Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137362e302f32302d3230203d3e20323632373431.roa
File:                     3138362e3230382e3137362e302f32302d3230203d3e20323632373431.roa (raw, json)
Hash identifier:          gF6Yg+eI4mdWqP45G+e4ik+MW2n3/KjOFWHIiWfnMCE=
Subject key identifier:   6E:36:21:3C:10:E9:65:FC:B7:01:AA:16:61:3E:5C:88:16:3D:D9:70
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       5C1D4E3BAE11738F0918E1484390C52966568BCE
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137362e302f32302d3230203d3e20323632373431.roa
Signing time:             Tue 09 Jan 2024 21:00:03 +0000
ROA not before:           Tue 09 Jan 2024 20:55:03 +0000
ROA not after:            Tue 07 Jan 2025 21:00:03 +0000
asID:                     262741
IP address blocks:        186.208.176.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:1d:4e:3b:ae:11:73:8f:09:18:e1:48:43:90:c5:29:66:56:8b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Jan  9 20:55:03 2024 GMT
            Not After : Jan  7 21:00:03 2025 GMT
        Subject: CN=6E36213C10E965FCB701AA16613E5C88163DD970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b4:4e:29:9b:b8:05:45:bf:81:a1:44:fb:4e:
                    13:3e:0d:f2:ab:b4:18:2b:0a:13:4e:a6:eb:bc:b0:
                    4e:d3:36:e5:dd:17:f5:62:65:a2:c8:f0:34:4a:dc:
                    b4:af:55:80:50:97:3f:0b:db:ea:87:14:76:74:db:
                    f3:3e:77:e6:b9:57:42:83:0c:61:1a:15:b0:c1:fe:
                    a1:0b:8c:a3:42:24:e6:96:69:e9:4a:b9:e5:41:8a:
                    b9:90:d0:ea:08:d0:c9:a2:8a:06:d9:7f:10:93:41:
                    aa:f7:c4:af:67:98:73:90:5e:9d:50:7a:0b:6f:9e:
                    a4:86:fd:4f:81:b8:6d:9c:ed:0b:c0:95:0b:18:a7:
                    ed:0e:9c:77:3f:4a:12:b3:b3:c9:5b:b7:d7:56:88:
                    4a:b8:b0:d8:ed:e7:f7:1e:1e:b2:24:2b:23:c4:73:
                    ab:16:45:2f:8e:f6:d3:f3:20:43:c3:7f:33:d4:29:
                    9b:90:91:8e:a4:dd:fc:38:fa:7f:39:24:93:4d:05:
                    f0:f6:95:59:77:40:67:c0:b1:46:2d:38:18:7e:18:
                    8e:c8:7d:fe:82:76:62:81:fc:9c:93:c9:3a:4f:17:
                    77:1b:89:bd:10:26:b1:98:48:81:13:39:e3:d4:16:
                    c3:ee:9f:7c:2b:69:2e:40:63:62:d3:f1:de:aa:22:
                    b5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:36:21:3C:10:E9:65:FC:B7:01:AA:16:61:3E:5C:88:16:3D:D9:70
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137362e302f32302d3230203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8c:8b:79:df:57:eb:e8:f5:0a:03:eb:9e:17:0e:6f:54:86:ee:
         cc:9f:b9:4e:54:2f:a8:75:c2:d8:62:0f:36:bc:a2:a0:d3:28:
