Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138342e302f32342d3234203d3e20323632373431.roa
File:                     3138362e3230382e3138342e302f32342d3234203d3e20323632373431.roa (raw, json)
Hash identifier:          Q3e3nwfww6lQyBPaczW5LMzAnQotPT4phIilibuOMqQ=
Subject key identifier:   59:60:40:0A:7C:9E:03:BD:4F:48:42:3E:DC:C0:CA:35:35:F6:63:26
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       62B28CE2C7895078956C74D96954E7800EC2C0AF
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138342e302f32342d3234203d3e20323632373431.roa
Signing time:             Tue 09 Jan 2024 21:00:00 +0000
ROA not before:           Tue 09 Jan 2024 20:55:00 +0000
ROA not after:            Tue 07 Jan 2025 21:00:00 +0000
asID:                     262741
IP address blocks:        186.208.184.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b2:8c:e2:c7:89:50:78:95:6c:74:d9:69:54:e7:80:0e:c2:c0:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Jan  9 20:55:00 2024 GMT
            Not After : Jan  7 21:00:00 2025 GMT
        Subject: CN=5960400A7C9E03BD4F48423EDCC0CA3535F66326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:df:5a:56:8a:4b:e9:4d:54:6c:9d:77:95:a6:
                    8e:c9:db:58:07:11:3c:d1:bc:c0:0c:0d:1c:10:6b:
                    c4:25:96:73:ea:ce:0a:42:4e:56:d1:a9:ff:a0:ed:
                    ce:aa:00:03:fa:01:56:47:29:c2:13:e8:5c:d9:4a:
                    2b:b1:b5:d2:8d:57:ac:22:6e:18:6c:4c:11:cf:d2:
                    e2:f9:81:c8:9a:75:97:b9:51:ed:69:92:b6:6e:50:
                    5c:63:57:5d:08:04:5b:57:0c:ec:da:7c:f7:1c:0f:
                    7c:d5:b8:49:ff:6e:7f:51:c9:a3:37:1e:6a:73:13:
                    11:8a:db:51:43:42:8b:52:f0:df:79:e2:e9:c8:61:
                    31:11:fd:c1:e4:08:ae:95:66:dd:5a:17:5c:df:12:
                    98:f7:19:28:d7:42:56:53:e5:a9:60:37:2a:ff:72:
                    e6:5c:8a:b2:8b:88:e7:62:53:92:13:c7:f1:ee:a6:
                    4d:cf:4c:98:10:a8:86:18:32:27:b7:4c:f7:cf:68:
                    6f:4c:11:07:c4:87:c1:01:ac:cd:05:d8:20:8f:17:
                    10:b5:4b:9e:c5:4c:e3:0f:85:dd:8e:3e:f3:50:7f:
                    b1:30:51:9f:17:37:c0:b4:43:71:09:9f:95:c5:87:
                    73:34:01:74:33:73:1c:a7:47:74:3c:c8:01:21:eb:
                    37:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:60:40:0A:7C:9E:03:BD:4F:48:42:3E:DC:C0:CA:35:35:F6:63:26
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138342e302f32342d3234203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:ae:3a:94:4e:18:07:73:0d:c7:28:b8:98:55:00:29:bc:2d:
