Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138382e302f32322d3232203d3e20323632373431.roa
File:                     3138362e3230382e3138382e302f32322d3232203d3e20323632373431.roa (raw, json)
Hash identifier:          oU9hMsqaHACOWYp361vimBz6HLXBhEPkhclBvbBaRaU=
Subject key identifier:   68:28:D1:E1:E7:36:7C:66:60:76:A1:C5:51:DA:10:40:87:DC:68:1F
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       616E7189BA925709795FF218E4777CC61E6AA205
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138382e302f32322d3232203d3e20323632373431.roa
Signing time:             Tue 09 Jan 2024 21:00:02 +0000
ROA not before:           Tue 09 Jan 2024 20:55:02 +0000
ROA not after:            Tue 07 Jan 2025 21:00:02 +0000
asID:                     262741
IP address blocks:        186.208.188.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:6e:71:89:ba:92:57:09:79:5f:f2:18:e4:77:7c:c6:1e:6a:a2:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Jan  9 20:55:02 2024 GMT
            Not After : Jan  7 21:00:02 2025 GMT
        Subject: CN=6828D1E1E7367C666076A1C551DA104087DC681F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2b:62:81:91:db:14:d9:b5:06:ab:b2:9b:cd:
                    18:71:ad:93:00:41:70:2c:b7:19:27:fd:ad:6c:17:
                    c2:58:8b:ef:8b:15:14:ac:13:dc:f7:39:21:72:bf:
                    86:9e:5b:41:57:38:9f:8f:09:a8:4c:cb:c0:34:d1:
                    df:5f:cf:05:c5:cc:0f:b4:da:10:2f:fa:20:6a:8b:
                    63:90:fa:e5:00:0c:61:36:ac:68:2e:a1:7b:66:29:
                    75:a7:28:12:28:ba:f3:c2:ec:6c:7f:2a:c0:9d:0b:
                    a8:4b:5a:2e:5a:30:62:14:65:1b:30:d4:04:74:e9:
                    e8:dc:0a:39:0b:39:a5:81:fe:d8:51:d5:e3:bf:4c:
                    5c:b7:6e:b1:c1:fc:c1:27:c9:91:3a:68:c3:b2:7e:
                    9b:51:07:af:9b:82:c5:13:90:5b:ca:06:45:83:fc:
                    47:3f:27:80:26:4a:b9:25:4c:5b:a8:a5:4c:ba:19:
                    1d:e5:ae:e1:0e:6f:89:eb:e7:3a:46:0a:61:7e:8b:
                    3e:7b:56:25:34:c5:52:f8:f2:fb:0e:47:81:59:6e:
                    42:19:79:c6:44:b8:3a:4d:8b:54:51:33:60:81:67:
                    af:c1:c1:5f:02:ff:4c:97:3a:84:21:3d:b5:03:a2:
                    95:ac:85:a1:e3:b3:6d:37:0d:4f:70:71:9e:cc:85:
                    70:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:28:D1:E1:E7:36:7C:66:60:76:A1:C5:51:DA:10:40:87:DC:68:1F
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138382e302f32322d3232203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:f7:71:7a:1f:09:b4:8c:34:6c:6b:37:1c:eb:33:b1:62:35:
         04:15:d9:8d:a5:58:b6:77:1e:1e:25:77:c2:de:8b:d5:a1:91:
         ee:55:93:59:9f:cd:60:28:7f:7c:f1:f3:f5:a3:34:42:a8:25:
         63:78:02:f0:ca:fa:a7:30:96:c2:f1:fa:63:f3:4d:1f:bc:bb:
         b8:07:af:e7:e2:0c:f4:86:f8:a4:7e:71:be:d6:f4:e8:48:4a:
         8f:be:2f:6b:0f:31:b7:09:de:54:5b:4e:b6:cf:a7:84:7b:22:
         5b:96:52:3b:5b:48:24:be:40:4b:b4:98:7b:41:b1:88:2f:fc:
         ec:8e:00:8f:c1:0b:5a:92:61:42:83:8a:b0:f8:b1:ec:53:4c:
         de:91:0a:fc:f2:7f:b9:ec:6d:5a:b5:31:97:04:3b:28:06:f7:
         e1:0a:d5:17:9f:55:e4:87:6d:1b:ae:b9:9d:34:8a:5a:07:34:
         76:4c:71:73:71:61:0e:c9:45:f7:39:c8:b8:35:ae:ba:ad:8a:
         ea:70:83:24:7a:62:8b:8a:b3:c0:4c:a8:3e:09:02:a0:13:31:
         35:9b:fc:82:a9:7b:08:79:49:ba:3c:41:3f:4a:07:6c:9b:09:
         38:70:f6:81:19:dc:d4:50:49:e7:1a:11:25:92:9a:76:d4:2c:
         6b:43:62:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:46:43 2025 by rpki-client