Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138352e302f32342d3234203d3e20323632373431.roa
File:                     3138362e3230382e3138352e302f32342d3234203d3e20323632373431.roa (raw, json)
Hash identifier:          SNkYG7XJslvgAP1r16EWEmRe3xp5/ai7uLg7r5GNcvg=
Subject key identifier:   E8:3E:74:C1:9B:BB:2A:FC:F8:8F:0A:32:EA:81:35:06:92:31:5C:6D
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       2F7143E267AD1FC37EB83553320C9B3005BC861A
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138352e302f32342d3234203d3e20323632373431.roa
Signing time:             Tue 09 Jan 2024 21:00:00 +0000
ROA not before:           Tue 09 Jan 2024 20:55:00 +0000
ROA not after:            Tue 07 Jan 2025 21:00:00 +0000
asID:                     262741
IP address blocks:        186.208.185.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:71:43:e2:67:ad:1f:c3:7e:b8:35:53:32:0c:9b:30:05:bc:86:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Jan  9 20:55:00 2024 GMT
            Not After : Jan  7 21:00:00 2025 GMT
        Subject: CN=E83E74C19BBB2AFCF88F0A32EA81350692315C6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4f:76:8f:3a:d4:fd:14:4f:5d:f8:08:f4:0d:
                    2c:8a:32:30:8f:9a:2a:64:f4:74:2f:e3:78:2d:79:
                    d4:f5:e9:d2:fb:68:69:4a:f4:54:ec:ea:97:77:71:
                    a2:78:1a:16:2a:06:a4:4e:7b:1a:db:ec:64:e9:bc:
                    cb:9e:c5:21:dc:05:d2:0c:51:45:b5:57:8d:db:1f:
                    e7:54:65:f5:d9:f3:1e:58:bf:23:70:cc:0a:1d:1d:
                    ad:0e:6c:20:e7:a2:cc:2c:7a:b8:f0:4d:bb:11:82:
                    94:fd:41:76:90:a4:34:f5:0c:82:2f:ee:fd:e0:f9:
                    38:75:45:81:8f:75:4f:6e:b8:1d:17:80:8f:06:5e:
                    2e:0c:a9:4f:d0:62:4c:69:be:c6:44:70:92:68:1d:
                    99:4f:d4:96:5e:f4:da:9c:7d:8a:0a:26:2f:7c:dd:
                    dd:0e:33:b1:49:0d:61:db:12:b8:0a:b7:cf:6f:ce:
                    e1:9f:db:c1:33:0a:4e:b7:55:83:a7:6e:22:da:ad:
                    ac:43:f0:e6:b3:b7:f8:09:9c:98:a0:bc:8b:3d:fc:
                    50:2b:4f:ee:d7:22:0b:19:75:09:bf:bd:45:ad:2b:
                    d2:07:00:30:dd:01:49:2b:09:10:6e:2f:89:0f:9e:
                    f9:0b:0c:a7:a7:71:e0:d8:8e:3c:18:f9:3e:71:4d:
                    d1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3E:74:C1:9B:BB:2A:FC:F8:8F:0A:32:EA:81:35:06:92:31:5C:6D
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138352e302f32342d3234203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:69:04:05:db:7c:7a:8b:db:09:4f:f8:a5:f8:9e:a5:cd:c9:
         d4:4e:f2:0b:4b:6a:85:51:7c:16:1e:67:5b:f3:f9:a2:f6:aa:
         fe:af:98:75:de:42:df:e9:d6:37:f8:09:80:91:4b:3e:9f:ff:
         a2:4d:b9:5a:e0:9f:90:11:67:e0:c1:1f:c4:cf:87:3c:52:2a:
         6b:bb:17:a3:98:4f:f7:a0:c6:b6:8f:c4:3f:24:d5:1f:48:86:
         a5:d2:9a:5b:15:40:19:bb:ac:f7:db:9c:ec:d1:5a:65:5f:09:
         bb:44:2c:4f:b4:49:eb:81:b3:1b:c6:c8:51:27:b6:d6:a3:56:
         a0:f2:66:51:9f:a0:d8:11:d6:d2:ba:2f:e3:d4:41:20:6b:e7:
         f2:96:f0:2c:e1:9e:73:27:ca:9f:b9:4f:32:67:79:54:c2:77:
         0d:ab:11:32:b8:a5:d9:9d:8b:96:e1:77:d8:c2:79:2d:82:13:
         15:a1:4e:95:20:a4:a0:7d:73:4a:43:6b:be:35:8d:08:62:bc:
         2a:2b:71:95:c3:a3:a1:2c:0c:07:5b:9f:4e:01:61:01:df:07:
         78:a9:c6:0a:27:11:43:5d:38:ab:f6:ca:bf:d5:05:e2:6b:5a:
         0b:67:23:b9:67:e4:1b:31:f4:0a:e9:7d:ab:2e:7b:8e:cc:40:
         4f:64:bf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:42:15 2025 by rpki-client