Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138392e302f32342d3234203d3e20323632373431.roa
File:                     3138362e3230382e3138392e302f32342d3234203d3e20323632373431.roa (raw, json)
Hash identifier:          PJsjrGx4k+0oJkEU37GSwdOhFfhnAtS+Xz52vC9DGO8=
Subject key identifier:   9E:A2:CD:8F:56:F7:C2:EE:73:AF:C1:3E:34:D9:AB:DE:FC:6D:E9:4B
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       23A75023BEC93F20C31C125FAF1689DE548811D4
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138392e302f32342d3234203d3e20323632373431.roa
Signing time:             Tue 09 Jan 2024 21:00:02 +0000
ROA not before:           Tue 09 Jan 2024 20:55:02 +0000
ROA not after:            Tue 07 Jan 2025 21:00:02 +0000
asID:                     262741
IP address blocks:        186.208.189.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a7:50:23:be:c9:3f:20:c3:1c:12:5f:af:16:89:de:54:88:11:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Jan  9 20:55:02 2024 GMT
            Not After : Jan  7 21:00:02 2025 GMT
        Subject: CN=9EA2CD8F56F7C2EE73AFC13E34D9ABDEFC6DE94B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e1:97:9e:6d:1f:47:5c:c9:76:79:08:d7:f0:
                    1e:16:c6:d0:9b:45:0d:97:dd:79:1e:c5:8e:95:f9:
                    f7:6a:29:78:84:54:71:4f:48:cc:a4:e8:50:2d:76:
                    da:7e:bf:ff:4f:5e:d2:32:c2:e1:4b:1a:56:e7:36:
                    57:3f:8b:ad:a2:8d:e9:4e:fd:a5:81:6e:51:08:1d:
                    10:67:76:ce:69:01:d1:00:fe:71:4b:17:84:bf:88:
                    d0:61:6e:8a:99:70:7d:cd:1a:60:1b:9b:30:f9:d1:
                    7c:ed:88:4d:6d:4d:92:5c:89:c0:81:d7:92:45:58:
                    42:6c:38:2d:f5:96:e2:25:5f:1f:a3:a9:c9:bb:80:
                    6a:37:73:e6:a5:6b:7f:b5:3e:25:af:c7:81:eb:de:
                    19:f3:16:59:e0:89:65:44:d5:b3:79:8c:1b:b2:1a:
                    19:1f:ca:ea:82:f7:e9:37:6b:a0:1c:f2:81:92:89:
                    b5:69:b1:d7:6c:68:79:89:46:9b:c6:a3:b7:52:ac:
                    c0:bf:65:e2:32:96:94:30:a9:a0:03:e3:31:1f:db:
                    06:ca:ad:35:c8:ed:25:fc:81:dd:61:66:61:5b:ca:
                    ae:72:8c:6b:e0:f6:94:67:29:df:57:ab:9e:b4:ba:
                    ef:f4:fb:c2:92:36:5e:d8:e4:3e:eb:87:22:25:ec:
                    cf:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A2:CD:8F:56:F7:C2:EE:73:AF:C1:3E:34:D9:AB:DE:FC:6D:E9:4B
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138392e302f32342d3234203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:51:1d:da:b2:78:96:5e:fd:be:e6:24:0b:99:82:3e:86:6b:
         dc:13:90:51:c6:fa:64:2e:8b:9d:55:57:99:4c:68:7e:a7:c0:
         f6:cc:ad:a5:00:cd:4b:24:9e:95:f8:ec:d6:da:53:84:31:1d:
         94:70:43:2e:59:b5:8f:cd:2d:ad:e8:5b:2f:26:c5:c8:09:de:
         28:0c:33:fb:4b:8d:f3:0d:85:03:c2:fb:20:45:b4:53:88:4d:
         e0:67:0b:8d:9c:e6:bf:25:46:23:8c:32:78:b5:58:1d:d0:bf:
         86:14:52:82:59:14:1f:79:5e:b4:47:55:c1:eb:15:97:5b:ec:
         04:d6:05:c1:b3:e3:67:0d:ad:18:03:42:82:60:02:10:34:7c:
         d7:4b:da:ab:ad:3c:26:43:78:90:48:1e:c7:d4:cb:63:5e:37:
         cc:e3:c7:49:0e:d7:88:7c:cd:f2:cf:12:2b:b3:f1:35:8c:a4:
         61:a6:11:b9:51:a2:cc:30:04:5f:2c:99:c8:94:d1:7b:88:0e:
         e2:d5:f4:76:f2:88:3e:38:8b:cf:f4:4f:4c:88:f7:8d:97:06:
         bd:fd:23:ac:a5:8f:03:b7:c7:29:70:f0:93:a2:20:f4:3a:a7:
         93:a8:31:6d:e6:95:9f:51:01:6b:20:38:fe:c6:3f:45:08:a1:
         5c:10:e0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:43 2025 by rpki-client