Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3230312e38372e3234382e302f32312d3231203d3e20323733363833.roa
File:                     3230312e38372e3234382e302f32312d3231203d3e20323733363833.roa (raw, json)
Hash identifier:          +Tm9rqbWIQlBV6pAU5E1Vau4MYhy4ZC0FYaTPGdWkaY=
Subject key identifier:   A7:1A:A0:02:5D:84:8A:D1:6E:5D:47:8A:FE:C3:00:27:A8:E7:CB:3A
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       363AB089AEDA348DBED736A552CD7F660145FC32
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3230312e38372e3234382e302f32312d3231203d3e20323733363833.roa
Signing time:             Fri 06 Dec 2024 13:33:19 +0000
ROA not before:           Fri 06 Dec 2024 13:28:19 +0000
ROA not after:            Fri 05 Dec 2025 13:33:19 +0000
asID:                     273683
IP address blocks:        201.87.248.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:3a:b0:89:ae:da:34:8d:be:d7:36:a5:52:cd:7f:66:01:45:fc:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Dec  6 13:28:19 2024 GMT
            Not After : Dec  5 13:33:19 2025 GMT
        Subject: CN=A71AA0025D848AD16E5D478AFEC30027A8E7CB3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:de:ee:63:38:db:26:22:95:64:63:13:f5:06:
                    10:36:c0:0d:8a:1f:34:f0:e0:55:9e:7f:74:9e:3d:
                    e9:83:3d:4d:7f:8d:70:55:5d:5a:87:5e:5f:c9:ad:
                    78:ef:d4:74:93:a9:e3:40:56:95:88:10:7a:d8:70:
                    6c:a3:3c:a1:33:f8:94:c9:c0:18:d2:5f:2d:9b:2f:
                    69:a3:91:f0:00:d2:3c:4e:d7:69:35:75:2f:f3:64:
                    92:5e:ff:98:9e:df:3c:71:5b:48:60:b7:7c:a2:fa:
                    bb:28:d8:52:22:15:2a:6e:6b:98:9f:5d:94:f8:98:
                    51:d9:09:41:40:85:d8:8b:8d:fc:63:f0:79:af:42:
                    84:79:68:b4:6a:cc:d8:bf:c4:1b:9a:27:58:59:93:
                    0d:9c:37:1e:2e:26:85:95:b2:b4:71:4a:01:a0:63:
                    b1:8c:6a:46:60:2f:cc:f3:48:07:c8:c7:85:c3:e6:
                    3f:dd:35:91:c4:43:00:bd:13:67:39:0d:5c:ef:a5:
                    47:fe:a0:8e:fa:c8:27:e4:22:75:53:13:39:3b:53:
                    26:29:60:35:7c:b8:de:5f:1f:b9:65:41:71:90:f4:
                    8d:d3:1e:61:4d:05:9d:37:d9:cd:f1:b5:31:86:8c:
                    29:af:15:4b:d2:ea:5b:9f:b8:6b:3b:bf:75:5b:41:
                    6a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1A:A0:02:5D:84:8A:D1:6E:5D:47:8A:FE:C3:00:27:A8:E7:CB:3A
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3230312e38372e3234382e302f32312d3231203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         aa:cf:6c:0f:d1:0d:48:07:45:20:e5:52:c6:8f:ef:bb:2d:9d:
         48:b8:f4:75:5c:6f:62:8e:1b:e5:07:36:de:25:4f:f7:d7:82:
         9f:e3:f8:e5:98:c3:20:16:f4:70:20:e1:02:5f:fe:30:57:9c:
         ec:d2:c1:61:f0:b5:02:66:7d:c9:4c:bb:f1:89:57:86:0f:64:
         8c:39:f7:c9:ae:45:23:ad:18:1d:3e:00:05:0a:02:26:75:74:
         fd:18:fc:21:98:78:4a:5b:12:0f:3a:82:c5:76:41:64:07:ce:
         0b:59:f2:52:81:79:9c:7b:38:73:be:38:2e:2f:12:8d:a5:bc:
         1f:6e:97:e5:eb:c3:75:d3:a9:ed:01:c9:b0:d7:17:92:0a:af:
         d1:70:d9:9d:fb:db:1a:40:30:7e:e0:69:90:13:a7:28:04:88:
         e4:b2:93:70:30:b8:e7:cd:66:d9:e9:7d:3c:1f:45:bb:69:38:
         50:12:72:45:da:84:8a:4d:bb:76:7f:63:b9:9a:e6:0c:e2:4c:
         cc:9b:ad:04:c9:f6:b5:f1:02:67:a2:55:02:2a:d0:13:4c:8e:
         0b:36:11:1b:f3:cb:d0:a4:20:58:45:8d:3a:76:c1:7c:19:d8:
         6c:db:f5:6f:b5:22:ac:26:d3:f4:f9:5a:61:87:12:d6:d7:3c:
         aa:2f:aa:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:36 2025 by rpki-client