Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137362e302f32342d3234203d3e20323632373431.roa
File:                     3138362e3230382e3137362e302f32342d3234203d3e20323632373431.roa (raw, json)
Hash identifier:          Gt0JG7FeeYF0uTt6J8HfmXEBSncn4oazBmW4LCrlaG4=
Subject key identifier:   BF:F8:CF:8A:A5:15:0F:B6:8C:01:6C:10:0C:70:D9:49:91:B3:D5:24
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       4B4A8A54BEAF331E855E1B21AFE709296F72F614
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137362e302f32342d3234203d3e20323632373431.roa
Signing time:             Tue 09 Jan 2024 20:00:01 +0000
ROA not before:           Tue 09 Jan 2024 19:55:01 +0000
ROA not after:            Tue 07 Jan 2025 20:00:01 +0000
asID:                     262741
IP address blocks:        186.208.176.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:4a:8a:54:be:af:33:1e:85:5e:1b:21:af:e7:09:29:6f:72:f6:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Jan  9 19:55:01 2024 GMT
            Not After : Jan  7 20:00:01 2025 GMT
        Subject: CN=BFF8CF8AA5150FB68C016C100C70D94991B3D524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ec:89:1d:d7:1e:7f:7f:3c:9d:48:2c:9e:61:
                    7c:09:06:74:d4:b1:c5:85:30:fa:fb:27:bc:e2:f9:
                    e6:74:93:ab:73:08:69:f5:8e:58:f6:24:1e:d3:97:
                    eb:8c:18:25:15:0f:9a:5a:45:d3:60:20:16:b8:45:
                    e5:20:9c:02:e6:fb:0b:da:8a:ae:9d:dc:fd:12:08:
                    c0:0f:e6:db:09:7c:14:16:dc:b1:4f:bf:c6:fe:d2:
                    8c:54:b7:5e:1e:ee:4d:c4:36:63:88:c5:fa:62:d5:
                    fe:97:f2:61:32:dd:73:f2:c8:63:2d:f1:a8:93:e9:
                    87:6d:49:ac:53:b0:86:d4:47:75:8f:03:d4:38:05:
                    33:d9:64:34:02:b3:22:56:18:9b:1d:df:05:1e:1d:
                    ab:f4:38:73:1b:83:f8:c5:2d:ee:99:e8:bb:b2:29:
                    88:3a:d8:02:99:ec:cf:89:db:45:64:9a:37:91:89:
                    89:b9:74:76:70:34:c6:63:e4:34:a9:ad:80:f9:30:
                    89:20:12:9a:7e:d4:84:76:00:0e:e9:d2:71:4c:6d:
                    c4:48:9c:e2:07:52:11:72:06:f7:1b:fb:90:72:b5:
                    f0:63:e2:f4:4b:8e:c1:68:ba:db:87:2a:0b:ee:d8:
                    a0:75:74:7f:48:ab:0b:2f:0b:dc:90:9a:7a:e1:0b:
                    29:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F8:CF:8A:A5:15:0F:B6:8C:01:6C:10:0C:70:D9:49:91:B3:D5:24
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137362e302f32342d3234203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:4c:da:9c:3d:fd:36:97:0d:a7:86:3f:62:1c:ca:2b:1e:5a:
         75:54:2e:14:fe:13:ae:0c:4a:9e:ef:b1:e0:20:1f:dd:b2:0a:
         28:d4:2c:ee:3a:d0:fa:ca:44:ee:56:84:21:4d:9c:b0:f4:b5:
         82:bc:e5:1c:3e:4a:49:22:05:31:4f:89:af:fa:05:ca:fc:0f:
         07:be:37:f9:ce:f3:3e:4d:11:39:6a:21:66:5d:2e:8d:3a:15:
         5e:6a:f8:40:98:82:63:64:2d:0c:65:2d:c7:7c:e2:c0:cb:04:
         1b:d8:16:35:3a:3c:2d:de:98:40:ac:51:74:e8:91:ab:7d:c8:
         fe:56:0b:bd:56:29:cf:50:f5:63:3f:9a:f5:28:7d:2b:38:16:
         e0:a6:bd:e7:87:34:f3:29:62:dc:0a:b3:84:e3:ff:c8:56:7e:
         13:a6:4d:56:e3:33:41:7f:f3:62:8c:df:55:cc:e2:ce:c6:29:
         77:4e:0f:ea:ec:ee:a7:3d:d0:4f:d0:6c:68:cc:8b:fc:e5:85:
         3d:24:91:3d:50:22:a8:98:db:4a:ec:9f:c2:b3:a1:33:4e:6b:
         67:90:ed:95:91:c9:ad:d5:28:b6:23:f9:a9:6d:8b:97:ee:6e:
         38:50:80:65:7a:09:4d:8f:e3:ad:45:05:66:cf:03:fa:36:8c:
         c3:af:c6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:45:57 2025 by rpki-client