Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3136372e3235302e31322e302f32322d3232203d3e20323733363833.roa
File:                     3136372e3235302e31322e302f32322d3232203d3e20323733363833.roa (raw, json)
Hash identifier:          B6Nn3RerOvwPl2gByNFrwqq7TkwjlPg/CNZK+iJuJDg=
Subject key identifier:   59:ED:8B:DD:09:FE:09:B4:30:BC:38:A4:B6:82:5C:8E:AF:D0:8C:43
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       44D19DD8A43BB610C37E5D7B5614EBD379CDA4E6
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3136372e3235302e31322e302f32322d3232203d3e20323733363833.roa
Signing time:             Fri 29 Nov 2024 06:27:43 +0000
ROA not before:           Fri 29 Nov 2024 06:22:43 +0000
ROA not after:            Fri 28 Nov 2025 06:27:43 +0000
asID:                     273683
IP address blocks:        167.250.12.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d1:9d:d8:a4:3b:b6:10:c3:7e:5d:7b:56:14:eb:d3:79:cd:a4:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Nov 29 06:22:43 2024 GMT
            Not After : Nov 28 06:27:43 2025 GMT
        Subject: CN=59ED8BDD09FE09B430BC38A4B6825C8EAFD08C43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8b:88:bd:97:d0:a4:c1:a8:e2:c0:69:3a:3f:
                    75:dd:7f:0f:8b:44:7f:7f:e2:90:50:32:34:13:f7:
                    77:96:d6:89:de:a7:35:fd:a2:4e:05:e8:5b:01:b2:
                    47:52:8e:37:ed:35:dd:3d:08:2f:dc:48:2a:57:a2:
                    62:43:a6:9d:b7:7d:ee:3a:ae:a3:34:03:41:93:c6:
                    8c:94:68:50:3d:ce:19:bc:4e:28:13:9f:2b:3b:d8:
                    c7:ad:90:6c:75:db:09:d6:54:a8:14:04:5d:1e:15:
                    71:b7:69:2d:29:d7:91:50:3f:44:52:9f:68:63:5d:
                    a6:e7:34:33:00:cc:ae:27:1d:ff:a6:58:9d:99:3e:
                    4f:cb:57:d1:e9:83:37:02:aa:4b:80:22:47:17:a4:
                    47:05:44:bc:08:c7:e5:9c:20:a6:61:23:e9:e7:fe:
                    ea:74:6a:aa:53:96:b1:79:99:71:82:cd:ae:fc:9a:
                    c2:11:24:0b:25:7c:41:74:5b:c1:44:03:23:2f:ee:
                    9c:82:25:c0:5e:3c:3c:19:25:64:75:f1:10:98:04:
                    d6:a7:f1:7d:e2:16:72:c3:4a:c4:b5:10:54:c5:43:
                    eb:d2:06:ff:bb:8c:14:e0:af:4a:64:85:80:c4:3c:
                    61:a1:48:61:3b:ff:31:55:9a:a8:e2:29:51:84:1a:
                    44:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:ED:8B:DD:09:FE:09:B4:30:BC:38:A4:B6:82:5C:8E:AF:D0:8C:43
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3136372e3235302e31322e302f32322d3232203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:d8:2c:db:04:48:63:4a:f5:d5:ee:ab:71:c1:4f:70:2b:6d:
         b5:d6:68:91:b6:58:9c:57:38:9d:7a:db:eb:46:dd:35:d0:be:
         4a:c3:5f:d1:3e:78:da:78:58:1a:73:9b:74:c0:18:82:4d:3b:
         e1:37:30:a6:cc:ee:0f:4d:36:17:5e:8f:cd:68:eb:0a:a5:4f:
         ca:cc:91:eb:f4:b4:e8:a3:98:e7:f2:e5:97:da:5e:9b:57:d1:
         86:65:93:e2:ce:c7:66:31:e7:69:ce:59:1d:67:c6:8d:bc:61:
         bd:1d:ce:7e:2b:c5:48:80:e8:58:06:1f:72:81:f3:65:ab:60:
         e8:f7:83:2c:ac:42:fe:56:5b:2f:e3:59:90:15:7a:40:41:ec:
         29:6a:ab:1f:8c:86:15:5b:d6:e5:f7:df:cd:9e:8f:0a:e0:f2:
         a7:49:bf:35:08:f1:29:11:d1:e8:ec:59:dd:98:34:52:28:b4:
         c1:f0:a3:61:9c:f1:3c:ff:87:90:d4:35:57:f4:2f:21:da:2c:
         9a:01:9e:47:1b:4f:1b:31:ba:4a:6e:6a:08:44:a4:0c:f2:45:
         fa:1a:c4:41:9e:e7:67:c5:3d:ae:cb:12:19:52:ac:b4:ed:9d:
         2d:67:0b:d4:b0:06:26:70:89:b1:cc:65:69:76:7e:13:36:48:
         f3:b8:c1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:34 2025 by rpki-client