Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e34382e302f32332d3233203d3e20323632373938.roa
File:                     3138362e3233362e34382e302f32332d3233203d3e20323632373938.roa (raw, json)
Hash identifier:          KU5bCxTpn2qmca017/i5oh6r6CrwipKSQeM3WM9YohA=
Subject key identifier:   A5:7D:10:C0:3B:09:8C:28:AA:D2:55:01:82:FB:3F:DF:A1:4F:4D:1F
Certificate issuer:       /CN=8BE12B31F7A73C05B53BE208097D713296FAC527
Certificate serial:       31B656EA7BFACE3AFFCD4A4CA722D1E37D2C97B9
Authority key identifier: 8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e34382e302f32332d3233203d3e20323632373938.roa
Signing time:             Tue 16 May 2023 12:26:55 +0000
ROA not before:           Tue 16 May 2023 12:21:55 +0000
ROA not after:            Tue 14 May 2024 12:26:55 +0000
asID:                     262798
IP address blocks:        186.236.48.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b6:56:ea:7b:fa:ce:3a:ff:cd:4a:4c:a7:22:d1:e3:7d:2c:97:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE12B31F7A73C05B53BE208097D713296FAC527
        Validity
            Not Before: May 16 12:21:55 2023 GMT
            Not After : May 14 12:26:55 2024 GMT
        Subject: CN=A57D10C03B098C28AAD2550182FB3FDFA14F4D1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:68:f9:c6:ea:07:01:1a:9d:ff:64:4f:81:26:
                    11:2c:67:4f:f7:07:bd:28:cb:6b:7b:59:1f:04:f9:
                    0c:b1:47:a9:15:39:5b:67:d1:bf:20:ad:83:8e:f5:
                    2a:b5:7d:7f:82:46:91:7c:53:7f:74:0e:c6:06:74:
                    b1:fd:e4:e1:59:00:e8:ae:5e:c9:94:4f:c8:5f:10:
                    bb:01:d7:59:e3:44:17:48:90:1d:8e:97:d5:5f:b2:
                    fc:6a:48:98:6f:26:2e:ca:c8:36:4d:18:de:da:a1:
                    1f:82:6a:33:c6:62:22:b9:61:c0:0d:5f:6a:ce:d1:
                    ab:ec:f2:c3:fe:1f:63:b0:8d:b5:45:b2:11:90:2b:
                    12:20:ec:b5:4a:42:16:4f:8a:b8:3d:ed:4e:d0:3a:
                    54:40:a4:3c:99:36:c5:be:8c:54:ab:5d:88:0b:b6:
                    36:bc:86:23:a9:1d:4b:50:df:a6:21:14:b5:06:f1:
                    1f:73:f8:aa:98:04:1b:09:b8:ac:b9:52:ae:ba:bd:
                    12:ae:34:97:3e:00:9f:e1:7f:a3:27:2c:6b:05:e3:
                    2c:3d:7f:10:ed:76:e4:07:c0:07:eb:9e:e2:91:77:
                    2b:3b:f9:83:29:ea:66:cc:15:66:9f:f9:9d:36:66:
                    15:27:6e:39:d5:58:54:d7:5f:c5:a5:4e:51:05:f0:
                    6c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7D:10:C0:3B:09:8C:28:AA:D2:55:01:82:FB:3F:DF:A1:4F:4D:1F
            X509v3 Authority Key Identifier:
                keyid:8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/8BE12B31F7A73C05B53BE208097D713296FAC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e34382e302f32332d3233203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:a3:05:a2:28:0e:b2:38:18:10:ab:b0:82:eb:b0:80:7f:b4:
