Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3139312e302f32342d3234203d3e20323632373431.roa
File:                     3138362e3230382e3139312e302f32342d3234203d3e20323632373431.roa (raw, json)
Hash identifier:          XUAS+gloWC0st+AUT5WjxWOWteeioinXsPv8zakXSOg=
Subject key identifier:   CE:B2:32:D7:54:C2:56:06:3E:38:37:DA:76:71:F4:91:13:6C:F8:8A
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       1598689BE5AC5815F13D7C591FD47FB6258C80F8
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3139312e302f32342d3234203d3e20323632373431.roa
Signing time:             Tue 09 Jan 2024 21:00:04 +0000
ROA not before:           Tue 09 Jan 2024 20:55:04 +0000
ROA not after:            Tue 07 Jan 2025 21:00:04 +0000
asID:                     262741
IP address blocks:        186.208.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:98:68:9b:e5:ac:58:15:f1:3d:7c:59:1f:d4:7f:b6:25:8c:80:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Jan  9 20:55:04 2024 GMT
            Not After : Jan  7 21:00:04 2025 GMT
        Subject: CN=CEB232D754C256063E3837DA7671F491136CF88A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d5:6c:e8:84:4f:9b:c8:da:df:62:18:af:3f:
                    63:b1:a1:4f:0d:61:7f:56:2d:e2:35:aa:59:12:a8:
                    18:7c:81:68:aa:8b:17:1c:3c:20:52:ab:9d:8c:94:
                    02:89:b8:c4:82:36:b6:bc:d8:c8:e8:94:66:9a:6f:
                    19:55:c3:ea:db:59:fe:00:44:71:64:60:f2:ae:91:
                    83:df:95:b7:00:b6:d6:63:69:79:58:48:1c:27:d1:
                    a2:a0:78:12:88:2a:8a:9e:66:94:10:2a:2e:f0:c9:
                    d0:9f:0d:1c:42:d4:68:cb:c5:a2:82:14:7b:73:73:
                    f1:5e:3d:1d:21:d4:d4:30:51:94:12:e5:24:fb:11:
                    4f:9c:0f:14:f0:43:7b:56:f9:1e:26:31:b1:71:49:
                    89:f2:56:e6:e1:a5:b4:4d:b1:31:98:b2:5a:29:ff:
                    04:08:62:3d:67:e0:3f:d8:9b:6c:b3:04:e9:e3:65:
                    c7:c0:3f:74:44:f3:02:b2:0f:c5:61:ed:e6:9a:51:
                    3f:43:81:86:47:58:af:a8:b3:ee:cc:0d:af:a0:92:
                    b6:cd:ac:b6:cb:ff:bf:19:56:ce:2a:db:e0:df:f8:
                    5a:9c:08:ee:f8:ac:ec:bc:5f:b9:dd:e0:76:aa:9d:
                    0c:f8:8a:41:15:dc:de:01:39:69:3a:17:7b:7a:4e:
                    45:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B2:32:D7:54:C2:56:06:3E:38:37:DA:76:71:F4:91:13:6C:F8:8A
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3139312e302f32342d3234203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:94:06:18:f1:75:2b:a8:28:45:a6:e5:12:91:c7:df:71:66:
         1a:06:95:e5:6a:c4:98:52:df:71:8a:f4:b4:fc:ae:e1:42:66:
         2f:22:91:ca:61:06:d2:98:2f:5d:ea:0a:d7:19:4d:fb:59:c2:
         b4:ce:ed:2b:d9:ba:50:72:98:17:7f:65:4a:ec:7a:0b:08:85:
         a3:fd:77:a3:13:83:5e:f7:cd:7f:b6:cd:dd:69:d0:23:26:4d:
         79:13:c9:d4:7a:3e:65:a1:31:f6:5e:70:17:7f:28:e8:b5:70:
         48:c2:32:66:80:f7:e4:a3:f1:39:bd:67:55:8c:1f:2f:bc:2e:
         03:9c:3f:b8:99:cf:c0:4c:26:e0:cc:39:6a:67:2d:d1:da:08:
         e2:d7:22:31:02:34:e1:00:f5:a7:a5:e7:eb:ed:07:d0:8a:2c:
         2f:df:c3:64:e3:16:3e:21:16:62:4f:60:d2:1c:aa:be:dc:5b:
         8e:1e:29:e0:fa:10:64:59:95:e1:f7:54:b0:9f:a7:64:50:d9:
         24:fb:01:2d:b9:6c:71:3d:6c:c7:b3:06:2c:9b:aa:49:c6:2e:
         4b:17:4e:38:d0:c4:b4:19:ad:5a:67:89:d1:fa:0f:49:e5:23:
         d1:f6:21:c4:f7:d8:cd:68:72:31:57:93:91:c4:75:99:20:fa:
         e7:bb:9d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org