Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138372e3132312e3134342e302f32312d3231203d3e20323733363833.roa
File:                     3138372e3132312e3134342e302f32312d3231203d3e20323733363833.roa (raw, json)
Hash identifier:          xIDyfRnNajxbyAzOktx6djjIB5aMIW0VK2ojYG1IRwI=
Subject key identifier:   2E:25:34:E2:94:E0:2D:9E:2F:2C:3D:A0:A4:60:3C:5F:48:5A:89:33
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       0F0EE4595BE57B6160C8CC204338D5AB0416595B
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138372e3132312e3134342e302f32312d3231203d3e20323733363833.roa
Signing time:             Fri 06 Dec 2024 13:54:28 +0000
ROA not before:           Fri 06 Dec 2024 13:49:28 +0000
ROA not after:            Fri 05 Dec 2025 13:54:28 +0000
asID:                     273683
IP address blocks:        187.121.144.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:0e:e4:59:5b:e5:7b:61:60:c8:cc:20:43:38:d5:ab:04:16:59:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Dec  6 13:49:28 2024 GMT
            Not After : Dec  5 13:54:28 2025 GMT
        Subject: CN=2E2534E294E02D9E2F2C3DA0A4603C5F485A8933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6f:10:c1:15:06:77:8b:3f:d9:df:8b:ad:05:
                    da:3d:6c:fc:08:07:37:97:79:1d:53:00:52:ef:5e:
                    9c:ed:32:0f:40:45:4b:21:46:59:78:98:1e:10:17:
                    7c:6d:85:02:64:ab:e0:e8:27:6d:45:18:b4:43:5d:
                    ef:62:9f:96:9b:de:64:d7:85:28:52:08:f7:23:8c:
                    d8:b9:dc:56:e1:98:ab:af:d9:41:ee:7c:ca:2f:14:
                    87:40:d3:a7:d6:23:3b:52:a5:0e:de:56:4d:5f:dc:
                    6a:53:98:37:e5:ae:71:04:ba:f9:5b:a0:a9:26:39:
                    c4:40:7e:8d:4c:ef:90:56:f3:95:06:a9:78:cf:7b:
                    42:0f:86:fa:d8:07:ab:6e:ee:78:86:31:0d:00:fa:
                    a1:94:f7:bd:ca:aa:27:fd:ae:b3:c8:4f:04:6a:96:
                    40:d6:fa:d0:ce:0b:9e:18:21:2b:13:ca:49:82:80:
                    ee:6f:dd:b6:80:97:23:f4:d4:3a:b2:69:6a:a2:e7:
                    c4:ee:47:21:6c:eb:fe:af:ff:64:74:86:7f:aa:84:
                    51:d9:3b:31:23:92:08:9f:66:89:d0:94:17:51:b8:
                    19:91:d2:c0:0a:e2:43:43:4c:e9:88:a3:ff:91:5c:
                    14:fd:95:3a:a3:f2:56:a4:cb:c4:b3:4d:56:f4:3f:
                    a4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:25:34:E2:94:E0:2D:9E:2F:2C:3D:A0:A4:60:3C:5F:48:5A:89:33
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138372e3132312e3134342e302f32312d3231203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0e:d4:0f:74:89:91:35:14:ef:8f:4f:33:7b:f6:9e:ab:de:fb:
         85:c5:9a:c7:f1:87:4b:ac:3f:70:3f:f2:25:1d:38:3c:01:be:
         99:c8:35:36:06:6e:aa:49:5e:69:ca:97:94:38:f4:5c:86:04:
         0b:d8:a7:db:17:c3:ed:ac:87:3d:97:35:5e:6c:d7:9f:24:cb:
         2f:55:21:00:c7:48:68:db:d0:29:2b:b0:c7:8e:4a:7e:a4:12:
         82:f7:15:ec:6d:a9:07:a5:13:bb:01:d7:ca:43:f2:fb:03:bd:
         f3:25:78:69:24:9c:aa:87:bc:48:b1:b3:fc:d4:20:2a:2a:d8:
         e8:3a:bc:0a:b2:f5:66:43:9b:b0:c6:ad:7a:a9:59:c8:33:ee:
         bf:d3:8b:b1:dd:28:bc:ed:a9:84:7d:a9:89:c6:dc:36:51:2a:
         88:4d:d1:45:a7:63:cd:55:c3:96:c5:b1:f4:83:20:f4:17:5d:
         6e:31:dc:a7:62:ca:35:e8:c9:9a:b8:e6:2c:aa:5a:cf:61:7e:
         38:a1:e3:de:05:1f:65:eb:0d:e6:aa:e8:da:ef:ee:50:87:e9:
         b0:c2:2b:d2:cd:47:95:da:36:c7:c5:ee:76:b1:10:b5:96:44:
         9f:ef:a9:a4:ae:7c:d3:63:93:97:fc:6b:8b:b6:4a:8b:b5:47:
         f4:1e:08:58
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUDw7kWVvle2FgyMwgQzjVqwQWWVswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlC
MzYzQUNCNTAeFw0yNDEyMDYxMzQ5MjhaFw0yNTEyMDUxMzU0MjhaMDMxMTAvBgNV
BAMTKDJFMjUzNEUyOTRFMDJEOUUyRjJDM0RBMEE0NjAzQzVGNDg1QTg5MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9bxDBFQZ3iz/Z34utBdo9bPwI
BzeXeR1TAFLvXpztMg9ARUshRll4mB4QF3xthQJkq+DoJ21FGLRDXe9in5ab3mTX
hShSCPcjjNi53FbhmKuv2UHufMovFIdA06fWIztSpQ7eVk1f3GpTmDflrnEEuvlb
oKkmOcRAfo1M75BW85UGqXjPe0IPhvrYB6tu7niGMQ0A+qGU973Kqif9rrPITwRq
lkDW+tDOC54YISsTykmCgO5v3baAlyP01DqyaWqi58TuRyFs6/6v/2R0hn+qhFHZ
OzEjkgifZonQlBdRuBmR0sAK4kNDTOmIo/+RXBT9lTqj8laky8SzTVb0P6SDAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQULiU04pTgLZ4vLD2gpGA8X0haiTMwHwYDVR0j
BBgwFoAU72yyxJwyRfjMM6GPCKEM+bNjrLUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FbmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5V
LzAvRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlCMzYzQUNCNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FRjZDQjJDNDlDMzI0NUY4Q0Mz
M0ExOEYwOEExMENGOUIzNjNBQ0I1LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
bmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5VLzAvMzEz
ODM3MmUzMTMyMzEyZTMxMzQzNDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMyMzcz
MzM2MzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEA7t5kDANBgkqhkiG9w0BAQsFAAOCAQEADtQPdImR
NRTvj08ze/aeq977hcWax/GHS6w/cD/yJR04PAG+mcg1NgZuqkleacqXlDj0XIYE
C9in2xfD7ayHPZc1XmzXnyTLL1UhAMdIaNvQKSuwx45KfqQSgvcV7G2pB6UTuwHX
ykPy+wO98yV4aSScqoe8SLGz/NQgKirY6Dq8CrL1ZkObsMateqlZyDPuv9OLsd0o
vO2phH2picbcNlEqiE3RRadjzVXDlsWx9IMg9BddbjHcp2LKNejJmrjmLKpaz2F+
OKHj3gUfZesN5qro2u/uUIfpsMIr0s1Hldo2x8XudrEQtZZEn++ppK5802OTl/xr
i7ZKi7VH9B4IWA==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:46 2025 by rpki-client