Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133382e33362e32382e302f32322d3232203d3e20323733363833.roa
File:                     3133382e33362e32382e302f32322d3232203d3e20323733363833.roa (raw, json)
Hash identifier:          3mW/blxid/Lsxj3udgpxxJdOZG19IEqRPYaXCo0QCtM=
Subject key identifier:   B9:08:38:18:2A:9E:08:3B:4F:4B:A9:D7:6C:E7:21:3B:F2:C3:75:DF
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       4C120CDBB1AECEF28A4754374D6A972D8D4E6B9F
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133382e33362e32382e302f32322d3232203d3e20323733363833.roa
Signing time:             Fri 29 Nov 2024 06:28:16 +0000
ROA not before:           Fri 29 Nov 2024 06:23:16 +0000
ROA not after:            Fri 28 Nov 2025 06:28:16 +0000
asID:                     273683
IP address blocks:        138.36.28.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:12:0c:db:b1:ae:ce:f2:8a:47:54:37:4d:6a:97:2d:8d:4e:6b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Nov 29 06:23:16 2024 GMT
            Not After : Nov 28 06:28:16 2025 GMT
        Subject: CN=B90838182A9E083B4F4BA9D76CE7213BF2C375DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7b:7f:54:b2:15:fd:42:52:bc:f7:96:b7:ae:
                    ff:32:bb:06:05:2e:09:a0:c3:ca:4b:09:37:cf:0c:
                    d0:d2:4d:80:ae:e0:2d:11:b8:2c:4b:98:2c:fc:57:
                    87:c5:04:ab:50:15:8a:0e:f8:61:dd:c7:26:36:c3:
                    b7:2e:70:65:ae:52:1b:4e:66:57:66:ac:0d:12:d4:
                    b9:f9:04:d4:ac:f0:67:37:5c:43:4c:60:a5:c8:b0:
                    70:ab:c6:9b:5b:0d:a6:f5:41:79:ea:b8:51:7e:39:
                    c9:47:81:7f:2e:46:3d:e6:0b:cb:34:e8:57:6a:32:
                    31:8c:37:b2:30:4a:73:66:5a:06:aa:76:26:dd:72:
                    78:e0:fb:c5:90:89:35:0c:14:77:bb:50:a8:fb:39:
                    7a:3d:0e:32:6e:b4:05:71:15:ef:0f:ad:b0:e5:8a:
                    1e:35:d1:43:73:d7:f0:ae:81:0c:32:37:53:8a:af:
                    fc:aa:b6:92:dd:7d:67:47:c6:c6:ae:ad:fd:c6:48:
                    34:48:ef:53:12:a9:f3:10:86:29:f1:65:7a:f4:ad:
                    3d:ca:de:f6:30:03:31:90:b9:20:60:8c:5f:41:73:
                    fc:e5:d1:bb:53:84:b4:c4:8e:ca:c7:7c:33:d3:09:
                    8d:8b:82:59:51:6d:4b:0a:ba:2c:e0:80:45:c4:95:
                    c4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:08:38:18:2A:9E:08:3B:4F:4B:A9:D7:6C:E7:21:3B:F2:C3:75:DF
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133382e33362e32382e302f32322d3232203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:ac:ae:94:72:7e:33:3c:b1:60:08:84:92:25:0d:b5:94:3e:
         f4:dd:6f:68:02:13:67:7e:61:94:65:9c:2f:a2:5f:39:3a:7f:
         f8:f7:b5:d9:2e:b0:ad:47:77:6a:ce:da:74:40:b4:0b:64:ec:
         1b:d2:83:18:fd:5d:a6:1f:10:36:1b:ab:c7:49:d4:ce:ca:c0:
         1c:9d:30:63:bf:05:f3:f5:8f:5d:14:b8:53:9f:c0:88:ce:a4:
         1e:de:8f:64:93:fc:c5:ef:c9:60:dd:d1:be:d4:4e:1c:21:75:
         91:e6:59:5a:b1:17:b7:8f:d6:de:f7:41:cf:53:33:22:08:8b:
         53:7b:81:67:c2:7d:66:02:ec:47:54:e6:56:af:74:05:a6:6f:
         b8:9b:3a:5c:5f:1d:06:8b:f8:ab:e8:62:f7:fe:96:11:05:3c:
         40:7c:8b:72:7d:bc:e6:d6:9e:31:d6:0a:ec:a8:fd:1b:73:df:
         2b:85:45:f0:80:d8:a6:9e:70:15:05:96:e2:60:4e:11:b6:80:
         2d:3a:37:44:81:c4:79:41:fd:b1:0b:71:0b:6b:60:0e:d3:10:
         c5:7f:79:a6:9d:68:08:80:50:b6:b6:b4:99:a9:87:cb:07:f3:
         6d:85:2e:9e:25:15:ff:c8:98:25:52:5b:a0:07:3b:82:ef:fb:
         c9:38:cb:3e
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUTBIM27GuzvKKR1Q3TWqXLY1Oa58wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlC
MzYzQUNCNTAeFw0yNDExMjkwNjIzMTZaFw0yNTExMjgwNjI4MTZaMDMxMTAvBgNV
BAMTKEI5MDgzODE4MkE5RTA4M0I0RjRCQTlENzZDRTcyMTNCRjJDMzc1REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDje39UshX9QlK895a3rv8yuwYF
Lgmgw8pLCTfPDNDSTYCu4C0RuCxLmCz8V4fFBKtQFYoO+GHdxyY2w7cucGWuUhtO
ZldmrA0S1Ln5BNSs8Gc3XENMYKXIsHCrxptbDab1QXnquFF+OclHgX8uRj3mC8s0
6FdqMjGMN7IwSnNmWgaqdibdcnjg+8WQiTUMFHe7UKj7OXo9DjJutAVxFe8PrbDl
ih410UNz1/CugQwyN1OKr/yqtpLdfWdHxsaurf3GSDRI71MSqfMQhinxZXr0rT3K
3vYwAzGQuSBgjF9Bc/zl0btThLTEjsrHfDPTCY2LgllRbUsKuizggEXElcTvAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUuQg4GCqeCDtPS6nXbOchO/LDdd8wHwYDVR0j
BBgwFoAU72yyxJwyRfjMM6GPCKEM+bNjrLUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FbmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5V
LzAvRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlCMzYzQUNCNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FRjZDQjJDNDlDMzI0NUY4Q0Mz
M0ExOEYwOEExMENGOUIzNjNBQ0I1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
bmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5VLzAvMzEz
MzM4MmUzMzM2MmUzMjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzMzMzYz
ODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCiiQcMA0GCSqGSIb3DQEBCwUAA4IBAQBdrK6Ucn4zPLFg
CISSJQ21lD703W9oAhNnfmGUZZwvol85On/497XZLrCtR3dqztp0QLQLZOwb0oMY
/V2mHxA2G6vHSdTOysAcnTBjvwXz9Y9dFLhTn8CIzqQe3o9kk/zF78lg3dG+1E4c
IXWR5llasRe3j9be90HPUzMiCItTe4Fnwn1mAuxHVOZWr3QFpm+4mzpcXx0Gi/ir
6GL3/pYRBTxAfItyfbzm1p4x1grsqP0bc98rhUXwgNimnnAVBZbiYE4RtoAtOjdE
gcR5Qf2xC3ELa2AO0xDFf3mmnWgIgFC2trSZqYfLB/NthS6eJRX/yJglUlugBzuC
7/vJOMs+
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:10 2025 by rpki-client