Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137362e302f32332d3233203d3e20323632373431.roa
File:                     3138362e3230382e3137362e302f32332d3233203d3e20323632373431.roa (raw, json)
Hash identifier:          97SonFgF7dXV0Uli6ll+0uu59JjTKMw98nd2G3yMMWk=
Subject key identifier:   7A:1F:DA:81:67:28:2A:1C:E5:3A:F6:6A:7D:3F:F0:88:8A:30:33:60
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       2A727750B6DE835FC4AC3BC42523FDFA458A0513
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137362e302f32332d3233203d3e20323632373431.roa
Signing time:             Tue 09 Jan 2024 20:00:00 +0000
ROA not before:           Tue 09 Jan 2024 19:55:00 +0000
ROA not after:            Tue 07 Jan 2025 20:00:00 +0000
asID:                     262741
IP address blocks:        186.208.176.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:72:77:50:b6:de:83:5f:c4:ac:3b:c4:25:23:fd:fa:45:8a:05:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Jan  9 19:55:00 2024 GMT
            Not After : Jan  7 20:00:00 2025 GMT
        Subject: CN=7A1FDA8167282A1CE53AF66A7D3FF0888A303360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:26:9c:0d:26:8d:14:38:f6:bd:63:91:b5:c7:
                    8f:24:4a:42:6e:de:15:f3:9b:29:64:bc:3b:d2:46:
                    b2:7e:3c:16:ba:0d:60:80:e2:d1:6d:80:49:b5:09:
                    f6:d1:69:a4:ca:ca:9f:b5:12:9c:6a:bb:43:a3:e9:
                    c9:f4:3f:b0:2c:fc:7e:5f:67:54:d6:ef:fc:c4:03:
                    cc:fb:6b:5c:81:57:07:69:5f:4f:97:76:48:bc:2b:
                    39:55:92:00:f8:22:53:c6:36:8d:e7:ff:f1:52:e3:
                    9b:55:69:ef:09:1a:0e:34:42:05:3c:c8:75:d6:17:
                    52:74:fe:09:1c:5f:47:3e:f7:89:40:37:59:d8:20:
                    ce:e2:84:01:9b:c0:b4:60:bf:c7:1e:57:42:b4:cd:
                    a2:77:40:e5:c6:db:18:17:a6:48:e0:cf:5e:fc:43:
                    fe:d8:c4:d7:9e:b0:27:63:bf:7e:76:7c:2f:05:0c:
                    72:78:29:de:79:0f:5a:a6:99:9c:2c:78:51:03:84:
                    90:96:d5:38:ef:5d:ed:28:d4:83:87:57:40:6e:64:
                    1d:2a:9a:37:e2:65:16:be:86:bc:d1:1d:3c:50:e7:
                    ad:c6:35:3d:0c:02:fe:49:ba:85:4d:4d:82:ce:59:
                    1a:b9:bf:b7:b2:25:dd:27:ea:ef:66:e6:76:39:28:
                    3c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1F:DA:81:67:28:2A:1C:E5:3A:F6:6A:7D:3F:F0:88:8A:30:33:60
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137362e302f32332d3233203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:25:26:6f:08:e5:20:aa:1f:f1:44:26:09:1d:c5:b0:7c:15:
         18:ef:a4:e5:2c:f5:c1:7f:a0:5e:92:68:28:dc:f1:3e:66:22:
