Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138302e302f32342d3234203d3e20323632373431.roa
File:                     3138362e3230382e3138302e302f32342d3234203d3e20323632373431.roa (raw, json)
Hash identifier:          yVreiH+MO+c37vWvbYlrn8zIc6O7Q9xc1+SygyFEURA=
Subject key identifier:   40:25:A7:1D:A9:DB:79:EB:89:8F:69:8F:1D:F0:75:54:41:CF:B1:49
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       4999B92634319314907823269354CE9193DA081D
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138302e302f32342d3234203d3e20323632373431.roa
Signing time:             Tue 09 Jan 2024 21:00:05 +0000
ROA not before:           Tue 09 Jan 2024 20:55:05 +0000
ROA not after:            Tue 07 Jan 2025 21:00:05 +0000
asID:                     262741
IP address blocks:        186.208.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:99:b9:26:34:31:93:14:90:78:23:26:93:54:ce:91:93:da:08:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Jan  9 20:55:05 2024 GMT
            Not After : Jan  7 21:00:05 2025 GMT
        Subject: CN=4025A71DA9DB79EB898F698F1DF0755441CFB149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:be:37:a2:22:78:ea:16:1a:19:1a:f7:fc:b6:
                    4f:12:6a:6a:a5:63:15:67:54:e0:36:78:97:28:ff:
                    b9:29:db:93:51:47:3a:11:98:d9:e2:ef:82:30:d6:
                    43:07:d8:cf:b5:ec:c1:fa:6b:e7:e6:ee:5a:fc:c4:
                    e9:25:f6:c4:3e:1a:3c:8a:ee:23:09:2a:b4:41:7e:
                    26:7f:22:74:a9:0c:53:4b:71:90:64:d0:59:44:e4:
                    a5:b5:79:84:70:4c:e9:6f:66:16:4e:00:a9:89:93:
                    49:84:3d:8e:5a:cc:9b:7a:d9:fc:6e:8b:38:b4:ac:
                    6f:c6:ef:65:b6:89:c4:d3:a7:52:95:31:13:5d:67:
                    e1:92:3f:25:57:9c:c4:b5:58:97:40:54:9c:12:b5:
                    6d:58:d9:db:32:47:d4:ca:ef:03:d4:fc:40:00:73:
                    8d:5e:99:f9:d2:9f:cb:3e:38:f8:54:0d:7c:59:c6:
                    04:f4:64:99:83:06:24:43:b7:c7:cc:d7:ed:93:6d:
                    0a:ed:e5:3e:31:9c:6a:25:63:6d:50:16:42:67:e4:
                    34:c2:5e:94:7b:ba:28:fb:2c:21:11:67:40:e4:a9:
                    83:7c:83:e0:ec:51:1f:cc:5a:38:11:96:b2:fc:42:
                    2e:2e:28:e4:6e:b4:72:f4:9f:7a:0f:9b:82:2e:8f:
                    2e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:25:A7:1D:A9:DB:79:EB:89:8F:69:8F:1D:F0:75:54:41:CF:B1:49
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138302e302f32342d3234203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:cd:f9:85:9d:a2:c9:97:46:ab:30:e5:d7:45:1b:9d:76:db:
         19:31:76:98:c5:e8:c0:6a:fc:ff:72:87:cb:1f:42:e0:4b:49:
         1e:2e:08:2b:94:09:14:6a:07:92:a7:a9:cf:56:76:20:e1:3d:
         1f:a1:e3:e4:58:69:49:29:af:ab:2f:1d:9d:24:02:01:28:61:
         bc:6d:f5:2f:21:ef:3b:5d:9e:8a:93:71:2a:7c:9a:ef:c5:3c:
         96:a9:ae:9e:92:ee:7e:2a:ca:7e:73:bd:c7:73:b7:38:52:d9:
         ed:3f:5e:91:69:65:2b:51:7a:d5:a4:94:b4:ef:ce:48:d3:ff:
         0e:d3:fd:2c:81:1c:ae:23:76:90:73:37:9b:ba:87:85:1c:55:
         52:e2:38:d3:03:6e:e8:a2:bb:8a:66:66:7e:cd:4d:84:27:6c:
         a1:34:1e:c1:9b:60:aa:21:36:f9:5c:5d:1d:d7:a7:34:4d:ab:
         07:14:06:91:2f:47:b7:a9:96:aa:8a:a2:10:1f:df:37:f4:f9:
         81:12:33:d5:a6:da:df:c3:88:af:fb:ea:86:b0:4b:54:df:2f:
         93:b6:81:27:25:ab:fa:c3:11:ca:29:3b:86:c6:3f:50:c3:3c:
         b7:bd:47:83:5d:17:6b:8a:83:06:c3:b8:8f:d9:6c:36:e5:f3:
         13:f2:73:b6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSZm5JjQxkxSQeCMmk1TOkZPaCB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4RUY5QkZERDIyMERCMjcyNTRDODgxQ0E3QUZFNDgw
M0MxMDg0ODAeFw0yNDAxMDkyMDU1MDVaFw0yNTAxMDcyMTAwMDVaMDMxMTAvBgNV
BAMTKDQwMjVBNzFEQTlEQjc5RUI4OThGNjk4RjFERjA3NTU0NDFDRkIxNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPvjeiInjqFhoZGvf8tk8Samql
YxVnVOA2eJco/7kp25NRRzoRmNni74Iw1kMH2M+17MH6a+fm7lr8xOkl9sQ+GjyK
7iMJKrRBfiZ/InSpDFNLcZBk0FlE5KW1eYRwTOlvZhZOAKmJk0mEPY5azJt62fxu
izi0rG/G72W2icTTp1KVMRNdZ+GSPyVXnMS1WJdAVJwStW1Y2dsyR9TK7wPU/EAA
c41emfnSn8s+OPhUDXxZxgT0ZJmDBiRDt8fM1+2TbQrt5T4xnGolY21QFkJn5DTC
XpR7uij7LCERZ0DkqYN8g+DsUR/MWjgRlrL8Qi4uKORutHL0n3oPm4Iujy4XAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUQCWnHanbeeuJj2mPHfB1VEHPsUkwHwYDVR0j
BBgwFoAUBI75v90iDbJyVMiBynr+SAPBCEgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ21uSFJHWnpIQUJoeWh6eTVYUFhzNnF6VjVIeHhhMUFvRzN4cG5laUJj
VzEvMC8wNDhFRjlCRkREMjIwREIyNzI1NEM4ODFDQTdBRkU0ODAzQzEwODQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA0OEVGOUJGREQyMjBEQjI3
MjU0Qzg4MUNBN0FGRTQ4MDNDMTA4NDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NtbkhSR1p6SEFCaHloenk1WFBYczZxelY1SHh4YTFBb0czeHBuZWlCY1cxLzAv
MzEzODM2MmUzMjMwMzgyZTMxMzgzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrQtDANBgkqhkiG9w0BAQsFAAOCAQEAo835
hZ2iyZdGqzDl10UbnXbbGTF2mMXowGr8/3KHyx9C4EtJHi4IK5QJFGoHkqepz1Z2
IOE9H6Hj5FhpSSmvqy8dnSQCAShhvG31LyHvO12eipNxKnya78U8lqmunpLufirK
fnO9x3O3OFLZ7T9ekWllK1F61aSUtO/OSNP/DtP9LIEcriN2kHM3m7qHhRxVUuI4
0wNu6KK7imZmfs1NhCdsoTQewZtgqiE2+VxdHdenNE2rBxQGkS9Ht6mWqoqiEB/f
N/T5gRIz1aba38OIr/vqhrBLVN8vk7aBJyWr+sMRyik7hsY/UMM8t71Hg10Xa4qD
BsO4j9lsNuXzE/Jztg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org