Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137382e302f32342d3234203d3e20323632373431.roa
File:                     3138362e3230382e3137382e302f32342d3234203d3e20323632373431.roa (raw, json)
Hash identifier:          94Ba0Z8J3dHRWJKXqX+XIgU+G1/T1Lt7AumHBG3oupA=
Subject key identifier:   DC:38:D9:20:96:73:E3:5A:05:93:E4:6B:E5:BC:B6:AC:8E:18:D4:86
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       5385A387A9A8BF22D240BB3649DF039B9CAA5016
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137382e302f32342d3234203d3e20323632373431.roa
Signing time:             Tue 09 Jan 2024 21:00:04 +0000
ROA not before:           Tue 09 Jan 2024 20:55:04 +0000
ROA not after:            Tue 07 Jan 2025 21:00:04 +0000
asID:                     262741
IP address blocks:        186.208.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:85:a3:87:a9:a8:bf:22:d2:40:bb:36:49:df:03:9b:9c:aa:50:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Jan  9 20:55:04 2024 GMT
            Not After : Jan  7 21:00:04 2025 GMT
        Subject: CN=DC38D9209673E35A0593E46BE5BCB6AC8E18D486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b3:01:b0:87:96:e3:cd:9e:11:6d:60:9c:29:
                    18:c7:16:bf:a3:4b:9d:1a:b0:77:94:d8:f9:7c:ae:
                    3a:b0:7c:fd:15:8a:c6:30:5d:77:20:7f:1e:0d:05:
                    b2:2a:f8:14:b5:37:e8:b6:68:78:77:3e:d4:45:e8:
                    11:91:77:ce:89:b3:0d:34:a1:46:09:c2:c1:09:2b:
                    f6:12:d0:6b:44:95:e0:ce:b0:ab:dc:ca:64:a2:40:
                    a3:05:78:68:aa:b6:17:c9:e5:d7:31:66:e9:4d:31:
                    ef:01:81:69:24:04:a0:84:a5:56:cd:fd:4d:ad:b2:
                    b8:ad:c6:bf:54:29:01:af:31:94:64:75:62:a7:94:
                    08:c5:7d:75:12:8d:45:0c:52:33:82:6a:eb:07:6e:
                    4e:9f:6e:d2:8b:1d:7c:1a:ce:46:20:69:ed:df:07:
                    05:1a:e7:c0:be:af:34:88:5b:7f:a7:83:a6:f6:54:
                    1f:61:47:94:c8:03:ba:cb:2a:0b:8f:68:e2:74:53:
                    da:52:9a:a1:94:ca:f2:a6:9c:3f:ce:c8:21:9f:da:
                    8a:30:33:21:2b:82:9e:b1:af:94:e6:17:55:9d:51:
                    0a:06:a8:ec:e9:eb:8f:c0:a4:df:33:47:9e:3d:ea:
                    10:f8:93:7c:29:21:8f:81:8d:ba:7d:88:89:22:ea:
                    c0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:38:D9:20:96:73:E3:5A:05:93:E4:6B:E5:BC:B6:AC:8E:18:D4:86
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137382e302f32342d3234203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:a0:72:b7:d4:b6:32:7e:91:79:18:a7:92:94:67:c9:4d:0a:
