Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138382e302f32342d3234203d3e20323632373431.roa
File:                     3138362e3230382e3138382e302f32342d3234203d3e20323632373431.roa (raw, json)
Hash identifier:          lNOTsPuTH0zAF5DfHmr40YAgUS+jACwScV6pFb2VEtg=
Subject key identifier:   F0:F8:CA:93:4B:D6:EA:3F:65:5A:C1:97:E3:4E:E5:72:F2:85:3E:30
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       72A04E30CD3CAD58BC0A97CDEB98BDBD1335C9AE
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138382e302f32342d3234203d3e20323632373431.roa
Signing time:             Tue 09 Jan 2024 20:00:00 +0000
ROA not before:           Tue 09 Jan 2024 19:55:00 +0000
ROA not after:            Tue 07 Jan 2025 20:00:00 +0000
asID:                     262741
IP address blocks:        186.208.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a0:4e:30:cd:3c:ad:58:bc:0a:97:cd:eb:98:bd:bd:13:35:c9:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Jan  9 19:55:00 2024 GMT
            Not After : Jan  7 20:00:00 2025 GMT
        Subject: CN=F0F8CA934BD6EA3F655AC197E34EE572F2853E30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6b:95:44:76:0d:6b:e5:d9:1b:83:c5:99:c0:
                    c0:8d:0d:8a:09:81:b2:88:6f:33:67:33:39:1a:b0:
                    b9:d4:59:0b:44:4e:8b:bd:69:fa:62:98:d0:9f:02:
                    bc:fa:b7:49:51:09:35:e7:36:a3:b5:08:24:69:35:
                    8e:4d:27:9c:55:3c:bd:0c:b8:ae:d9:36:4c:07:83:
                    53:af:16:c8:26:10:43:47:c1:6a:c8:74:94:05:bf:
                    af:55:e9:63:81:94:c4:a8:14:5a:0c:3e:bb:86:20:
                    a2:b2:98:9b:b1:78:b2:e1:50:ee:69:51:14:82:79:
                    63:6d:8a:4e:26:72:9d:05:d9:7d:43:2f:1a:e4:4f:
                    2a:d2:f7:b2:02:a5:62:a8:5f:bc:15:04:9b:3b:48:
                    cf:6b:7b:7d:bb:e6:3e:ad:9a:6b:31:da:3e:75:f1:
                    04:1f:95:19:c2:32:40:42:cc:12:3f:0e:37:19:64:
                    da:55:2a:31:73:65:80:1e:59:f8:73:c9:84:a0:b9:
                    1f:11:31:4f:3a:0b:b8:7f:c0:43:a8:8e:20:cc:09:
                    59:ef:32:85:32:72:af:e5:5c:85:08:81:47:a3:4b:
                    e1:1d:fb:3d:60:67:be:e3:10:3e:be:3e:fa:5a:fd:
                    e7:29:0f:22:66:fb:38:17:9c:ea:6a:b9:ad:76:1b:
                    9b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F8:CA:93:4B:D6:EA:3F:65:5A:C1:97:E3:4E:E5:72:F2:85:3E:30
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138382e302f32342d3234203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:a0:f7:6a:a1:77:0c:83:81:5c:10:4f:11:da:1e:9a:ff:0f:
         69:a7:4d:45:d0:66:66:16:ed:00:cd:9f:e8:85:0b:10:c5:09:
         a6:26:37:67:87:bb:21:b6:de:78:00:47:dc:da:0d:64:d2:d4:
         3d:59:5a:7c:b7:90:a6:db:82:c0:af:d1:6a:25:09:f9:07:ff:
         45:a3:5a:f3:42:12:da:54:99:2a:b5:a8:e7:fb:9f:fb:d2:45:
         93:00:c5:3e:df:ee:75:54:22:f9:c6:af:12:5c:ad:08:b5:18:
         de:1e:9b:e8:bc:5d:58:99:f6:f7:0b:98:2d:59:f5:5b:04:15:
         b0:72:2a:9d:30:07:70:a4:45:a9:5c:dd:f6:46:4f:ae:78:f6:
         c4:da:2e:39:31:75:49:25:be:bb:28:81:09:68:f8:98:4d:a4:
         7a:bd:c9:05:59:d7:16:eb:f2:c7:da:fc:a9:4e:92:8d:50:0e:
         fa:a3:b5:f8:e6:f4:82:1b:e9:bd:4c:b8:28:55:2a:0b:cb:ac:
         95:64:de:08:84:d7:ae:c1:fd:96:45:83:5a:12:b3:59:f2:fd:
         55:d8:a3:9d:c5:22:83:38:1e:7c:49:a1:18:a4:4a:bb:fc:12:
         8c:f0:b1:b4:86:b5:c6:27:30:1d:18:8f:c5:de:fa:b9:8f:b0:
         ac:55:19:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org