Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138372e3132312e3135302e302f32332d3234203d3e20323733363833.roa
File:                     3138372e3132312e3135302e302f32332d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          WC20A1DMasEvOvspf+mnFSRO9LTXa4sCc7NX1Tg3OJU=
Subject key identifier:   86:82:FC:F2:2D:58:77:44:DC:6A:A1:E2:ED:DF:F7:21:99:61:F1:6F
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       0A5D2CC948145D79A6B5AA67491C0C65DF59C491
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138372e3132312e3135302e302f32332d3234203d3e20323733363833.roa
Signing time:             Fri 06 Dec 2024 14:01:19 +0000
ROA not before:           Fri 06 Dec 2024 13:56:19 +0000
ROA not after:            Fri 05 Dec 2025 14:01:19 +0000
asID:                     273683
IP address blocks:        187.121.150.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:5d:2c:c9:48:14:5d:79:a6:b5:aa:67:49:1c:0c:65:df:59:c4:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Dec  6 13:56:19 2024 GMT
            Not After : Dec  5 14:01:19 2025 GMT
        Subject: CN=8682FCF22D587744DC6AA1E2EDDFF7219961F16F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1a:04:bb:80:06:f4:1f:95:95:b3:97:c8:5c:
                    e1:ff:a7:32:4c:98:ed:64:59:21:df:7e:2c:92:c9:
                    35:77:a6:26:58:cf:02:f3:49:91:38:3e:d7:6a:45:
                    fc:df:8d:c0:5f:cc:ec:f3:49:f1:43:7a:1c:55:78:
                    a2:6c:e6:7d:e2:46:6e:1e:22:0f:7b:ba:50:83:55:
                    e8:ff:9c:35:9c:a7:c5:cd:76:f4:1b:a7:44:f8:c3:
                    c1:2a:a4:99:02:ec:6b:58:11:9f:37:1b:8e:b7:3e:
                    50:c0:b2:dd:ca:e5:c1:85:35:84:27:fd:b6:b2:6e:
                    99:dc:b4:31:1a:97:cf:7b:58:9b:7d:f9:42:30:54:
                    82:45:97:7a:2e:40:ce:9f:91:0f:b0:90:4a:16:6c:
                    5b:50:1b:5c:21:bc:3e:44:c7:ac:43:ca:22:8e:6b:
                    6e:dd:44:79:16:fd:cc:4d:15:91:6d:8f:bb:eb:87:
                    1b:cb:32:56:59:ce:cb:39:87:b0:20:bb:51:0d:64:
                    7c:51:7d:e8:1e:4e:8b:aa:a0:df:45:8f:b1:52:bb:
                    aa:98:73:60:8a:40:f0:bb:4d:b8:b7:bf:97:fb:7d:
                    0e:67:9a:70:03:19:74:fb:65:fb:c4:01:56:e9:a4:
                    89:e0:40:9d:bb:96:96:db:c7:9c:df:8b:f6:71:4a:
                    a4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:82:FC:F2:2D:58:77:44:DC:6A:A1:E2:ED:DF:F7:21:99:61:F1:6F
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138372e3132312e3135302e302f32332d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:48:64:2a:d1:6b:88:a5:f2:1b:cf:aa:ea:e8:ca:4f:74:b3:
         48:43:5a:f1:2f:59:c9:0f:3b:94:e8:3e:8d:6f:0b:1e:d9:95:
         95:fa:53:fd:64:4e:2d:cf:b4:4b:4c:96:10:e6:62:b3:90:d8:
         bf:65:f8:50:10:21:08:85:cf:31:c3:5e:3c:ba:dd:3f:e2:7b:
         5c:98:49:5e:38:77:be:ef:cf:fc:b4:e2:82:73:9c:47:59:2c:
         49:e3:55:42:74:22:06:82:6e:86:75:34:a4:81:a0:c6:5d:0c:
         fb:ae:9b:0f:aa:29:c7:e4:9f:0f:14:b2:bd:92:12:67:40:f9:
         2f:29:76:ce:99:bc:02:a5:b2:b8:08:fe:40:bd:22:ed:4e:9a:
         f8:78:f1:f6:c4:7e:d0:8c:e9:da:2c:07:2c:5c:0c:bd:94:9e:
         92:4e:cf:cf:69:a3:b7:d6:ea:7a:03:12:cb:d8:a0:5f:40:62:
         a4:1d:c1:98:4f:8f:43:f2:f5:74:cf:4c:d0:0b:a1:58:87:3c:
         df:a1:2a:42:bb:99:e1:14:0c:cb:83:d5:d0:77:bd:61:d8:62:
         0d:4e:26:6d:75:da:af:22:75:24:51:66:ac:6d:7d:12:42:4f:
         3e:e9:50:6a:88:15:14:6e:b4:d7:25:90:43:2b:68:f1:11:5b:
         4e:fb:2e:4e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUCl0syUgUXXmmtapnSRwMZd9ZxJEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlC
MzYzQUNCNTAeFw0yNDEyMDYxMzU2MTlaFw0yNTEyMDUxNDAxMTlaMDMxMTAvBgNV
BAMTKDg2ODJGQ0YyMkQ1ODc3NDREQzZBQTFFMkVEREZGNzIxOTk2MUYxNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnGgS7gAb0H5WVs5fIXOH/pzJM
mO1kWSHffiySyTV3piZYzwLzSZE4PtdqRfzfjcBfzOzzSfFDehxVeKJs5n3iRm4e
Ig97ulCDVej/nDWcp8XNdvQbp0T4w8EqpJkC7GtYEZ83G463PlDAst3K5cGFNYQn
/baybpnctDEal897WJt9+UIwVIJFl3ouQM6fkQ+wkEoWbFtQG1whvD5Ex6xDyiKO
a27dRHkW/cxNFZFtj7vrhxvLMlZZzss5h7Agu1ENZHxRfegeTouqoN9Fj7FSu6qY
c2CKQPC7Tbi3v5f7fQ5nmnADGXT7ZfvEAVbppIngQJ27lpbbx5zfi/ZxSqSxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUhoL88i1Yd0TcaqHi7d/3IZlh8W8wHwYDVR0j
BBgwFoAU72yyxJwyRfjMM6GPCKEM+bNjrLUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FbmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5V
LzAvRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlCMzYzQUNCNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FRjZDQjJDNDlDMzI0NUY4Q0Mz
M0ExOEYwOEExMENGOUIzNjNBQ0I1LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
bmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5VLzAvMzEz
ODM3MmUzMTMyMzEyZTMxMzUzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzcz
MzM2MzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAbt5ljANBgkqhkiG9w0BAQsFAAOCAQEAXkhkKtFr
iKXyG8+q6ujKT3SzSENa8S9ZyQ87lOg+jW8LHtmVlfpT/WROLc+0S0yWEOZis5DY
v2X4UBAhCIXPMcNePLrdP+J7XJhJXjh3vu/P/LTignOcR1ksSeNVQnQiBoJuhnU0
pIGgxl0M+66bD6opx+SfDxSyvZISZ0D5Lyl2zpm8AqWyuAj+QL0i7U6a+Hjx9sR+
0Izp2iwHLFwMvZSekk7Pz2mjt9bqegMSy9igX0BipB3BmE+PQ/L1dM9M0AuhWIc8
36EqQruZ4RQMy4PV0He9YdhiDU4mbXXaryJ1JFFmrG19EkJPPulQaogVFG601yWQ
Qyto8RFbTvsuTg==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:52 2025 by rpki-client