Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138342e302f32312d3231203d3e20323632373431.roa
File:                     3138362e3230382e3138342e302f32312d3231203d3e20323632373431.roa (raw, json)
Hash identifier:          n01gPrJg+q4zNIDsl6t4KeS+ORHd2PTriK0UkizWb+M=
Subject key identifier:   3F:4E:9A:A3:83:37:3A:D7:85:3D:4C:8C:A3:C2:E3:BE:E2:7F:70:FC
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       26F96DB04AB210A0675B9A58BEC23622CD9A0268
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138342e302f32312d3231203d3e20323632373431.roa
Signing time:             Tue 09 Jan 2024 21:00:05 +0000
ROA not before:           Tue 09 Jan 2024 20:55:05 +0000
ROA not after:            Tue 07 Jan 2025 21:00:05 +0000
asID:                     262741
IP address blocks:        186.208.184.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f9:6d:b0:4a:b2:10:a0:67:5b:9a:58:be:c2:36:22:cd:9a:02:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Jan  9 20:55:05 2024 GMT
            Not After : Jan  7 21:00:05 2025 GMT
        Subject: CN=3F4E9AA383373AD7853D4C8CA3C2E3BEE27F70FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ad:7a:04:11:5b:a7:4e:f8:9a:21:b9:97:04:
                    ac:5e:28:1d:c8:7f:a3:dd:f1:e1:bf:b4:72:38:c8:
                    15:13:27:92:d0:1e:4f:d4:06:a6:a5:f3:1f:4e:a7:
                    f3:34:4c:d1:74:fb:25:86:5e:ca:01:a9:8c:65:74:
                    ab:82:8f:07:19:2f:3a:f6:f0:24:a8:d6:12:76:ab:
                    81:3c:89:a7:7d:79:2c:6d:63:a5:89:4e:f7:4f:fc:
                    c8:f2:4a:d7:9a:d5:9e:be:02:0f:c2:1d:d8:75:94:
                    7b:2c:15:f8:bd:4e:29:ff:f0:21:2b:ce:7f:c8:bc:
                    3a:8b:97:a3:6d:26:94:44:33:c5:d2:15:20:90:4e:
                    31:32:f7:cb:8d:13:10:81:ab:2b:b4:00:be:79:6e:
                    0e:36:58:69:83:c7:b4:45:50:79:74:55:73:01:cf:
                    23:06:eb:c0:54:02:68:3a:eb:17:31:bf:39:14:dd:
                    6a:1a:2c:cb:11:c1:4b:e0:7b:0d:70:5c:60:3c:cf:
                    12:3d:ce:f1:6c:ce:b4:23:eb:80:3c:26:bf:3c:ab:
                    fe:5a:f0:a0:37:55:ee:c9:a9:11:0c:3f:93:7a:24:
                    c9:77:da:af:bf:7c:4a:6d:da:3b:cf:a1:2f:96:89:
                    8d:7b:32:37:7e:cf:17:fb:53:23:46:a1:a8:e6:f4:
                    87:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4E:9A:A3:83:37:3A:D7:85:3D:4C:8C:A3:C2:E3:BE:E2:7F:70:FC
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138342e302f32312d3231203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         51:0c:1f:82:c3:da:9c:a6:5f:8f:00:f0:d8:69:52:28:cc:97:
         82:5c:bd:12:dd:29:85:b1:83:70:df:76:ee:0a:5b:dc:e5:e5:
         18:09:c3:19:05:4a:3d:03:47:74:cd:91:d5:08:9b:32:87:1f:
         9a:75:2c:e3:99:9f:2f:06:80:b0:ee:bc:f6:5a:32:13:30:d1:
         16:d0:a3:76:6a:0b:6d:24:2c:91:84:21:6b:87:de:ea:62:b5:
         6b:46:ee:f9:f2:4b:7b:68:5b:8c:26:f8:99:8b:16:3c:c3:f3:
         5e:73:65:71:ca:9c:69:4e:81:b0:f5:a1:76:e7:04:9d:fa:4b:
         97:27:3f:66:c8:4f:e5:d8:7f:54:97:fc:99:da:f4:f4:92:e6:
         89:ea:51:79:05:43:e5:d1:10:05:96:05:aa:70:ce:37:d4:2c:
         07:24:46:d2:47:f5:25:1e:31:49:de:bf:62:a1:fd:e7:50:1e:
         5a:63:7a:86:68:19:ff:da:15:da:f6:62:51:45:e7:98:9e:fe:
         c1:a4:81:b3:cc:05:31:6a:13:04:b0:b1:81:65:d5:fc:b9:83:
         f1:58:fd:f0:7d:19:3f:f6:0f:71:84:e8:9d:f3:b8:fd:04:4f:
         7a:5d:3f:6f:f1:b1:31:a3:82:9d:ba:99:4b:74:37:99:3d:42:
         c9:9f:10:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:37 2025 by rpki-client