Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3230312e38372e3235322e302f32322d3232203d3e20323733363833.roa
File:                     3230312e38372e3235322e302f32322d3232203d3e20323733363833.roa (raw, json)
Hash identifier:          0qHadylQG052Xei/qaL3JqW8fpAqWtDChPEIEO2c/jg=
Subject key identifier:   6B:A9:5A:17:56:33:08:AB:21:24:AB:9E:8B:9B:D6:B5:81:C7:20:F1
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       058CE929FFD500B5DC6AFC1BFD32C5547D309E56
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3230312e38372e3235322e302f32322d3232203d3e20323733363833.roa
Signing time:             Fri 06 Dec 2024 19:35:26 +0000
ROA not before:           Fri 06 Dec 2024 19:30:26 +0000
ROA not after:            Fri 05 Dec 2025 19:35:26 +0000
asID:                     273683
IP address blocks:        201.87.252.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8c:e9:29:ff:d5:00:b5:dc:6a:fc:1b:fd:32:c5:54:7d:30:9e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Dec  6 19:30:26 2024 GMT
            Not After : Dec  5 19:35:26 2025 GMT
        Subject: CN=6BA95A17563308AB2124AB9E8B9BD6B581C720F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a6:36:30:8a:94:c0:c3:02:d3:47:68:cc:56:
                    4b:87:20:7d:23:74:4a:f2:77:90:b7:1f:e8:c2:9f:
                    5d:bd:1c:ed:96:15:ae:6d:08:66:67:4e:64:5f:e2:
                    87:e0:25:42:18:6b:d3:e5:84:18:0f:83:de:4c:b6:
                    50:72:63:b2:87:0d:fa:4c:1d:25:f9:72:6a:a8:e6:
                    af:1b:9f:64:8e:57:17:c1:60:bf:ec:cf:45:71:95:
                    bb:bd:94:99:7f:ce:e8:50:2a:0e:13:4c:2a:7f:7d:
                    4c:dc:c5:34:70:2d:04:8f:2a:24:44:5d:e2:c3:a3:
                    08:3e:1e:57:c5:a4:4a:7d:47:e9:ee:fa:fa:e9:73:
                    7b:60:d5:92:67:79:3a:e4:57:22:ab:d0:4e:be:f4:
                    6d:4d:10:e3:04:bb:b5:4a:d3:fa:8b:0a:a7:41:44:
                    ec:01:d6:1e:ab:a1:0d:64:a5:6f:63:15:b4:61:88:
                    86:4e:ad:87:08:e3:3b:bb:9a:88:70:25:23:fa:2e:
                    34:82:21:3e:d4:b4:11:c7:b3:06:47:73:24:c3:ba:
                    99:be:e5:b9:3f:dd:fe:87:3c:62:6e:5b:72:02:eb:
                    39:68:4f:e9:9e:35:6d:4a:ef:dd:29:7f:a7:de:b6:
                    74:f5:57:23:72:4d:4a:c4:e4:e7:40:99:aa:ee:3e:
                    11:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A9:5A:17:56:33:08:AB:21:24:AB:9E:8B:9B:D6:B5:81:C7:20:F1
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3230312e38372e3235322e302f32322d3232203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:03:db:40:d1:7e:1f:b1:8f:2b:97:3b:cc:99:76:c0:39:6a:
