Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138342e302f32322d3232203d3e20323632373431.roa
File:                     3138362e3230382e3138342e302f32322d3232203d3e20323632373431.roa (raw, json)
Hash identifier:          +7rfyExhvD8Ekvx8IPCI7AoIXIPMoRYbqd/2Uf3NFpA=
Subject key identifier:   88:EC:9F:48:9F:97:B1:FE:81:61:2A:52:BF:AF:54:5A:B6:CD:18:73
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       6B99FDEFB3D4715F797409B36E41B2BECFF84110
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138342e302f32322d3232203d3e20323632373431.roa
Signing time:             Tue 09 Jan 2024 21:00:02 +0000
ROA not before:           Tue 09 Jan 2024 20:55:02 +0000
ROA not after:            Tue 07 Jan 2025 21:00:02 +0000
asID:                     262741
IP address blocks:        186.208.184.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:99:fd:ef:b3:d4:71:5f:79:74:09:b3:6e:41:b2:be:cf:f8:41:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Jan  9 20:55:02 2024 GMT
            Not After : Jan  7 21:00:02 2025 GMT
        Subject: CN=88EC9F489F97B1FE81612A52BFAF545AB6CD1873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:d7:b9:05:0a:96:65:0f:8f:1c:44:a9:81:be:
                    03:d0:4c:10:0b:d4:b6:48:38:24:dd:0a:cc:34:a9:
                    6f:8b:59:9f:6e:b5:b4:b9:7e:f3:fe:17:c3:37:c4:
                    aa:86:ce:02:f5:d8:cd:eb:74:76:e2:83:f3:a7:24:
                    f8:3d:0e:10:d0:36:a0:96:e4:5c:23:12:9f:94:3e:
                    1c:eb:17:96:6c:32:89:bf:20:56:52:be:db:52:28:
                    84:89:85:5c:2f:6f:14:ff:e2:31:f0:53:2b:67:ad:
                    ae:50:ae:82:f9:da:f4:e1:f7:b9:4b:e7:04:cc:64:
                    b5:28:a4:f2:b0:c6:42:f2:c5:55:8f:6e:69:e1:1e:
                    64:2d:14:91:5f:68:65:90:df:e7:7a:dd:7e:54:ba:
                    c1:28:e7:f9:72:b2:7f:31:c2:98:3a:90:16:76:6a:
                    c7:1b:e9:55:bc:79:a5:65:d2:50:ab:25:83:a6:67:
                    22:4c:67:41:97:72:be:99:aa:6a:b8:bb:ef:42:73:
                    27:b1:5f:c8:bd:8b:db:0f:2b:81:37:e3:47:dc:93:
                    1e:ba:8c:ac:8c:11:f2:13:51:4f:ed:65:a1:8e:75:
                    db:c6:71:5f:74:fc:2d:25:bd:2a:93:73:fa:7a:de:
                    3a:ef:81:ef:3d:14:8a:25:c8:fa:0c:76:15:49:93:
                    ff:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EC:9F:48:9F:97:B1:FE:81:61:2A:52:BF:AF:54:5A:B6:CD:18:73
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138342e302f32322d3232203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:8e:f9:32:58:ee:e0:84:27:0c:fc:eb:82:4a:89:64:39:68:
         6e:71:8f:6d:96:af:e6:79:61:78:d3:a3:25:3c:ec:e5:e3:f4:
         bf:18:b1:1d:b3:80:2c:0f:18:0c:ce:7f:b0:1d:9f:6d:e2:34:
         4c:d7:93:3d:56:3a:4c:b9:d6:92:6e:31:9b:41:1a:b6:99:09:
         28:f1:e3:f6:67:47:9b:73:3d:2b:62:99:35:72:cc:f3:f3:3e:
         af:67:cf:fd:d0:bc:ba:55:bf:e9:98:9f:b0:61:6e:2c:8f:b8:
         49:4c:64:ba:68:37:a1:b5:21:59:1f:ae:3c:e3:29:e2:5b:3c:
         25:d8:f8:60:9d:06:a5:36:34:5b:eb:b3:8e:a7:4f:cc:c9:a4:
         31:0c:d0:06:14:93:1c:dd:ca:c1:43:6e:bf:46:03:96:08:13:
         66:a6:45:97:e1:cf:a4:a1:ed:12:23:6b:04:98:e4:b5:28:16:
         ad:9a:f9:b3:e7:e2:92:8d:d3:cd:08:b4:c8:a1:a0:ac:cc:6d:
         71:53:6a:1a:e0:bf:13:52:87:10:5c:6a:10:3e:c7:fa:ae:3b:
         9e:99:68:d5:53:28:f8:0d:a1:64:ba:41:21:fd:7d:f6:e9:64:
         a5:b7:07:45:5e:36:ab:da:bb:9e:4d:1f:81:fd:e0:8a:77:c9:
         77:61:f6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org