Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e35342e302f32332d3233203d3e20323632373938.roa
File:                     3138362e3233362e35342e302f32332d3233203d3e20323632373938.roa (raw, json)
Hash identifier:          61EDU2bSdG6mXH2wzO0aCA5ajQp2dWeiLYsfQUjFwYE=
Subject key identifier:   57:B2:57:7A:A6:C1:B6:65:7F:4E:66:D2:65:7A:DA:4B:35:B6:0E:3D
Certificate issuer:       /CN=8BE12B31F7A73C05B53BE208097D713296FAC527
Certificate serial:       1CA68690081895CEBF1DAA3EF0B28B6E1393AF35
Authority key identifier: 8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e35342e302f32332d3233203d3e20323632373938.roa
Signing time:             Tue 16 May 2023 12:27:03 +0000
ROA not before:           Tue 16 May 2023 12:22:03 +0000
ROA not after:            Tue 14 May 2024 12:27:03 +0000
asID:                     262798
IP address blocks:        186.236.54.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a6:86:90:08:18:95:ce:bf:1d:aa:3e:f0:b2:8b:6e:13:93:af:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE12B31F7A73C05B53BE208097D713296FAC527
        Validity
            Not Before: May 16 12:22:03 2023 GMT
            Not After : May 14 12:27:03 2024 GMT
        Subject: CN=57B2577AA6C1B6657F4E66D2657ADA4B35B60E3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a2:01:69:b2:fc:81:f5:09:04:f5:c1:7e:4c:
                    c5:90:b3:19:01:97:7b:b4:6a:3c:3b:43:cb:cb:dd:
                    c5:c7:7e:15:59:e7:0c:47:e7:59:3a:f6:7b:7e:3b:
                    14:02:37:8a:26:2c:dc:f6:6f:b1:63:f6:24:e2:4f:
                    9a:b0:72:a6:08:92:9f:4b:2e:70:dc:6b:8f:a5:d8:
                    1f:c5:88:a2:03:23:23:8e:dd:be:bc:a6:0a:10:b3:
                    08:81:1b:5e:7d:e1:27:bc:36:2a:e2:8b:4d:1b:12:
                    70:6a:44:62:5d:ce:ef:e5:06:3c:8e:4f:c9:25:02:
                    62:42:37:68:cd:63:6a:08:4d:50:ee:7f:c9:00:f3:
                    96:cf:ec:1f:39:27:13:20:5f:d1:34:8a:fd:eb:d7:
                    12:d7:53:f9:96:09:e5:d9:b0:39:59:b5:a3:a1:53:
                    98:a9:01:24:6a:cd:86:64:a1:52:73:3b:2b:6f:be:
                    07:5c:a7:17:13:36:16:8a:df:df:ef:91:de:91:30:
                    89:9f:16:c3:e8:3a:d8:9e:5e:f4:40:c7:ea:25:f5:
                    93:fb:ec:65:1f:04:eb:bc:c4:69:1e:bb:83:4f:c3:
                    8d:83:5b:5c:c0:8f:c7:9f:3d:ac:06:5e:45:af:ee:
                    d9:31:d8:9f:d3:3e:ef:45:b1:a9:dc:5b:70:0b:56:
                    51:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B2:57:7A:A6:C1:B6:65:7F:4E:66:D2:65:7A:DA:4B:35:B6:0E:3D
            X509v3 Authority Key Identifier:
                keyid:8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/8BE12B31F7A73C05B53BE208097D713296FAC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e35342e302f32332d3233203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:ef:12:88:80:40:9a:94:1f:1f:11:5a:0d:6f:75:49:90:ac:
         a8:30:91:4d:9b:cc:cd:55:26:0d:39:b1:45:f1:83:bb:8a:1e:
         a9:18:b4:6e:3e:19:63:9c:a5:a1:49:d8:38:01:0e:be:d2:d5:
         15:0f:38:f7:fc:27:67:81:a8:6a:9d:ee:e5:30:e3:d0:c1:7e:
         8b:63:97:a0:52:eb:8a:e2:10:da:76:c9:fc:08:1b:d2:39:0e:
         74:ca:49:fb:e0:f8:dc:64:83:e0:22:67:a6:77:79:ba:bc:47:
         66:fa:15:00:c8:9b:33:c8:4a:38:03:a0:c6:4e:39:2c:7b:68:
         1d:c1:d5:7f:8f:38:54:ce:b0:c2:c9:de:71:e7:f9:74:14:24:
         95:67:9f:a0:ad:6f:85:36:6f:e6:fb:4c:b7:c1:1f:18:1f:c5:
         bb:4a:06:07:14:69:68:9e:92:1b:fc:d1:b3:ad:ed:11:b4:e4:
         ba:71:6e:8b:c2:69:58:2b:49:7b:67:2a:a3:35:68:49:e3:9d:
         5a:dc:60:a4:eb:a8:8a:1e:a9:d6:3d:c2:3f:31:65:08:bc:5f:
         2a:cc:d6:c7:28:31:2d:0e:76:99:9a:a3:84:29:ff:c6:bb:49:
         9b:40:1a:29:da:e3:8c:9e:7d:d5:b7:04:40:e9:54:c0:0c:51:
         3f:5e:53:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:11 2024 by rpki-client on console-ams.rpki-client.org