         fa:62:81:c5:c0:e6:c1:03:97:07:e4:71:2a:75:d2:ab:1a:8e:
         d2:4b:21:90:c3:7f:77:8f:43:31:85:43:d7:02:e1:3b:37:eb:
         01:33:84:96:d4:f2:a5:5b:14:1d:6f:2d:43:9e:3b:57:e2:53:
         27:69:ea:91:da:c2:19:01:20:29:d3:84:f1:61:e2:45:08:b4:
         27:31:c8:e4:ed:8d:c8:64:40:7f:fa:bd:e9:70:45:9b:6e:7b:
         72:1a:c0:a0:b0:60:b1:27:f6:39:91:d2:a5:20:7b:53:57:46:
         f8:71:68:d0:d6:1c:65:cc:98:a8:86:42:94:6d:44:54:10:b9:
         ef:6d:aa:65:c8:40:d3:0c:8b:90:6d:05:26:ac:3c:9e:83:78:
         1f:9b:58:79:b6:1d:31:f0:ed:ea:41:05:ef:f9:d9:12:60:b7:
         5b:bd:54:ec:cb:67:49:9d:8c:48:26:7d:a9:6d:26:94:c5:7f:
         cd:ad:96:79:9c:f5:48:dd:90:ca:54:71:fc:8b:5f:d7:e1:f3:
         dc:e7:76:70:0c:59:41:7f:54:be:94:5b:8d:b6:ee:c9:61:68:
         1c:8b:04:8d:7c:a9:77:a1:42:93:42:81:59:76:ea:c8:ae:ef:
         53:0c:a1:29
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUBYzpKf/VALXcavwb/TLFVH0wnlYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlC
MzYzQUNCNTAeFw0yNDEyMDYxOTMwMjZaFw0yNTEyMDUxOTM1MjZaMDMxMTAvBgNV
BAMTKDZCQTk1QTE3NTYzMzA4QUIyMTI0QUI5RThCOUJENkI1ODFDNzIwRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+pjYwipTAwwLTR2jMVkuHIH0j
dEryd5C3H+jCn129HO2WFa5tCGZnTmRf4ofgJUIYa9PlhBgPg95MtlByY7KHDfpM
HSX5cmqo5q8bn2SOVxfBYL/sz0Vxlbu9lJl/zuhQKg4TTCp/fUzcxTRwLQSPKiRE
XeLDowg+HlfFpEp9R+nu+vrpc3tg1ZJneTrkVyKr0E6+9G1NEOMEu7VK0/qLCqdB
ROwB1h6roQ1kpW9jFbRhiIZOrYcI4zu7mohwJSP6LjSCIT7UtBHHswZHcyTDupm+
5bk/3f6HPGJuW3IC6zloT+meNW1K790pf6fetnT1VyNyTUrE5OdAmaruPhFDAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUa6laF1YzCKshJKuei5vWtYHHIPEwHwYDVR0j
BBgwFoAU72yyxJwyRfjMM6GPCKEM+bNjrLUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FbmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5V
LzAvRUY2Q0IyQzQ5QzMyNDVGOENDMzNBMThGMDhBMTBDRjlCMzYzQUNCNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FRjZDQjJDNDlDMzI0NUY4Q0Mz
M0ExOEYwOEExMENGOUIzNjNBQ0I1LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
bmRIc3hRSnpWcE5ickNjOGdiNGJNYjRFSEJXQUZWbXBkRG9vbUpRTm5VLzAvMzIz
MDMxMmUzODM3MmUzMjM1MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3MzMz
NjM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBALJV/wwDQYJKoZIhvcNAQELBQADggEBAJkD20DRfh+x
jyuXO8yZdsA5avpigcXA5sEDlwfkcSp10qsajtJLIZDDf3ePQzGFQ9cC4Ts36wEz
hJbU8qVbFB1vLUOeO1fiUydp6pHawhkBICnThPFh4kUItCcxyOTtjchkQH/6velw
RZtue3IawKCwYLEn9jmR0qUge1NXRvhxaNDWHGXMmKiGQpRtRFQQue9tqmXIQNMM
i5BtBSasPJ6DeB+bWHm2HTHw7epBBe/52RJgt1u9VOzLZ0mdjEgmfaltJpTFf82t
lnmc9UjdkMpUcfyLX9fh89zndnAMWUF/VL6UW4227slhaByLBI18qXehQpNCgVl2
6siu71MMoSk=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:58 2025 by rpki-client