Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138322e302f32332d3233203d3e20323632373431.roa
File:                     3138362e3230382e3138322e302f32332d3233203d3e20323632373431.roa (raw, json)
Hash identifier:          ThiDfp+gE2Uk9HRUO/l5Vo37ZLhMZ61pNKRKad26YZ0=
Subject key identifier:   14:C2:D7:72:F5:81:D3:72:B1:68:49:68:0F:03:BB:8C:47:26:1F:74
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       48FCC4EF67DCE51318150C6C838D87D7E891E3F3
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138322e302f32332d3233203d3e20323632373431.roa
Signing time:             Tue 09 Jan 2024 21:00:05 +0000
ROA not before:           Tue 09 Jan 2024 20:55:05 +0000
ROA not after:            Tue 07 Jan 2025 21:00:05 +0000
asID:                     262741
IP address blocks:        186.208.182.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:fc:c4:ef:67:dc:e5:13:18:15:0c:6c:83:8d:87:d7:e8:91:e3:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Jan  9 20:55:05 2024 GMT
            Not After : Jan  7 21:00:05 2025 GMT
        Subject: CN=14C2D772F581D372B16849680F03BB8C47261F74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9a:e7:ac:f5:7e:e4:75:3a:99:ac:44:d5:b9:
                    bc:94:0e:a7:ea:c9:f2:b8:be:01:68:36:0e:3b:c5:
                    ba:d5:59:ad:e5:88:45:95:4b:3b:6c:7e:43:ca:2e:
                    ae:2e:35:76:93:fd:b3:05:5d:30:d7:26:4f:6b:7c:
                    ff:bb:c0:b5:75:d4:e2:63:c6:96:0e:c0:87:4c:25:
                    04:e9:30:85:a9:57:0f:f1:0d:b2:23:05:67:eb:21:
                    4e:18:42:e9:7c:ab:c8:8a:f2:86:5e:95:fc:5d:a7:
                    4d:49:62:a2:32:70:d7:a2:76:aa:10:1d:60:55:61:
                    8a:68:fd:5c:fc:8f:8c:1a:f5:ce:42:df:14:a8:15:
                    00:2b:f0:df:31:fd:cc:7a:46:6b:de:0d:a8:9a:e8:
                    01:3d:43:f6:31:3c:a5:a5:d6:af:16:42:e4:85:96:
                    66:ac:44:8e:c6:37:17:f3:2a:63:cc:2a:21:c2:c3:
                    f2:b5:d9:6c:ce:f5:78:ae:60:ed:99:a6:b4:24:66:
                    58:29:a9:d3:3e:bc:66:ff:f2:28:2b:56:0b:fb:18:
                    06:44:8e:c8:50:0e:a0:4b:c5:6c:7b:96:f8:88:bd:
                    72:72:43:47:46:59:e2:5c:de:a4:22:9b:1f:8b:8e:
                    0a:fa:55:de:08:30:b0:47:b3:e8:78:c0:cf:d4:34:
                    e3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C2:D7:72:F5:81:D3:72:B1:68:49:68:0F:03:BB:8C:47:26:1F:74
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138322e302f32332d3233203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:5c:05:88:e3:11:b0:85:55:ab:5f:40:62:be:54:06:cf:ab:
         59:b0:e3:3a:2c:b6:c0:4b:ea:92:9a:45:92:c8:d3:b6:07:5f:
         d1:49:1f:0d:67:fa:fe:2b:a4:5f:ee:81:7b:2a:8a:29:0d:48:
         ff:79:db:b0:c0:82:11:8a:d2:ad:d3:12:1e:31:e4:20:de:46:
         d0:15:f2:23:e9:8d:a5:bb:47:17:b2:ff:c8:2f:31:f6:58:76:
         fd:37:87:27:c2:28:ff:de:ee:00:0d:33:3b:65:32:2f:34:b8:
         79:31:d3:7a:60:5b:70:21:14:da:cd:38:f4:10:5f:2b:ea:16:
         a5:f1:2f:9f:dc:cc:13:1b:5d:d3:43:b3:c4:ae:c0:6e:ac:70:
         de:df:37:de:4e:7c:2b:57:77:fc:02:e7:6e:9b:17:ee:7c:78:
         4a:70:fb:ab:1a:62:5d:bc:36:c9:a1:3b:5c:86:c4:88:77:e9:
         53:25:4f:76:fa:42:ea:79:6a:bc:21:9e:c1:37:4c:4a:95:54:
         ac:68:35:a0:7c:e2:58:ae:d1:59:2d:c4:a8:2d:14:a5:91:50:
         4c:a0:24:58:27:fb:43:e1:fa:e7:8e:d1:5c:41:64:20:59:7c:
         e8:24:ee:34:a6:7c:79:87:f0:8a:71:dc:8f:49:1a:28:39:60:
         cd:a2:f7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:33 2025 by rpki-client