Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138332e302f32342d3234203d3e20323632373431.roa
File:                     3138362e3230382e3138332e302f32342d3234203d3e20323632373431.roa (raw, json)
Hash identifier:          aQDuLAjd1hDYXWF5uYy5OJZ+1unZP8wVk+4FYPJqe3s=
Subject key identifier:   B6:88:ED:3E:00:56:CF:1A:6B:87:39:C1:BB:C6:43:D7:7D:B7:70:6A
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       02EEB580A103B24BD68FA1FDBE9D710C0894219F
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138332e302f32342d3234203d3e20323632373431.roa
Signing time:             Tue 09 Jan 2024 21:00:05 +0000
ROA not before:           Tue 09 Jan 2024 20:55:05 +0000
ROA not after:            Tue 07 Jan 2025 21:00:05 +0000
asID:                     262741
IP address blocks:        186.208.183.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ee:b5:80:a1:03:b2:4b:d6:8f:a1:fd:be:9d:71:0c:08:94:21:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Jan  9 20:55:05 2024 GMT
            Not After : Jan  7 21:00:05 2025 GMT
        Subject: CN=B688ED3E0056CF1A6B8739C1BBC643D77DB7706A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:01:b3:1e:c6:ab:70:d3:c0:0e:98:0c:8b:b0:
                    f0:ba:b6:87:ef:76:a2:03:cb:88:0c:47:6e:0d:6c:
                    68:75:a5:e0:6b:eb:10:e2:54:87:04:ab:86:ed:05:
                    9f:84:3e:61:d3:8c:f1:cc:e7:89:7c:30:38:95:bd:
                    7b:ca:01:d8:43:6c:d8:1a:6c:bc:bc:c4:07:0a:26:
                    1f:29:23:5f:d4:36:4a:af:7b:33:4e:79:04:2c:ff:
                    18:73:58:f0:bb:c2:12:df:d8:b0:43:73:c2:f5:4b:
                    15:68:44:20:5b:54:57:34:af:c2:32:10:ae:08:99:
                    02:47:d6:05:23:fa:ff:7b:ad:3d:bf:b5:1e:95:46:
                    f9:98:88:f8:71:48:69:92:03:a5:d8:24:5e:e2:85:
                    7b:d1:e4:49:3a:2f:71:2b:76:0f:ec:4a:65:c7:80:
                    4e:fe:0c:10:d8:4f:6f:ca:5f:7a:46:d8:57:b2:dc:
                    4b:f6:62:ef:da:f2:13:64:19:59:4a:0b:56:31:00:
                    da:bd:12:cd:f0:93:2e:6e:91:2c:fc:09:66:73:84:
                    e7:d4:25:51:3e:47:83:ce:04:7d:20:1c:68:a0:f6:
                    ab:a3:65:9d:6a:ad:de:fe:ed:90:d6:87:3d:43:ce:
                    65:e8:03:16:f1:a2:8f:74:52:ff:57:a3:0c:16:40:
                    b5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:88:ED:3E:00:56:CF:1A:6B:87:39:C1:BB:C6:43:D7:7D:B7:70:6A
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138332e302f32342d3234203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:a0:e3:65:73:af:de:4b:ab:3d:a9:95:2d:0a:8b:c2:30:89:
         b4:33:66:d7:6b:5a:d4:ac:0e:c7:83:21:89:6d:81:31:52:10:
         e6:d1:72:70:61:bc:72:85:14:7e:08:21:c4:63:ba:17:d0:bf:
         d1:e1:0f:40:34:7c:1b:61:3a:3d:65:16:cf:4a:f8:fe:cd:c1:
         f7:de:d3:96:c2:c6:47:ee:e2:54:9a:8f:2d:7f:6e:a6:3f:d6:
         bf:c2:3f:d2:f8:c0:1f:25:01:ee:9a:49:be:37:68:d3:d8:38:
         c3:47:a3:31:0c:39:d5:64:09:b9:82:65:6a:55:40:6d:42:79:
         e3:0a:74:a1:f8:c1:76:9c:98:f3:be:1d:68:1d:f8:f7:e2:76:
         23:c8:02:0f:12:d8:58:ca:d8:d6:d5:56:f0:9a:5e:33:a0:30:
         83:10:84:f5:36:31:5a:ae:f5:26:f4:69:27:b2:35:bb:64:f1:
         bd:ca:60:5c:9c:24:88:ec:3f:ff:a5:9c:ab:ed:8c:2f:d1:49:
         b4:f3:fe:4f:7a:52:40:34:0a:04:4e:bd:5a:13:ec:d2:50:b9:
         d0:36:24:05:d6:57:58:70:dc:3f:29:7c:d9:0d:56:da:a1:76:
         0b:9f:c3:55:15:cb:82:9c:ca:7e:00:75:10:12:f9:7f:24:58:
         88:99:c5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:27 2025 by rpki-client