Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3138302e302f32322d3232203d3e20323632353332.roa
File:                     3138362e3234392e3138302e302f32322d3232203d3e20323632353332.roa (raw, json)
Hash identifier:          jochpKCCNmNVyEEpDTOIW5iIG2dSlSOrxpAqlJz2hqA=
Subject key identifier:   41:E0:23:F4:3C:92:C2:D4:E2:05:FD:75:9B:54:3C:A5:46:69:36:41
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       1C864010850D527E968C580C3EE7DC5D4D6DE168
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3138302e302f32322d3232203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:12:26 +0000
ROA not before:           Wed 28 Feb 2024 14:07:26 +0000
ROA not after:            Wed 26 Feb 2025 14:12:26 +0000
asID:                     262532
IP address blocks:        186.249.180.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:86:40:10:85:0d:52:7e:96:8c:58:0c:3e:e7:dc:5d:4d:6d:e1:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:07:26 2024 GMT
            Not After : Feb 26 14:12:26 2025 GMT
        Subject: CN=41E023F43C92C2D4E205FD759B543CA546693641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a7:c3:65:4b:ee:86:57:7e:a4:48:2c:b8:b9:
                    bb:6b:91:f4:ee:b0:1a:39:cc:c4:19:c0:07:06:83:
                    1c:6b:37:1c:bd:99:c1:8b:32:7c:01:10:aa:dd:06:
                    d0:92:31:a4:43:fe:95:23:47:29:ae:9c:8a:5b:4e:
                    b9:4c:e6:ab:48:17:08:bb:a3:20:20:e0:36:2e:ef:
                    5e:6a:e5:65:e8:a5:80:2e:5f:d0:e1:ac:9f:e8:3f:
                    13:d2:ee:05:23:26:c9:33:b4:96:09:dc:13:45:c0:
                    ff:c4:e3:27:f7:0e:4c:65:70:92:60:f5:7e:40:77:
                    04:1b:ed:d1:1c:94:10:e4:60:3c:84:c0:ae:80:03:
                    78:64:d6:46:ff:39:66:00:ad:78:48:9e:22:fa:ea:
                    b6:7c:83:a1:d4:db:63:f7:08:fc:e6:d2:fa:e6:97:
                    d6:43:3d:6b:3d:2b:fb:c1:b3:d3:28:ad:2f:c5:c3:
                    46:91:66:df:df:0c:d8:2b:c6:3c:1e:37:7f:df:64:
                    6b:21:c8:70:b4:1b:84:1f:bc:c6:57:85:a2:e0:22:
                    62:e2:8c:c5:c7:98:21:3e:95:0b:e1:bb:d9:5a:80:
                    b8:f8:c9:49:2d:da:0d:28:b6:c6:6b:bd:42:0b:1d:
                    13:1e:0f:3a:e1:9c:eb:69:43:6d:83:66:d9:2f:67:
                    0a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E0:23:F4:3C:92:C2:D4:E2:05:FD:75:9B:54:3C:A5:46:69:36:41
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3138302e302f32322d3232203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:ed:3f:93:06:38:a8:a3:d2:0d:d0:eb:ab:66:37:12:bd:10:
         97:f2:39:f0:4d:ee:63:bb:ec:80:94:e3:97:aa:d9:a8:44:a2:
         22:a2:72:ea:cb:16:4e:f4:64:05:e5:d5:32:50:e8:6e:95:bb:
         07:70:44:a5:79:22:cd:91:0c:08:48:17:92:61:9b:a8:0a:35:
         4e:00:4d:0b:05:b0:ac:b2:d5:49:f0:0b:c2:e4:15:80:50:c8:
         49:05:32:4e:ba:a3:40:51:6c:98:fd:83:e1:43:66:e4:ae:54:
         f1:3b:17:7f:77:77:36:e0:c8:71:1c:91:d2:03:06:0d:bd:f2:
         a5:1d:7c:32:c3:c5:dd:17:a8:3d:5e:af:6e:42:e6:9d:2b:58:
         91:4d:6c:82:e6:fb:4a:cc:b8:ff:bc:1f:30:7f:19:12:e7:d2:
         67:90:91:ad:81:f2:cd:0e:ec:a1:5d:58:52:80:3c:b5:e4:6a:
         54:c3:16:7a:6b:3b:a0:a7:ce:ca:e2:cb:b1:1f:5e:d1:70:30:
         af:20:d7:f9:e4:e0:06:af:62:ab:11:29:3c:28:12:23:03:45:
         68:2c:d1:b7:a1:f8:41:2f:89:ad:3a:02:bf:2b:4f:c3:0c:24:
         fb:86:12:7f:42:42:68:5a:b0:e8:bb:32:a9:1d:eb:75:2e:2c:
         db:e9:15:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:24:37 2025 by rpki-client