Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3138302e302f32332d3233203d3e20323632353332.roa
File:                     3138362e3234392e3138302e302f32332d3233203d3e20323632353332.roa (raw, json)
Hash identifier:          QohHDG1BOUvhQWBkOucWaXekROVb3a4tkG2Tjq1u6fE=
Subject key identifier:   59:6E:49:C0:4C:2B:E0:2F:FC:51:2D:DD:8E:06:9E:BC:99:77:F2:BD
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       183AB973878DD99E6E2BF6D246360759DB2D4DE6
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3138302e302f32332d3233203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:13:10 +0000
ROA not before:           Wed 28 Feb 2024 14:08:10 +0000
ROA not after:            Wed 26 Feb 2025 14:13:10 +0000
asID:                     262532
IP address blocks:        186.249.180.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:3a:b9:73:87:8d:d9:9e:6e:2b:f6:d2:46:36:07:59:db:2d:4d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:08:10 2024 GMT
            Not After : Feb 26 14:13:10 2025 GMT
        Subject: CN=596E49C04C2BE02FFC512DDD8E069EBC9977F2BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7a:00:57:5d:a4:77:a0:a1:72:61:43:12:84:
                    6b:c8:66:d8:51:50:52:fb:67:28:c9:3c:46:41:83:
                    2c:dc:45:57:92:22:0e:78:31:bb:69:b4:3a:2a:07:
                    e3:e0:57:e4:d6:5d:e0:5b:fc:ec:c4:18:c4:95:7b:
                    2a:b1:a8:1e:ef:85:e2:c7:47:62:0e:41:5c:01:4b:
                    cf:da:29:cc:43:d4:0f:e9:84:fe:d9:23:15:e7:d1:
                    04:82:eb:fb:48:46:40:0d:b1:b2:98:8c:34:15:46:
                    6f:60:72:66:d9:0f:33:6c:b0:ec:45:28:53:b1:4a:
                    0d:d6:78:65:dd:44:66:07:60:39:e9:21:e4:23:06:
                    02:17:bc:35:96:61:a0:04:97:1d:9a:48:97:df:e6:
                    67:6b:71:ab:3a:c7:57:ef:ae:57:e2:51:84:08:e1:
                    ca:66:51:ae:a5:f7:f8:fc:03:7e:e3:27:05:d3:d0:
                    ad:a5:7b:4b:82:72:35:11:ec:94:48:34:e0:98:be:
                    d5:bd:1a:eb:ac:64:81:f9:0c:75:d5:0b:b9:56:3f:
                    36:76:a2:3f:61:76:ab:cb:2a:35:28:c1:8d:e7:ea:
                    04:9e:94:6b:77:68:27:f7:a9:9c:bb:01:24:c1:dc:
                    a1:ce:96:98:de:a0:73:a4:c1:de:df:69:50:cb:aa:
                    89:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6E:49:C0:4C:2B:E0:2F:FC:51:2D:DD:8E:06:9E:BC:99:77:F2:BD
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3138362e3234392e3138302e302f32332d3233203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:e7:5e:68:5d:fd:a2:d3:50:cb:74:7f:03:a8:e7:a3:4b:4a:
         2b:a4:47:36:ea:b6:84:5a:01:e3:b7:e3:0d:bc:80:98:a5:5c:
         92:b9:ec:25:91:a2:e9:38:06:c0:22:ec:02:e5:63:65:25:ac:
         e0:45:ae:ef:b0:ad:3f:1a:1c:94:0e:af:9e:2c:af:e7:ef:e7:
         f7:62:d2:47:3d:57:c4:84:d1:9a:59:b4:84:ca:05:86:ab:9c:
         0d:55:71:89:23:69:81:40:d2:62:bd:15:f7:8c:24:cd:fb:4d:
         e0:2d:ac:88:5e:77:d6:c4:3d:ec:29:8b:42:7d:c9:cd:30:c5:
         87:50:b2:f9:eb:91:7c:13:de:84:6b:5f:46:d3:b3:f8:ec:2a:
         c0:0a:d4:bf:1e:8f:7e:a4:4d:ce:f0:27:66:2c:99:4b:33:e3:
         b9:f0:0b:4b:71:47:ba:12:bf:6d:72:d7:a3:dc:b7:5c:53:8c:
         cb:51:6a:29:f7:53:86:56:fc:78:6e:89:2b:61:be:04:b2:40:
         4d:81:28:62:95:9f:cd:0b:f2:f6:27:49:7a:52:eb:00:a2:50:
         d8:1c:f4:e2:38:de:84:e1:e4:1a:0e:34:61:8e:5a:ec:78:5d:
         6a:38:ca:1b:90:5a:0c:51:8c:51:b6:b0:52:d1:d7:87:f9:9c:
         3f:8b:91:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:54:44 2025 by rpki-client