Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3230312e38372e3234382e302f32322d3234203d3e20323733363833.roa
File:                     3230312e38372e3234382e302f32322d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          o/4z5wJpG4sU8VeV8f/Rmrq31P+RS8HnC2EbhCKd2hc=
Subject key identifier:   EF:14:27:ED:D3:7B:E3:AD:BE:7C:1A:47:6C:80:9E:AC:15:D4:2F:70
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       48A2456659174E0E27F66F74E878A06AFC4C2844
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3230312e38372e3234382e302f32322d3234203d3e20323733363833.roa
Signing time:             Fri 06 Dec 2024 14:03:29 +0000
ROA not before:           Fri 06 Dec 2024 13:58:29 +0000
ROA not after:            Fri 05 Dec 2025 14:03:29 +0000
asID:                     273683
IP address blocks:        201.87.248.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a2:45:66:59:17:4e:0e:27:f6:6f:74:e8:78:a0:6a:fc:4c:28:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Dec  6 13:58:29 2024 GMT
            Not After : Dec  5 14:03:29 2025 GMT
        Subject: CN=EF1427EDD37BE3ADBE7C1A476C809EAC15D42F70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:99:27:76:48:9b:f9:f3:ea:6e:de:72:4e:40:
                    eb:ee:a3:bf:cb:72:6d:d8:66:83:68:fb:40:31:c5:
                    97:53:9a:da:62:19:43:c9:df:80:0a:b2:71:a5:da:
                    e7:68:d4:9e:2f:7a:f4:f6:18:f0:e5:b3:9d:0d:45:
                    37:dd:25:16:e4:c7:49:74:32:6b:b1:b2:8a:75:17:
                    1e:bf:b3:80:9d:dc:63:ab:3f:a5:95:81:2e:6b:10:
                    9c:df:6c:25:ab:ce:c1:69:39:3b:38:52:75:c5:80:
                    78:8a:8b:e3:2d:3f:00:3c:38:6f:cc:5d:7c:e0:d2:
                    c8:e3:63:27:d3:85:c0:2f:93:8d:99:03:33:47:85:
                    95:65:2a:d6:20:88:dd:70:bc:a5:17:b0:76:61:7e:
                    7f:77:ad:ea:7a:68:09:fa:7c:15:c9:bf:c2:8c:77:
                    01:a6:90:4c:29:06:ba:83:0f:b8:28:b0:40:56:85:
                    cd:cb:81:4f:96:9a:10:9b:37:8e:e5:a4:9a:f6:74:
                    fd:48:77:4f:e3:c8:8e:54:56:65:7c:be:9f:26:49:
                    a0:d1:b2:6f:a4:83:49:4a:2e:de:99:13:13:c1:6f:
                    da:cc:1b:91:9b:15:eb:23:fc:87:c8:78:e2:0e:80:
                    da:be:21:7d:ba:14:33:f6:8d:06:75:f1:aa:bc:17:
                    bc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:14:27:ED:D3:7B:E3:AD:BE:7C:1A:47:6C:80:9E:AC:15:D4:2F:70
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3230312e38372e3234382e302f32322d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:3a:e4:6e:1f:39:ad:3c:4f:be:a2:f9:5e:4e:70:58:7b:df:
         f3:71:6a:97:29:db:31:b4:24:b7:78:83:ba:5e:30:fd:80:2a:
         50:c1:70:e2:50:01:43:b7:ce:15:ea:5e:a0:e6:67:20:1c:05:
         b1:fe:16:66:50:47:69:2d:68:43:c2:75:87:41:d5:ea:26:50:
         3e:14:9a:5d:2d:49:e2:1c:19:35:fc:9e:e7:55:13:25:f7:17:
         71:51:d8:71:51:f8:b4:80:e9:91:0d:aa:b7:9d:bf:18:83:0b:
         cd:30:48:c4:f6:e7:99:b0:63:6c:e3:ea:b9:d2:57:59:61:b7:
         93:26:1e:f6:f7:0f:3f:25:4b:c5:b5:f8:29:b0:b2:de:3b:d5:
         7d:0a:ad:b9:e2:23:4b:76:5d:f4:08:a9:fa:fb:5e:f3:b3:14:
         cb:19:b4:b3:0a:7c:75:d2:eb:f6:21:b4:a2:e9:20:a3:da:bf:
         3b:08:3a:99:5f:ad:32:95:29:08:1e:fc:22:ee:9f:a2:01:8b:
         3c:b9:de:6f:53:6c:02:9e:97:13:b4:a7:66:eb:4b:7c:04:44:
         a4:2a:56:87:3f:44:53:6c:1f:45:0f:8f:e5:fa:05:5a:49:52:
         d7:60:99:38:c2:45:29:cb:8a:c7:27:62:be:e5:ee:e3:33:e1:
         d5:17:a8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:23 2025 by rpki-client