Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138362e302f32332d3233203d3e20323632373431.roa
File:                     3138362e3230382e3138362e302f32332d3233203d3e20323632373431.roa (raw, json)
Hash identifier:          wwUqp/s0x6fFZP3rro8orHjNQGOXTzv5zRs7vtrvT5g=
Subject key identifier:   86:B5:84:74:29:80:4A:5A:FA:4B:F2:5D:C8:D7:6F:FB:D0:04:1A:A2
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       2F47428F2820E13B1B0990C269FCF0C786DAFDC4
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138362e302f32332d3233203d3e20323632373431.roa
Signing time:             Tue 09 Jan 2024 21:00:06 +0000
ROA not before:           Tue 09 Jan 2024 20:55:06 +0000
ROA not after:            Tue 07 Jan 2025 21:00:06 +0000
asID:                     262741
IP address blocks:        186.208.186.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:47:42:8f:28:20:e1:3b:1b:09:90:c2:69:fc:f0:c7:86:da:fd:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Jan  9 20:55:06 2024 GMT
            Not After : Jan  7 21:00:06 2025 GMT
        Subject: CN=86B5847429804A5AFA4BF25DC8D76FFBD0041AA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8d:ab:41:7e:c9:ee:ae:e5:92:61:10:65:66:
                    e3:e8:fc:f4:7d:d0:4b:18:90:6f:e2:9c:cc:79:20:
                    b1:a7:91:82:eb:b1:f3:e3:16:99:91:4f:90:34:5c:
                    8e:b2:17:a5:5c:34:a2:e4:c0:65:af:a2:4f:45:0b:
                    0e:9a:7f:40:74:f7:09:97:21:0e:68:5a:0e:53:8a:
                    44:7e:c2:e9:ea:3e:df:e1:98:14:9a:ff:a6:0f:af:
                    dd:2e:a7:70:d1:e7:42:34:d4:05:88:b8:94:61:9e:
                    f8:43:b9:db:c1:e3:d3:34:d2:ff:cd:db:88:e3:04:
                    cc:47:a4:f2:ba:9d:6e:46:2f:b8:e0:64:91:d4:f3:
                    79:76:27:dc:e9:40:28:cd:90:6a:26:fe:70:b9:c8:
                    fd:cf:5f:cc:dc:4d:8e:d3:ef:1b:76:36:9d:a9:67:
                    5d:75:e8:4e:d2:e0:02:56:e4:9f:29:31:2e:ec:46:
                    9e:16:9d:79:49:89:7c:5c:e4:27:22:fc:ca:41:5a:
                    92:de:92:85:1a:d6:97:97:d8:b6:d5:e1:1b:6f:70:
                    e9:b8:23:46:00:da:f8:85:b2:35:d3:d5:93:c1:16:
                    2a:57:b0:aa:ea:5f:f8:66:1c:ad:56:e7:98:0d:b6:
                    32:78:0d:c7:3e:f0:73:11:78:2e:58:e1:a2:04:54:
                    c2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B5:84:74:29:80:4A:5A:FA:4B:F2:5D:C8:D7:6F:FB:D0:04:1A:A2
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138362e302f32332d3233203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:d7:54:9f:96:1a:93:fd:c7:a3:45:18:c5:d8:65:09:dd:d5:
         b4:43:a4:8b:c2:8b:ab:56:0c:b9:b5:ed:ee:fa:e7:ec:0a:de:
         27:a6:52:2f:a0:c3:e0:95:69:f5:0e:fb:c6:0d:82:49:3f:7a:
         9a:70:84:e4:ac:92:6d:78:17:52:27:c4:64:86:f6:b0:9a:5f:
         74:30:fc:2f:b7:e0:df:86:2d:08:a2:60:51:9e:93:09:e6:fa:
         c8:10:c4:47:e7:e1:90:43:03:50:fe:32:ee:b6:79:32:78:ac:
         96:39:24:dc:a8:17:3f:26:8d:4f:4e:9e:97:16:48:c8:c7:0d:
         dd:81:0f:00:d7:9e:05:1d:93:d3:89:10:8f:90:03:b4:fd:64:
         3d:f7:55:5f:d7:72:64:f6:fd:10:7e:c7:0c:ca:e8:99:6b:4c:
         a8:e8:eb:89:7b:21:66:01:3a:a7:ac:a2:29:32:88:5b:e9:26:
         a1:60:c3:29:06:3d:89:aa:a7:2c:91:f6:44:a2:fb:40:83:1b:
         8e:5e:cb:47:6e:95:94:4c:3b:1e:59:d5:6a:b9:97:8d:e8:2e:
         b3:53:c6:ea:46:25:52:37:30:25:86:87:91:8c:53:6d:49:9a:
         f7:b6:d3:10:d2:fe:50:c7:06:ea:50:80:cc:38:60:d8:77:0b:
         79:27:ab:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org