         8f:f8:b8:0d:cb:1e:3f:f2:23:9d:26:2a:63:cd:0f:76:4e:8b:
         4a:34:29:8d:82:23:d8:2d:ca:7f:c3:2d:bd:b2:76:41:b1:3d:
         35:93:73:b6:b2:a7:ec:50:6f:12:28:77:65:bc:e1:dd:e4:f3:
         6e:08:00:4c:79:dc:5a:55:40:60:84:72:09:79:8d:77:6b:6c:
         ed:2d:7c:c7:8a:30:f9:ad:7e:79:00:4d:47:63:a6:a6:c5:b6:
         96:03:34:42:3b:20:11:dd:8c:88:d3:b6:12:7c:6b:b5:99:b1:
         a8:82:72:81:58:44:dd:96:75:a2:30:5b:1d:d0:61:5c:28:7d:
         6c:09:19:bf:24:f7:8d:e7:2b:f7:21:11:69:4e:df:9a:b3:67:
         10:97:2c:37:a3:85:d6:10:75:17:eb:c8:d1:5e:17:97:c7:93:
         73:ef:0c:25:f8:2b:72:35:f1:09:15:a8:71:4d:37:2a:7a:b3:
         0e:26:50:28:ce:45:f8:3d:e3:62:c1:ef:0b:57:20:58:e4:f7:
         88:ec:5c:43:46:79:e3:f0:fc:34:7a:d8:d0:af:cc:db:cc:78:
         c2:df:bc:4a:aa:34:fc:d8:18:33:23:f9:39:03:38:7b:86:63:
         7d:62:ea:c9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUU4Wjh6movyLSQLs2Sd8Dm5yqUBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4RUY5QkZERDIyMERCMjcyNTRDODgxQ0E3QUZFNDgw
M0MxMDg0ODAeFw0yNDAxMDkyMDU1MDRaFw0yNTAxMDcyMTAwMDRaMDMxMTAvBgNV
BAMTKERDMzhEOTIwOTY3M0UzNUEwNTkzRTQ2QkU1QkNCNkFDOEUxOEQ0ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIswGwh5bjzZ4RbWCcKRjHFr+j
S50asHeU2Pl8rjqwfP0VisYwXXcgfx4NBbIq+BS1N+i2aHh3PtRF6BGRd86Jsw00
oUYJwsEJK/YS0GtEleDOsKvcymSiQKMFeGiqthfJ5dcxZulNMe8BgWkkBKCEpVbN
/U2tsritxr9UKQGvMZRkdWKnlAjFfXUSjUUMUjOCausHbk6fbtKLHXwazkYgae3f
BwUa58C+rzSIW3+ng6b2VB9hR5TIA7rLKguPaOJ0U9pSmqGUyvKmnD/OyCGf2oow
MyErgp6xr5TmF1WdUQoGqOzp64/ApN8zR5496hD4k3wpIY+Bjbp9iIki6sCFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU3DjZIJZz41oFk+Rr5by2rI4Y1IYwHwYDVR0j
BBgwFoAUBI75v90iDbJyVMiBynr+SAPBCEgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ21uSFJHWnpIQUJoeWh6eTVYUFhzNnF6VjVIeHhhMUFvRzN4cG5laUJj
VzEvMC8wNDhFRjlCRkREMjIwREIyNzI1NEM4ODFDQTdBRkU0ODAzQzEwODQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA0OEVGOUJGREQyMjBEQjI3
MjU0Qzg4MUNBN0FGRTQ4MDNDMTA4NDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NtbkhSR1p6SEFCaHloenk1WFBYczZxelY1SHh4YTFBb0czeHBuZWlCY1cxLzAv
MzEzODM2MmUzMjMwMzgyZTMxMzczODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrQsjANBgkqhkiG9w0BAQsFAAOCAQEAg6By
t9S2Mn6ReRinkpRnyU0Kj/i4DcseP/IjnSYqY80Pdk6LSjQpjYIj2C3Kf8MtvbJ2
QbE9NZNztrKn7FBvEih3Zbzh3eTzbggATHncWlVAYIRyCXmNd2ts7S18x4ow+a1+
eQBNR2OmpsW2lgM0QjsgEd2MiNO2EnxrtZmxqIJygVhE3ZZ1ojBbHdBhXCh9bAkZ
vyT3jecr9yERaU7fmrNnEJcsN6OF1hB1F+vI0V4Xl8eTc+8MJfgrcjXxCRWocU03
KnqzDiZQKM5F+D3jYsHvC1cgWOT3iOxcQ0Z54/D8NHrY0K/M28x4wt+8Sqo0/NgY
MyP5OQM4e4ZjfWLqyQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org