Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230342e302f32322d3232203d3e203533303836.roa
File:                     3138372e33332e3230342e302f32322d3232203d3e203533303836.roa (raw, json)
Hash identifier:          GyXqmj53cNXCoqYxSeVotzBlvqnWP4hgckV/+93mtqs=
Subject key identifier:   27:5C:52:7F:E6:CD:5B:1D:81:4D:4A:D7:C7:F1:6B:3D:03:66:1B:B5
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       68BA9D840AEE60D4CE684424016E570BF2BF5E4B
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230342e302f32322d3232203d3e203533303836.roa
Signing time:             Thu 06 Mar 2025 08:45:20 +0000
ROA not before:           Thu 06 Mar 2025 08:40:20 +0000
ROA not after:            Thu 05 Mar 2026 08:45:20 +0000
asID:                     53086
IP address blocks:        187.33.204.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ba:9d:84:0a:ee:60:d4:ce:68:44:24:01:6e:57:0b:f2:bf:5e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Mar  6 08:40:20 2025 GMT
            Not After : Mar  5 08:45:20 2026 GMT
        Subject: CN=275C527FE6CD5B1D814D4AD7C7F16B3D03661BB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:27:8c:c0:d9:56:de:b6:99:59:3f:dc:6e:db:
                    af:64:57:65:c2:54:c6:f9:0b:df:af:2b:ce:ce:71:
                    d9:59:58:67:d6:de:2c:82:d9:70:8f:5f:43:c0:b1:
                    6c:6f:d3:c6:4b:6b:c0:5f:27:11:87:b8:a5:d1:e1:
                    87:98:d8:6e:65:35:1f:f6:01:ae:f4:cb:17:eb:c9:
                    f0:01:ba:3b:76:3b:e0:e8:63:fd:3f:eb:1c:de:04:
                    cb:dd:ee:63:47:67:c7:76:ce:d8:65:0a:c9:7e:b6:
                    ec:86:a6:20:02:29:71:01:68:8b:da:e6:4b:1a:9c:
                    17:14:a8:09:e8:26:38:07:41:db:83:fe:fc:5b:3f:
                    36:e6:09:9d:54:44:f2:3d:22:f9:12:d5:19:9b:44:
                    93:fd:3b:c7:00:5a:37:c5:6a:9a:06:ae:6d:de:cf:
                    db:c3:b4:75:53:5f:31:e5:0c:13:fe:0c:15:d2:18:
                    46:68:2d:db:88:50:13:04:f7:df:15:d1:b3:e6:e8:
                    eb:3a:b9:3e:e3:12:c6:e0:0e:90:18:77:23:c5:92:
                    4b:72:4c:69:15:57:f3:57:a1:ae:4e:b9:b1:49:94:
                    a3:1d:f0:39:11:4e:06:bd:7a:b7:64:37:37:f7:e9:
                    e1:9b:53:ab:8e:d0:c9:bc:f2:96:0b:64:ea:b5:9f:
                    22:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5C:52:7F:E6:CD:5B:1D:81:4D:4A:D7:C7:F1:6B:3D:03:66:1B:B5
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230342e302f32322d3232203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:5c:9f:2c:03:9f:54:c1:04:34:2b:b2:15:f4:53:6b:0c:99:
         70:88:06:cc:2a:0f:ba:fa:03:3f:ba:df:9c:1d:3d:b6:62:f2:
         0b:f4:12:a9:0a:fa:b7:60:89:8c:84:79:08:7d:dd:24:c7:30:
         64:57:fc:f3:23:a5:8f:6f:9f:8b:9c:39:ee:73:aa:ff:c6:e8:
         3c:92:da:72:a5:b1:ff:de:fc:b8:f9:a9:ca:c0:c7:6b:03:e5:
         75:18:07:5a:73:87:21:8e:75:78:50:06:a6:12:a5:c9:55:fb:
         d8:90:e9:b1:67:72:63:82:ae:2d:a8:87:14:c7:5d:06:fb:1d:
         2b:c9:9d:b0:8c:c1:dd:b7:a6:61:e5:e7:41:a1:5f:27:2f:cc:
         59:80:74:c0:bc:46:88:64:b7:5a:ed:aa:fb:c4:8f:44:d0:32:
         8d:e7:72:a4:be:17:11:d2:40:4e:8e:82:ee:8c:2f:3a:6a:9a:
         3b:d4:41:5e:86:15:52:63:81:fc:f6:dc:72:26:9c:81:e2:49:
         ea:93:67:01:95:99:c1:f2:2b:3f:4d:45:58:6f:f4:97:ed:23:
         94:c9:c1:fe:88:de:03:df:24:0e:f0:68:91:aa:4c:e0:f0:2c:
         d3:cc:e2:e6:dd:ad:f2:b1:00:74:ba:9e:54:3e:2b:5c:a1:b3:
         12:15:77:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:43 2025 by rpki-client