         6d:fa:c9:8b:33:ba:3e:cb:42:1c:49:aa:bd:40:75:ac:2d:34:
         c2:92:dd:81:6b:de:35:6b:40:eb:6b:b6:4a:c4:cb:19:29:6c:
         19:88:da:27:e7:7e:ea:cb:32:14:3e:73:f6:88:9e:e0:b0:0f:
         e5:93:0d:5d:61:60:55:ac:d3:77:bd:ed:82:7c:a4:14:19:15:
         81:4c:12:fa:58:e0:aa:a9:d0:a4:33:25:d4:56:1b:37:68:a0:
         df:09:9c:02:31:a9:87:c4:e0:72:ba:bc:79:e6:ca:92:a6:58:
         ce:88:63:07:78:78:f8:e9:48:37:5f:2a:85:ab:4b:7a:88:58:
         c9:04:25:0b:c1:b3:29:81:54:01:1f:e7:18:47:20:51:2f:08:
         4e:f0:b4:7f:e6:b1:f7:7a:3e:5e:ac:be:28:86:5a:4f:39:ca:
         6c:17:c9:3a:98:86:1f:fa:85:35:33:1b:f3:8d:b2:d9:e8:93:
         52:bf:3f:5b:2d:21:d9:92:7d:1c:74:d1:32:49:99:3b:93:79:
         8a:0f:0f:20:2b:46:06:9e:12:f6:57:24:de:a6:a2:81:ec:a7:
         6b:48:d5:c8
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKnJ3ULbeg1/ErDvEJSP9+kWKBRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4RUY5QkZERDIyMERCMjcyNTRDODgxQ0E3QUZFNDgw
M0MxMDg0ODAeFw0yNDAxMDkxOTU1MDBaFw0yNTAxMDcyMDAwMDBaMDMxMTAvBgNV
BAMTKDdBMUZEQTgxNjcyODJBMUNFNTNBRjY2QTdEM0ZGMDg4OEEzMDMzNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0JpwNJo0UOPa9Y5G1x48kSkJu
3hXzmylkvDvSRrJ+PBa6DWCA4tFtgEm1CfbRaaTKyp+1Epxqu0Oj6cn0P7As/H5f
Z1TW7/zEA8z7a1yBVwdpX0+Xdki8KzlVkgD4IlPGNo3n//FS45tVae8JGg40QgU8
yHXWF1J0/gkcX0c+94lAN1nYIM7ihAGbwLRgv8ceV0K0zaJ3QOXG2xgXpkjgz178
Q/7YxNeesCdjv352fC8FDHJ4Kd55D1qmmZwseFEDhJCW1TjvXe0o1IOHV0BuZB0q
mjfiZRa+hrzRHTxQ563GNT0MAv5JuoVNTYLOWRq5v7eyJd0n6u9m5nY5KDzdAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUeh/agWcoKhzlOvZqfT/wiIowM2AwHwYDVR0j
BBgwFoAUBI75v90iDbJyVMiBynr+SAPBCEgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ21uSFJHWnpIQUJoeWh6eTVYUFhzNnF6VjVIeHhhMUFvRzN4cG5laUJj
VzEvMC8wNDhFRjlCRkREMjIwREIyNzI1NEM4ODFDQTdBRkU0ODAzQzEwODQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA0OEVGOUJGREQyMjBEQjI3
MjU0Qzg4MUNBN0FGRTQ4MDNDMTA4NDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NtbkhSR1p6SEFCaHloenk1WFBYczZxelY1SHh4YTFBb0czeHBuZWlCY1cxLzAv
MzEzODM2MmUzMjMwMzgyZTMxMzczNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM3MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbrQsDANBgkqhkiG9w0BAQsFAAOCAQEAGCUm
bwjlIKof8UQmCR3FsHwVGO+k5Sz1wX+gXpJoKNzxPmYibfrJizO6PstCHEmqvUB1
rC00wpLdgWveNWtA62u2SsTLGSlsGYjaJ+d+6ssyFD5z9oie4LAP5ZMNXWFgVazT
d73tgnykFBkVgUwS+ljgqqnQpDMl1FYbN2ig3wmcAjGph8Tgcrq8eebKkqZYzohj
B3h4+OlIN18qhatLeohYyQQlC8GzKYFUAR/nGEcgUS8ITvC0f+ax93o+Xqy+KIZa
TznKbBfJOpiGH/qFNTMb842y2eiTUr8/Wy0h2ZJ9HHTRMkmZO5N5ig8PICtGBp4S
9lck3qaigeyna0jVyA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org