         0c:0b:36:59:cf:7a:a8:be:44:e0:29:66:18:02:34:f5:95:34:
         03:1c:b4:69:1a:05:f2:74:14:b2:e1:b9:79:90:46:31:3c:41:
         45:54:3b:55:42:a9:5d:5f:d7:69:27:50:fd:a1:eb:67:76:43:
         13:00:cb:ac:a7:7e:66:5e:af:4c:20:1a:f2:0b:cf:88:38:98:
         b3:a2:ae:ae:e3:34:4d:96:d3:ee:be:b3:72:41:3e:f6:01:37:
         3b:4c:b4:05:30:e1:e8:76:9e:2d:ff:26:22:a9:6e:b6:5e:14:
         0d:8c:04:80:9d:63:75:c3:05:bd:30:56:4e:46:96:ec:e1:02:
         ff:9c:b0:5c:b5:78:7e:50:72:d6:fc:8e:45:81:e3:77:d0:e1:
         e8:0f:97:fa:fc:57:f6:d9:8e:1f:82:2b:63:07:cf:fe:9f:00:
         36:02:f0:3e:f4:d7:d7:79:57:bc:20:67:3a:fa:3b:66:9a:54:
         c9:7f:a9:19:0c:f6:b4:c6:ae:c0:65:16:5a:ae:b0:77:63:a5:
         6d:c2:57:fd:17:19:28:7c:30:75:de:93:97:7b:2b:fa:4c:39:
         30:d3:2f:be:43:d4:c1:e1:23:69:8a:fe:a2:bc:e9:87:05:b0:
         15:d0:ef:d1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMbZW6nv6zjr/zUpMpyLR430sl7kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJFMTJCMzFGN0E3M0MwNUI1M0JFMjA4MDk3RDcxMzI5
NkZBQzUyNzAeFw0yMzA1MTYxMjIxNTVaFw0yNDA1MTQxMjI2NTVaMDMxMTAvBgNV
BAMTKEE1N0QxMEMwM0IwOThDMjhBQUQyNTUwMTgyRkIzRkRGQTE0RjREMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/aPnG6gcBGp3/ZE+BJhEsZ0/3
B70oy2t7WR8E+QyxR6kVOVtn0b8grYOO9Sq1fX+CRpF8U390DsYGdLH95OFZAOiu
XsmUT8hfELsB11njRBdIkB2Ol9VfsvxqSJhvJi7KyDZNGN7aoR+CajPGYiK5YcAN
X2rO0avs8sP+H2OwjbVFshGQKxIg7LVKQhZPirg97U7QOlRApDyZNsW+jFSrXYgL
tja8hiOpHUtQ36YhFLUG8R9z+KqYBBsJuKy5Uq66vRKuNJc+AJ/hf6MnLGsF4yw9
fxDtduQHwAfrnuKRdys7+YMp6mbMFWaf+Z02ZhUnbjnVWFTXX8WlTlEF8GyxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUpX0QwDsJjCiq0lUBgvs/36FPTR8wHwYDVR0j
BBgwFoAUi+ErMfenPAW1O+IICX1xMpb6xScwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVJFVHN1bWl0VHpKblRGd2NNRHZCYUdNWXRiTDRUMkhYVDJnam1tV2Vv
OG0vMC84QkUxMkIzMUY3QTczQzA1QjUzQkUyMDgwOTdENzEzMjk2RkFDNTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhCRTEyQjMxRjdBNzNDMDVC
NTNCRTIwODA5N0Q3MTMyOTZGQUM1MjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlSRVRzdW1pdFR6Sm5URndjTUR2QmFHTVl0Ykw0VDJIWFQyZ2ptbVdlbzhtLzAv
MzEzODM2MmUzMjMzMzYyZTM0MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNzM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG67DAwDQYJKoZIhvcNAQELBQADggEBAI2jBaIo
DrI4GBCrsILrsIB/tAwLNlnPeqi+ROApZhgCNPWVNAMctGkaBfJ0FLLhuXmQRjE8
QUVUO1VCqV1f12knUP2h62d2QxMAy6ynfmZer0wgGvILz4g4mLOirq7jNE2W0+6+
s3JBPvYBNztMtAUw4eh2ni3/JiKpbrZeFA2MBICdY3XDBb0wVk5GluzhAv+csFy1
eH5Qctb8jkWB43fQ4egPl/r8V/bZjh+CK2MHz/6fADYC8D7019d5V7wgZzr6O2aa
VMl/qRkM9rTGrsBlFlqusHdjpW3CV/0XGSh8MHXek5d7K/pMOTDTL75D1MHhI2mK
/qK86YcFsBXQ79E=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:52 2024 by rpki-client on console-fra.rpki-client.org