         a0:4f:4e:0f:fd:94:17:64:d5:f7:e3:40:6b:97:15:91:31:23:
         e4:a6:bf:9b:05:69:de:d1:34:49:e1:d2:5b:fc:95:84:c4:c8:
         23:97:e3:fe:3a:fe:df:9b:fc:b4:3b:9e:8f:20:e2:c6:39:6e:
         0e:c6:e9:ca:1e:49:70:31:84:a0:bb:47:59:35:9c:b5:b7:f6:
         7e:26:d8:27:46:0c:ab:5c:b1:4f:f4:43:50:05:aa:d9:b3:3c:
         74:40:c0:c5:f6:2d:d5:22:c2:18:3a:13:c9:93:d3:10:f5:c9:
         ea:ae:d0:31:4d:ee:db:69:52:52:07:f2:97:41:15:6e:c1:b6:
         91:0d:a7:cb:b3:f8:71:81:ac:e0:b5:49:b8:e5:64:a9:d8:3f:
         4e:4c:94:b6:4b:fb:66:f3:32:48:5d:91:b1:3e:4b:54:81:84:
         cb:21:29:f9:b0:eb:9f:ab:fe:b7:b5:e9:f1:e0:52:3f:1d:69:
         8c:c8:08:9c:e0:60:ef:d8:d7:75:d0:04:b2:c1:64:db:06:eb:
         71:4b:80:21:15:f1:78:f4:ae:fe:4a:cc:3e:59:92:67:08:b9:
         57:80:ec:68:68:ce:a0:f5:10:81:c0:b4:f8:88:d7:93:43:2d:
         93:71:44:cf
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUYrKM4seJUHiVbHTZaVTngA7CwK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4RUY5QkZERDIyMERCMjcyNTRDODgxQ0E3QUZFNDgw
M0MxMDg0ODAeFw0yNDAxMDkyMDU1MDBaFw0yNTAxMDcyMTAwMDBaMDMxMTAvBgNV
BAMTKDU5NjA0MDBBN0M5RTAzQkQ0RjQ4NDIzRURDQzBDQTM1MzVGNjYzMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD31pWikvpTVRsnXeVpo7J21gH
ETzRvMAMDRwQa8QllnPqzgpCTlbRqf+g7c6qAAP6AVZHKcIT6FzZSiuxtdKNV6wi
bhhsTBHP0uL5gciadZe5Ue1pkrZuUFxjV10IBFtXDOzafPccD3zVuEn/bn9RyaM3
HmpzExGK21FDQotS8N954unIYTER/cHkCK6VZt1aF1zfEpj3GSjXQlZT5algNyr/
cuZcirKLiOdiU5ITx/Hupk3PTJgQqIYYMie3TPfPaG9MEQfEh8EBrM0F2CCPFxC1
S57FTOMPhd2OPvNQf7EwUZ8XN8C0Q3EJn5XFh3M0AXQzcxynR3Q8yAEh6zcHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUWWBACnyeA71PSEI+3MDKNTX2YyYwHwYDVR0j
BBgwFoAUBI75v90iDbJyVMiBynr+SAPBCEgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ21uSFJHWnpIQUJoeWh6eTVYUFhzNnF6VjVIeHhhMUFvRzN4cG5laUJj
VzEvMC8wNDhFRjlCRkREMjIwREIyNzI1NEM4ODFDQTdBRkU0ODAzQzEwODQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA0OEVGOUJGREQyMjBEQjI3
MjU0Qzg4MUNBN0FGRTQ4MDNDMTA4NDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NtbkhSR1p6SEFCaHloenk1WFBYczZxelY1SHh4YTFBb0czeHBuZWlCY1cxLzAv
MzEzODM2MmUzMjMwMzgyZTMxMzgzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrQuDANBgkqhkiG9w0BAQsFAAOCAQEAGq46
lE4YB3MNxyi4mFUAKbwtoE9OD/2UF2TV9+NAa5cVkTEj5Ka/mwVp3tE0SeHSW/yV
hMTII5fj/jr+35v8tDuejyDixjluDsbpyh5JcDGEoLtHWTWctbf2fibYJ0YMq1yx
T/RDUAWq2bM8dEDAxfYt1SLCGDoTyZPTEPXJ6q7QMU3u22lSUgfyl0EVbsG2kQ2n
y7P4cYGs4LVJuOVkqdg/TkyUtkv7ZvMySF2RsT5LVIGEyyEp+bDrn6v+t7Xp8eBS
Px1pjMgInOBg79jXddAEssFk2wbrcUuAIRXxePSu/krMPlmSZwi5V4DsaGjOoPUQ
gcC0+IjXk0Mtk3FEzw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:06 2025 by rpki-client