         c3:ab:07:4f:6e:59:7c:1d:a4:3b:05:ba:d3:dc:ac:6c:75:50:
         fa:2c:d9:18:2c:03:91:33:5f:6d:35:5f:6e:7e:01:73:be:04:
         3c:3a:f8:9b:d6:1c:ca:6e:4d:6a:9f:28:c6:9c:87:01:6e:e7:
         4e:5a:4c:3d:1f:ca:b0:d2:86:08:d5:fe:24:48:df:5f:ee:c9:
         5e:79:24:8b:fa:18:a0:91:c1:d2:5b:d9:d9:56:e2:1e:5a:61:
         9b:cd:3c:66:fb:ac:0c:23:cd:e3:a8:a6:cc:d8:da:88:8d:d7:
         7e:7f:f3:0c:92:11:3a:a1:55:1e:c3:c0:2e:c4:f9:65:8d:65:
         89:d7:52:1e:30:13:15:54:f5:e2:b5:da:49:7c:3e:f3:c2:14:
         8b:1d:4f:7a:ec:7a:77:d6:cb:be:91:47:e8:f1:7b:7d:1e:98:
         b8:e5:54:53:3a:18:18:d5:2e:b6:c9:b2:c8:50:93:55:d0:c7:
         a6:a4:8f:fe:25:aa:66:6f:e4:af:96:94:ce:c5:8b:c5:ff:ef:
         0a:35:50:68:8e:16:ab:08:6a:0f:09:ea:eb:ca:13:5b:f8:65:
         2f:de:1e:e5
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXB1OO64Rc48JGOFIQ5DFKWZWi84wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4RUY5QkZERDIyMERCMjcyNTRDODgxQ0E3QUZFNDgw
M0MxMDg0ODAeFw0yNDAxMDkyMDU1MDNaFw0yNTAxMDcyMTAwMDNaMDMxMTAvBgNV
BAMTKDZFMzYyMTNDMTBFOTY1RkNCNzAxQUExNjYxM0U1Qzg4MTYzREQ5NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4tE4pm7gFRb+BoUT7ThM+DfKr
tBgrChNOpuu8sE7TNuXdF/ViZaLI8DRK3LSvVYBQlz8L2+qHFHZ02/M+d+a5V0KD
DGEaFbDB/qELjKNCJOaWaelKueVBirmQ0OoI0MmiigbZfxCTQar3xK9nmHOQXp1Q
egtvnqSG/U+BuG2c7QvAlQsYp+0OnHc/ShKzs8lbt9dWiEq4sNjt5/ceHrIkKyPE
c6sWRS+O9tPzIEPDfzPUKZuQkY6k3fw4+n85JJNNBfD2lVl3QGfAsUYtOBh+GI7I
ff6CdmKB/JyTyTpPF3cbib0QJrGYSIETOePUFsPun3wraS5AY2LT8d6qIrVVAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUbjYhPBDpZfy3AaoWYT5ciBY92XAwHwYDVR0j
BBgwFoAUBI75v90iDbJyVMiBynr+SAPBCEgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ21uSFJHWnpIQUJoeWh6eTVYUFhzNnF6VjVIeHhhMUFvRzN4cG5laUJj
VzEvMC8wNDhFRjlCRkREMjIwREIyNzI1NEM4ODFDQTdBRkU0ODAzQzEwODQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA0OEVGOUJGREQyMjBEQjI3
MjU0Qzg4MUNBN0FGRTQ4MDNDMTA4NDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NtbkhSR1p6SEFCaHloenk1WFBYczZxelY1SHh4YTFBb0czeHBuZWlCY1cxLzAv
MzEzODM2MmUzMjMwMzgyZTMxMzczNjJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMy
MzYzMjM3MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBLrQsDANBgkqhkiG9w0BAQsFAAOCAQEAjIt5
31fr6PUKA+ueFw5vVIbuzJ+5TlQvqHXC2GIPNryioNMow6sHT25ZfB2kOwW609ys
bHVQ+izZGCwDkTNfbTVfbn4Bc74EPDr4m9Ycym5Nap8oxpyHAW7nTlpMPR/KsNKG
CNX+JEjfX+7JXnkki/oYoJHB0lvZ2VbiHlphm808ZvusDCPN46imzNjaiI3Xfn/z
DJIROqFVHsPALsT5ZY1liddSHjATFVT14rXaSXw+88IUix1Peux6d9bLvpFH6PF7
fR6YuOVUUzoYGNUutsmyyFCTVdDHpqSP/iWqZm/kr5aUzsWLxf/vCjVQaI4Wqwhq
Dwnq68oTW/hlL94e5Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org