Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3230312e38372e3234322e302f32332d3234203d3e20323733363833.roa
File:                     3230312e38372e3234322e302f32332d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          HXSd9hltnf11VLFY2906TVrK1kPd0a+MnCIE0weTvC4=
Subject key identifier:   3E:EB:62:27:23:A1:9C:14:35:D9:33:75:91:AB:24:C6:7A:38:36:B0
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       47FFBCCE2A466A692D0ADD9BC7A476E5E21527CA
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3230312e38372e3234322e302f32332d3234203d3e20323733363833.roa
Signing time:             Fri 06 Dec 2024 14:02:13 +0000
ROA not before:           Fri 06 Dec 2024 13:57:13 +0000
ROA not after:            Fri 05 Dec 2025 14:02:13 +0000
asID:                     273683
IP address blocks:        201.87.242.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ff:bc:ce:2a:46:6a:69:2d:0a:dd:9b:c7:a4:76:e5:e2:15:27:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Dec  6 13:57:13 2024 GMT
            Not After : Dec  5 14:02:13 2025 GMT
        Subject: CN=3EEB622723A19C1435D9337591AB24C67A3836B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3d:d6:a1:b2:ef:d2:6a:a4:39:c3:64:e7:aa:
                    ce:49:66:b3:15:fa:ec:21:e0:82:8e:0d:8b:54:bb:
                    c8:bb:32:c4:eb:86:2d:fd:6c:ab:14:8d:21:f5:35:
                    43:00:f2:9a:d1:08:a3:a9:9b:8d:01:df:ba:48:c4:
                    34:af:82:24:af:c8:7c:0f:0b:2a:4d:f7:0d:e9:97:
                    85:40:6c:e3:ac:7e:41:88:cf:b0:b1:3d:4d:76:f6:
                    5d:52:24:12:07:0f:e7:3c:27:13:f4:de:90:ed:7e:
                    9f:8b:b6:55:1f:57:b9:61:fa:2b:bd:09:24:3d:23:
                    cd:b0:b7:f4:6a:b0:f8:16:f5:5e:4c:52:30:f3:41:
                    a4:02:5d:f1:f9:0d:e9:b6:bd:d3:43:3f:16:9b:34:
                    60:0c:a2:35:19:1d:f6:6c:ec:cc:8a:75:3a:7f:0b:
                    21:1a:73:89:dc:b3:85:87:0f:0d:da:3b:e4:9d:bf:
                    ff:64:e8:d9:12:1d:26:8d:42:a0:87:31:45:fb:28:
                    62:d5:5c:12:dd:4d:05:7c:40:39:6d:d1:3f:bb:80:
                    35:1d:01:45:5d:d6:5b:7f:e8:4f:56:87:a6:5b:ec:
                    be:b9:c8:d1:09:cc:fa:94:00:8e:17:d7:9a:67:58:
                    94:a0:61:e7:ae:0d:c2:ab:1e:b6:e1:f5:4e:e0:f9:
                    4d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EB:62:27:23:A1:9C:14:35:D9:33:75:91:AB:24:C6:7A:38:36:B0
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3230312e38372e3234322e302f32332d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:10:5e:82:a4:da:06:18:1f:bf:fa:89:bf:40:0d:84:cd:29:
         87:67:98:4a:37:9a:92:2b:0a:5a:82:ab:37:1c:21:1c:69:32:
         2c:45:b2:61:d7:fb:7b:7f:67:98:9c:a3:ca:da:92:7a:bb:36:
         6c:5f:2b:51:46:58:a4:20:00:0b:61:08:1e:b6:37:26:d6:2d:
         10:14:c5:7c:ba:4e:f7:d0:97:1f:57:2f:4c:7c:d7:22:51:f6:
         ac:cb:3d:4b:25:03:c7:ce:b9:29:24:21:88:7c:bc:69:22:62:
         10:a1:c7:1f:38:b3:53:cf:a6:6a:3d:4f:57:cf:13:2c:1f:f4:
         99:70:65:24:8c:bf:a9:a6:a4:e6:8d:a0:ce:81:9f:5b:2d:7e:
         b9:16:f5:f0:26:eb:a7:7c:3c:8b:00:d8:a1:fb:a1:e0:55:03:
         35:f7:61:f3:6f:d6:ca:fd:03:9a:19:1d:a8:ae:fd:a8:64:cd:
         3b:1a:10:a6:2c:3e:34:e9:06:dd:28:02:a2:37:53:85:92:ac:
         e8:12:3d:bb:b8:20:35:16:22:45:a6:70:b4:9e:4b:5f:a1:8e:
         52:fe:8d:c5:47:98:72:a5:77:a8:c4:5e:16:27:31:c0:25:7c:
         f9:5d:0c:12:c0:9a:d8:1d:b8:8c:db:33:46:7b:0b:b9:6a:a4:
         a3:f8:aa:87
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUR/+8zipGamktCt2bx6R25eIVJ8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlC
MzYzQUNCNTAeFw0yNDEyMDYxMzU3MTNaFw0yNTEyMDUxNDAyMTNaMDMxMTAvBgNV
BAMTKDNFRUI2MjI3MjNBMTlDMTQzNUQ5MzM3NTkxQUIyNEM2N0EzODM2QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Pdahsu/SaqQ5w2Tnqs5JZrMV
+uwh4IKODYtUu8i7MsTrhi39bKsUjSH1NUMA8prRCKOpm40B37pIxDSvgiSvyHwP
CypN9w3pl4VAbOOsfkGIz7CxPU129l1SJBIHD+c8JxP03pDtfp+LtlUfV7lh+iu9
CSQ9I82wt/RqsPgW9V5MUjDzQaQCXfH5Dem2vdNDPxabNGAMojUZHfZs7MyKdTp/
CyEac4ncs4WHDw3aO+Sdv/9k6NkSHSaNQqCHMUX7KGLVXBLdTQV8QDlt0T+7gDUd
AUVd1lt/6E9Wh6Zb7L65yNEJzPqUAI4X15pnWJSgYeeuDcKrHrbh9U7g+U2PAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUPutiJyOhnBQ12TN1kaskxno4NrAwHwYDVR0j
BBgwFoAU72yyxJwyRfjMM6GPCKEM+bNjrLUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FbmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5V
LzAvRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlCMzYzQUNCNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FRjZDQjJDNDlDMzI0NUY4Q0Mz
M0ExOEYwOEExMENGOUIzNjNBQ0I1LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
bmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5VLzAvMzIz
MDMxMmUzODM3MmUzMjM0MzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM3MzMz
NjM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAHJV/IwDQYJKoZIhvcNAQELBQADggEBAFAQXoKk2gYY
H7/6ib9ADYTNKYdnmEo3mpIrClqCqzccIRxpMixFsmHX+3t/Z5ico8raknq7Nmxf
K1FGWKQgAAthCB62NybWLRAUxXy6TvfQlx9XL0x81yJR9qzLPUslA8fOuSkkIYh8
vGkiYhChxx84s1PPpmo9T1fPEywf9JlwZSSMv6mmpOaNoM6Bn1stfrkW9fAm66d8
PIsA2KH7oeBVAzX3YfNv1sr9A5oZHaiu/ahkzTsaEKYsPjTpBt0oAqI3U4WSrOgS
Pbu4IDUWIkWmcLSeS1+hjlL+jcVHmHKld6jEXhYnMcAlfPldDBLAmtgduIzbM0Z7
C7lqpKP4qoc=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:24 2025 by rpki-client