Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/1/3230312e34392e36342e302f31392d3234203d3e203238323633.roa
File:                     3230312e34392e36342e302f31392d3234203d3e203238323633.roa (raw, json)
Hash identifier:          nfhlzN/zHFylQkuRFQ6hgT1IfvwLcb1n2+PjvaS3+pQ=
Subject key identifier:   97:42:BC:36:1C:59:8B:41:85:54:27:C0:52:A7:D7:4F:DF:1F:B6:B0
Certificate issuer:       /CN=EDDDDFE49BBF506DDE4C0DF6337BE4A05DCD12B8
Certificate serial:       0C20E5121D16568BC11653FD18C068171C6A4992
Authority key identifier: ED:DD:DF:E4:9B:BF:50:6D:DE:4C:0D:F6:33:7B:E4:A0:5D:CD:12:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDDDDFE49BBF506DDE4C0DF6337BE4A05DCD12B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/1/3230312e34392e36342e302f31392d3234203d3e203238323633.roa
Signing time:             Wed 12 Jun 2024 13:04:14 +0000
ROA not before:           Wed 12 Jun 2024 12:59:14 +0000
ROA not after:            Wed 11 Jun 2025 13:04:14 +0000
asID:                     28263
IP address blocks:        201.49.64.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:20:e5:12:1d:16:56:8b:c1:16:53:fd:18:c0:68:17:1c:6a:49:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDDDDFE49BBF506DDE4C0DF6337BE4A05DCD12B8
        Validity
            Not Before: Jun 12 12:59:14 2024 GMT
            Not After : Jun 11 13:04:14 2025 GMT
        Subject: CN=9742BC361C598B41855427C052A7D74FDF1FB6B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b4:aa:3f:6c:ea:cd:f8:7b:d1:2e:0f:8e:b9:
                    4f:3d:f3:d4:3f:f8:82:7e:53:1c:f2:d8:af:7c:22:
                    05:2a:66:53:1a:30:5b:e8:f7:c6:e8:cb:38:f4:bb:
                    ea:2f:e3:4e:f3:64:41:66:03:61:29:ae:65:f3:1c:
                    2a:26:fa:ed:68:bc:de:62:4c:66:26:4b:86:74:9f:
                    e2:ad:f0:38:3c:57:67:40:db:5f:6c:6b:ef:41:f4:
                    93:9c:05:4c:2a:23:96:a5:05:98:e2:b0:ca:96:a1:
                    93:bf:3e:1d:96:72:25:52:73:f9:75:3e:1c:d8:fd:
                    a0:9d:d5:74:83:76:20:7f:73:1f:65:9f:06:4f:3d:
                    76:08:85:da:0b:ca:f7:6b:33:09:07:49:38:dc:09:
                    ba:29:46:7b:22:a7:97:98:45:fc:63:df:f1:38:b1:
                    f8:68:24:34:65:46:ab:da:00:90:dc:c9:d5:7d:54:
                    92:5b:12:da:41:38:7d:40:c6:7d:fe:ba:77:ae:91:
                    a2:e1:e6:64:81:fa:2f:9d:8d:38:f0:06:c0:b6:fe:
                    08:73:1e:16:49:9e:ce:db:17:27:1f:6f:05:a4:e1:
                    6c:3b:f1:58:fa:0f:70:2c:a1:c6:65:2b:41:32:51:
                    33:f3:85:3f:cd:e3:b2:24:ad:ed:05:56:89:39:66:
                    09:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:42:BC:36:1C:59:8B:41:85:54:27:C0:52:A7:D7:4F:DF:1F:B6:B0
            X509v3 Authority Key Identifier:
                keyid:ED:DD:DF:E4:9B:BF:50:6D:DE:4C:0D:F6:33:7B:E4:A0:5D:CD:12:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/1/EDDDDFE49BBF506DDE4C0DF6337BE4A05DCD12B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDDDDFE49BBF506DDE4C0DF6337BE4A05DCD12B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/1/3230312e34392e36342e302f31392d3234203d3e203238323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3f:eb:97:e7:09:8d:dd:69:4a:04:96:13:70:39:c7:b0:81:e2:
         0b:aa:83:45:40:5b:af:e4:5f:82:d4:02:ce:f7:10:23:83:6a:
         f8:55:58:7a:27:76:7f:ff:08:82:55:75:ec:e7:71:81:77:12:
         52:3a:98:36:81:34:bd:51:a5:be:39:0c:4f:10:5a:cc:20:1c:
         4a:0b:a6:f7:9f:7f:51:8f:8b:27:19:87:2f:ac:13:a9:91:5a:
         bf:88:93:3a:75:21:57:9a:09:90:79:33:36:b3:e0:0d:7c:b3:
         e8:6b:d4:39:e7:ec:b2:ae:29:b4:bc:d6:1e:9e:12:af:5b:8a:
         ea:77:19:69:fe:ae:da:b4:60:29:5d:8d:9f:a3:0b:f5:c2:97:
         a0:56:b7:b9:9d:c2:08:ed:45:0b:68:40:0d:79:d6:70:ce:bc:
         1a:7e:b1:70:5a:5d:8f:33:41:15:de:25:d6:36:e3:66:67:a8:
         0d:ee:df:3f:db:1c:34:54:64:2a:ba:41:0e:da:fa:a6:b3:30:
         99:54:70:10:ca:ed:b4:21:be:0e:53:fb:1c:f6:a5:2f:58:98:
         5b:27:bc:45:f7:00:ac:ec:6f:56:2c:d6:8a:88:4a:b6:6e:1f:
         9b:03:2f:b2:67:5c:a6:1c:7c:de:44:04:9c:b4:c9:10:32:0a:
         0c:46:37:5a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUDCDlEh0WVovBFlP9GMBoFxxqSZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURERERGRTQ5QkJGNTA2RERFNEMwREY2MzM3QkU0QTA1
RENEMTJCODAeFw0yNDA2MTIxMjU5MTRaFw0yNTA2MTExMzA0MTRaMDMxMTAvBgNV
BAMTKDk3NDJCQzM2MUM1OThCNDE4NTU0MjdDMDUyQTdENzRGREYxRkI2QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTtKo/bOrN+HvRLg+OuU8989Q/
+IJ+Uxzy2K98IgUqZlMaMFvo98boyzj0u+ov407zZEFmA2EprmXzHCom+u1ovN5i
TGYmS4Z0n+Kt8Dg8V2dA219sa+9B9JOcBUwqI5alBZjisMqWoZO/Ph2WciVSc/l1
PhzY/aCd1XSDdiB/cx9lnwZPPXYIhdoLyvdrMwkHSTjcCbopRnsip5eYRfxj3/E4
sfhoJDRlRqvaAJDcydV9VJJbEtpBOH1Axn3+uneukaLh5mSB+i+djTjwBsC2/ghz
HhZJns7bFycfbwWk4Ww78Vj6D3AsocZlK0EyUTPzhT/N47Ikre0FVok5ZgkrAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUl0K8NhxZi0GFVCfAUqfXT98ftrAwHwYDVR0j
BBgwFoAU7d3f5Ju/UG3eTA32M3vkoF3NErgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmY3ZVk3a3JYdHJON2h2dDN4SzNwNnNmNGtEcFZDQnZUZG9YdnJBY1RL
VDYvMS9FREREREZFNDlCQkY1MDZEREU0QzBERjYzMzdCRTRBMDVEQ0QxMkI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VERERERkU0OUJCRjUwNkRE
RTRDMERGNjMzN0JFNEEwNURDRDEyQjguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJmN2VZN2tyWHRyTjdodnQzeEszcDZzZjRrRHBWQ0J2VGRvWHZyQWNUS1Q2LzEv
MzIzMDMxMmUzNDM5MmUzNjM0MmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzIzODMy
MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBckxQDANBgkqhkiG9w0BAQsFAAOCAQEAP+uX5wmN3WlK
BJYTcDnHsIHiC6qDRUBbr+RfgtQCzvcQI4Nq+FVYeid2f/8IglV17OdxgXcSUjqY
NoE0vVGlvjkMTxBazCAcSgum959/UY+LJxmHL6wTqZFav4iTOnUhV5oJkHkzNrPg
DXyz6GvUOefssq4ptLzWHp4Sr1uK6ncZaf6u2rRgKV2Nn6ML9cKXoFa3uZ3CCO1F
C2hADXnWcM68Gn6xcFpdjzNBFd4l1jbjZmeoDe7fP9scNFRkKrpBDtr6prMwmVRw
EMrttCG+DlP7HPalL1iYWye8RfcArOxvVizWiohKtm4fmwMvsmdcphx83kQEnLTJ
EDIKDEY3Wg==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:09 2025 by rpki-client