Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138382e302f32332d3233203d3e20323632373431.roa
File:                     3138362e3230382e3138382e302f32332d3233203d3e20323632373431.roa (raw, json)
Hash identifier:          0yzDSwhkFaNvSBHBuFF1Ha3hETdd4YQq16w+XYQE29M=
Subject key identifier:   B0:CD:7F:AF:D2:6B:E8:56:56:10:DD:93:2E:4A:1F:35:C1:F2:F4:1D
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       4B1BBDF01956B3A5299ECAA03AA5B8073FDDE4BA
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138382e302f32332d3233203d3e20323632373431.roa
Signing time:             Tue 09 Jan 2024 21:00:03 +0000
ROA not before:           Tue 09 Jan 2024 20:55:03 +0000
ROA not after:            Tue 07 Jan 2025 21:00:03 +0000
asID:                     262741
IP address blocks:        186.208.188.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:1b:bd:f0:19:56:b3:a5:29:9e:ca:a0:3a:a5:b8:07:3f:dd:e4:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Jan  9 20:55:03 2024 GMT
            Not After : Jan  7 21:00:03 2025 GMT
        Subject: CN=B0CD7FAFD26BE8565610DD932E4A1F35C1F2F41D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:db:f9:eb:b9:5a:3e:56:1a:24:8c:30:26:c5:
                    90:97:91:17:b1:99:04:c1:1e:e5:cb:a0:d1:94:ef:
                    8d:08:e0:c7:43:77:ec:aa:c6:30:e5:29:2a:26:91:
                    57:c7:4c:db:3b:2c:29:12:58:f5:a5:32:82:cd:32:
                    88:27:36:f9:98:63:ab:9e:80:7f:db:30:ca:1e:3b:
                    94:a2:8e:d6:e7:aa:a5:fc:bc:7b:6c:f3:e7:f3:d5:
                    5f:03:5a:3c:86:cb:8e:1b:b9:55:29:e3:c5:b3:b5:
                    2a:15:1b:d0:b1:dd:1f:e8:44:89:55:82:db:51:7c:
                    95:d0:58:7f:ad:2f:ec:97:af:fb:f7:eb:19:f7:41:
                    07:f1:3c:9f:1b:1d:e1:a5:87:f3:44:54:ef:42:a7:
                    35:c6:43:9c:e6:19:bb:8d:4c:83:33:48:50:84:e3:
                    57:ae:de:47:65:ba:0f:8c:2c:5d:91:e5:b5:ac:bc:
                    f2:2f:35:80:df:7e:3b:0e:79:81:c6:61:09:6a:f5:
                    36:d8:06:3e:e3:7a:4c:07:1c:87:72:3d:0b:e4:7e:
                    c7:63:57:13:f9:69:6c:94:58:96:8d:f3:32:ad:55:
                    d4:26:de:aa:f0:62:a9:b8:c9:56:df:4b:1e:89:04:
                    d6:36:36:46:a2:35:c0:2a:c7:ac:2a:bc:b7:d7:fe:
                    17:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CD:7F:AF:D2:6B:E8:56:56:10:DD:93:2E:4A:1F:35:C1:F2:F4:1D
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138382e302f32332d3233203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:a3:92:fc:d0:ee:da:54:53:56:62:00:92:9b:30:f7:62:2e:
         a2:61:44:9d:95:73:cf:07:3c:20:43:54:bb:1a:39:a8:de:25:
         10:0b:88:75:65:c8:1c:51:28:d2:0c:38:aa:3c:2d:5f:56:d8:
         02:7c:30:98:00:8a:7f:8d:67:b5:4e:fb:fa:4d:52:ea:4b:83:
         ff:5e:d4:d4:8a:ae:94:2a:af:a3:32:db:40:d0:64:76:76:f0:
         d2:84:78:6a:72:ff:2b:6d:02:f8:eb:3d:f0:91:b6:61:cc:83:
         66:1d:f8:0e:e6:8f:03:18:9d:78:e2:5a:ab:bb:c3:42:11:dc:
         32:8b:49:81:fa:df:25:19:c1:3a:e8:5c:10:9e:fe:f3:1d:77:
         86:28:82:10:48:76:a2:70:32:49:e1:9c:de:94:99:6c:8d:34:
         27:c3:97:38:52:21:9a:63:98:6a:a2:2b:6e:23:d1:a4:47:7d:
         1d:ef:c2:7c:1d:a2:5d:d3:00:43:ce:68:c0:7a:7f:52:81:65:
         4c:ff:d5:9b:ee:ca:a5:50:93:aa:7e:9a:72:c9:ca:27:0d:84:
         69:dd:a5:c3:74:cf:24:bc:10:c1:e2:35:01:bd:1c:7b:9e:3a:
         25:2d:d7:34:1d:dc:b3:96:7c:c7:d0:03:8b:ff:dc:55:b0:91:
         96:c5:1a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org