2d:2c:2f:8b:7d:ef:4f:b6:2f:d2:07:a0:64:de:08:0c:7a:
         6c:64:69:f2:8c:97:e9:a2:55:37:4e:b1:3c:91:ea:62:fb:fc:
         a9:bd:6f:e3:64:48:4e:11:fc:5e:9b:64:81:5d:3c:ce:6a:ba:
         5f:2f:69:83:9c:82:cc:e8:11:66:ac:3d:04:04:73:c9:0b:89:
         d1:58:1b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:12:39 2025 by rpki-client