Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137362e302f32312d3231203d3e20323632373431.roa
File:                     3138362e3230382e3137362e302f32312d3231203d3e20323632373431.roa (raw, json)
Hash identifier:          Z8Vv7mqr5HRXPTOCsKiUa8ILDeOdKu4x3Njz1hotCQc=
Subject key identifier:   5D:1B:E9:C6:DE:D9:1D:1D:78:97:19:CE:83:46:8D:78:0A:3A:AD:BA
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       691833D6869F81217A7C9DD405573F0D9490B436
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137362e302f32312d3231203d3e20323632373431.roa
Signing time:             Tue 09 Jan 2024 21:00:03 +0000
ROA not before:           Tue 09 Jan 2024 20:55:03 +0000
ROA not after:            Tue 07 Jan 2025 21:00:03 +0000
asID:                     262741
IP address blocks:        186.208.176.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:18:33:d6:86:9f:81:21:7a:7c:9d:d4:05:57:3f:0d:94:90:b4:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Jan  9 20:55:03 2024 GMT
            Not After : Jan  7 21:00:03 2025 GMT
        Subject: CN=5D1BE9C6DED91D1D789719CE83468D780A3AADBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2f:98:d5:c2:e1:37:24:d4:3b:d5:7c:7a:67:
                    f6:b6:a7:32:61:fd:1a:b4:64:81:45:6b:11:e8:e6:
                    c3:a5:ef:2a:3b:ea:49:3f:3d:d2:55:f1:53:6b:78:
                    ee:00:6a:0e:6a:33:36:a4:b0:93:be:50:9a:2e:68:
                    d7:26:25:39:ee:3b:e7:6c:aa:ae:5e:97:78:f7:63:
                    cb:f0:4b:db:da:d5:b4:ea:4b:ad:1a:cd:e9:b0:c7:
                    ad:54:8d:d1:02:ce:7d:ec:b6:f1:5c:f8:05:7a:58:
                    48:4a:3e:b0:f2:8c:52:6f:d6:a2:f4:eb:27:df:4c:
                    b5:61:53:a9:d9:12:41:45:fc:e0:2d:7e:2a:c0:55:
                    2e:d6:b5:c3:84:9d:2e:ba:81:2f:05:86:e0:a9:86:
                    75:1b:f9:a8:cf:d6:3a:cf:a8:ca:c8:de:1c:be:ba:
                    64:bb:43:66:68:97:ba:3a:46:a1:ac:b3:31:b5:34:
                    e5:39:e2:10:e9:8f:eb:0e:7b:e0:32:d4:7f:61:25:
                    eb:1f:6d:4d:92:16:01:e9:6f:78:9b:06:1b:ca:5d:
                    fb:3b:82:12:25:b4:90:94:32:de:a6:b7:47:71:76:
                    ae:99:ef:6c:6a:8e:16:8c:ab:9d:da:16:43:01:75:
                    2c:a3:f4:0b:5d:1e:ef:8f:a5:07:a5:d0:81:3a:08:
                    53:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1B:E9:C6:DE:D9:1D:1D:78:97:19:CE:83:46:8D:78:0A:3A:AD:BA
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137362e302f32312d3231203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:ae:22:a2:a5:98:c2:a5:ec:58:9e:c4:f4:50:8f:66:1d:c1:
         89:ee:5e:d3:0b:c7:74:b3:74:d0:18:22:5a:fd:63:19:6f:81:
         81:28:d5:e6:1d:e1:0b:e2:6a:c3:a5:bd:ee:66:c6:6e:c1:6e:
         c2:7b:76:4b:56:5c:9c:95:8a:01:5d:e6:18:fe:19:c7:e9:87:
         7b:81:6d:e0:a3:00:de:19:84:45:4c:76:f8:cc:3c:b0:ec:03:
         28:90:21:ce:bf:2b:d6:c1:23:79:ea:34:40:c8:04:88:17:37:
         53:69:66:6f:c5:36:d9:f3:5c:d0:89:c0:34:18:36:1e:5a:67:
         86:74:37:f6:9e:4e:ce:b9:5b:81:41:d7:d2:e6:fa:e4:0c:47:
         0c:12:4d:88:c1:87:ad:24:90:b7:ca:22:86:53:5a:f6:3b:de:
         04:0b:bb:9f:13:63:11:4f:b4:65:49:09:de:52:d6:d0:a1:67:
         8b:6e:65:4e:39:b3:a2:0e:bd:3c:aa:2c:62:e3:f9:42:95:7f:
         e7:bd:82:71:a6:ff:03:1d:8f:f7:c5:e9:bb:43:df:20:28:10:
         b4:20:c9:04:67:39:f9:d2:e0:55:25:de:09:f3:e6:45:99:48:
         d7:f1:32:3c:9e:c2:2b:e6:1f:9c:ea:47:f8:92:de:8e:5e:16:
         ae:3d:d4:29
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUaRgz1oafgSF6fJ3UBVc/DZSQtDYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4RUY5QkZERDIyMERCMjcyNTRDODgxQ0E3QUZFNDgw
M0MxMDg0ODAeFw0yNDAxMDkyMDU1MDNaFw0yNTAxMDcyMTAwMDNaMDMxMTAvBgNV
BAMTKDVEMUJFOUM2REVEOTFEMUQ3ODk3MTlDRTgzNDY4RDc4MEEzQUFEQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSL5jVwuE3JNQ71Xx6Z/a2pzJh
/Rq0ZIFFaxHo5sOl7yo76kk/PdJV8VNreO4Aag5qMzaksJO+UJouaNcmJTnuO+ds
qq5el3j3Y8vwS9va1bTqS60azemwx61UjdECzn3stvFc+AV6WEhKPrDyjFJv1qL0
6yffTLVhU6nZEkFF/OAtfirAVS7WtcOEnS66gS8FhuCphnUb+ajP1jrPqMrI3hy+
umS7Q2Zol7o6RqGsszG1NOU54hDpj+sOe+Ay1H9hJesfbU2SFgHpb3ibBhvKXfs7
ghIltJCUMt6mt0dxdq6Z72xqjhaMq53aFkMBdSyj9AtdHu+PpQel0IE6CFMnAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUXRvpxt7ZHR14lxnOg0aNeAo6rbowHwYDVR0j
BBgwFoAUBI75v90iDbJyVMiBynr+SAPBCEgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ21uSFJHWnpIQUJoeWh6eTVYUFhzNnF6VjVIeHhhMUFvRzN4cG5laUJj
VzEvMC8wNDhFRjlCRkREMjIwREIyNzI1NEM4ODFDQTdBRkU0ODAzQzEwODQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA0OEVGOUJGREQyMjBEQjI3
MjU0Qzg4MUNBN0FGRTQ4MDNDMTA4NDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NtbkhSR1p6SEFCaHloenk1WFBYczZxelY1SHh4YTFBb0czeHBuZWlCY1cxLzAv
MzEzODM2MmUzMjMwMzgyZTMxMzczNjJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMy
MzYzMjM3MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7rQsDANBgkqhkiG9w0BAQsFAAOCAQEAda4i
oqWYwqXsWJ7E9FCPZh3Bie5e0wvHdLN00BgiWv1jGW+BgSjV5h3hC+Jqw6W97mbG
bsFuwnt2S1ZcnJWKAV3mGP4Zx+mHe4Ft4KMA3hmERUx2+Mw8sOwDKJAhzr8r1sEj
eeo0QMgEiBc3U2lmb8U22fNc0InANBg2HlpnhnQ39p5OzrlbgUHX0ub65AxHDBJN
iMGHrSSQt8oihlNa9jveBAu7nxNjEU+0ZUkJ3lLW0KFni25lTjmzog69PKosYuP5
QpV/572Ccab/Ax2P98Xpu0PfICgQtCDJBGc5+dLgVSXeCfPmRZlI1/EyPJ7CK+Yf
nOpH+JLejl4Wrj3UKQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org