Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e35372e302f32342d3234203d3e20323632373938.roa
File:                     3138362e3233362e35372e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          qHUwUQfS9e9o6QZJ7BJgN4d4dl5I0yVJvcJZpMZEOM4=
Subject key identifier:   14:0B:85:F5:2E:3E:0B:51:0F:35:B7:75:D7:DA:0B:6B:71:71:F7:2F
Certificate issuer:       /CN=8BE12B31F7A73C05B53BE208097D713296FAC527
Certificate serial:       61706C9DC2471D6EABFE4B5D7AF9CB4BE1C8569E
Authority key identifier: 8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e35372e302f32342d3234203d3e20323632373938.roa
Signing time:             Tue 14 Nov 2023 02:58:37 +0000
ROA not before:           Tue 14 Nov 2023 02:53:37 +0000
ROA not after:            Tue 12 Nov 2024 02:58:37 +0000
asID:                     262798
IP address blocks:        186.236.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:70:6c:9d:c2:47:1d:6e:ab:fe:4b:5d:7a:f9:cb:4b:e1:c8:56:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE12B31F7A73C05B53BE208097D713296FAC527
        Validity
            Not Before: Nov 14 02:53:37 2023 GMT
            Not After : Nov 12 02:58:37 2024 GMT
        Subject: CN=140B85F52E3E0B510F35B775D7DA0B6B7171F72F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4b:8f:53:5f:9d:86:e2:c0:f8:55:6b:d0:c8:
                    43:26:38:a7:38:ab:dc:fe:b1:f4:ad:ae:ca:83:2d:
                    ab:59:4f:51:b8:68:04:97:be:1b:43:59:6e:f6:1f:
                    d3:57:a4:47:b3:14:f6:aa:9d:06:a5:53:8c:dc:19:
                    dd:9c:14:d2:53:d0:0b:6a:0c:0e:67:97:c1:6b:79:
                    94:79:c0:95:a2:4b:49:03:ad:67:7d:fa:6f:77:3c:
                    d2:41:71:b3:a9:fb:77:89:18:24:56:16:4c:a8:4b:
                    b4:c7:1c:79:eb:89:70:f1:da:4c:84:32:57:4e:4a:
                    17:2e:10:12:d7:9f:4a:20:31:68:38:10:bf:75:5e:
                    cd:fb:6d:64:3e:e5:56:81:54:09:3f:ac:b4:4c:0d:
                    04:e6:85:5d:c8:c4:14:b3:d4:88:5a:c1:b8:eb:43:
                    d0:0f:94:85:bd:92:18:9c:64:cb:23:36:02:62:ef:
                    39:0f:9d:0c:d0:30:c0:ca:e8:c6:f1:b2:e6:27:16:
                    fa:21:a7:a7:69:e1:f4:40:d3:8b:e3:67:08:bc:41:
                    97:11:89:e8:04:04:7f:88:04:c6:b2:5a:64:ed:ee:
                    df:ca:cc:55:ee:6f:18:6e:6a:f4:12:b8:78:47:ed:
                    c5:79:0a:ca:05:90:0c:9f:69:93:2a:65:c1:4f:b5:
                    a0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0B:85:F5:2E:3E:0B:51:0F:35:B7:75:D7:DA:0B:6B:71:71:F7:2F
            X509v3 Authority Key Identifier:
                keyid:8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/8BE12B31F7A73C05B53BE208097D713296FAC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e35372e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:6e:d4:93:e0:83:07:3f:23:5d:d7:1b:5c:77:f5:56:21:a1:
         95:ab:4a:0e:38:00:86:50:1c:dd:95:33:31:d1:d0:44:7b:a7:
         59:36:b9:3e:4d:62:d7:6d:6f:3b:0d:1b:4a:ba:12:9f:c0:c0:
         82:6a:e1:bc:73:e0:fc:e7:e2:65:0e:5a:fa:8b:27:5e:49:4c:
         02:4b:48:b6:c2:13:25:af:8c:b3:85:81:35:2f:85:70:ff:06:
         71:37:d6:cb:1a:24:ae:51:16:76:a7:7d:dd:34:f9:06:f6:8f:
         6c:9c:ec:ae:e4:ee:02:b3:0c:dc:c4:c5:d8:fd:14:ed:fe:08:
         7f:f0:1f:84:23:6f:2d:a8:1a:c2:fb:f7:ef:90:4e:60:cd:9a:
         76:c7:91:8b:b7:e1:59:86:95:13:3b:16:39:45:f4:b2:b5:27:
         94:12:49:34:f5:2a:b9:58:3a:4a:07:3a:35:cd:69:23:b7:7b:
         20:dd:ac:55:ec:15:62:90:65:95:c3:16:bd:7f:75:37:40:a1:
         cc:f4:4c:21:3d:bc:0a:25:a4:b4:f1:9d:21:cd:4e:2f:50:36:
         a3:57:ad:b5:63:e3:83:50:d9:1f:e1:60:a7:4f:56:77:d0:9f:
         01:a6:11:d2:93:24:3f:b9:0e:c5:f1:f2:7f:0e:37:64:07:23:
         1c:84:ef:f5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYXBsncJHHW6r/ktdevnLS+HIVp4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJFMTJCMzFGN0E3M0MwNUI1M0JFMjA4MDk3RDcxMzI5
NkZBQzUyNzAeFw0yMzExMTQwMjUzMzdaFw0yNDExMTIwMjU4MzdaMDMxMTAvBgNV
BAMTKDE0MEI4NUY1MkUzRTBCNTEwRjM1Qjc3NUQ3REEwQjZCNzE3MUY3MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgS49TX52G4sD4VWvQyEMmOKc4
q9z+sfStrsqDLatZT1G4aASXvhtDWW72H9NXpEezFPaqnQalU4zcGd2cFNJT0Atq
DA5nl8FreZR5wJWiS0kDrWd9+m93PNJBcbOp+3eJGCRWFkyoS7THHHnriXDx2kyE
MldOShcuEBLXn0ogMWg4EL91Xs37bWQ+5VaBVAk/rLRMDQTmhV3IxBSz1Ihawbjr
Q9APlIW9khicZMsjNgJi7zkPnQzQMMDK6MbxsuYnFvohp6dp4fRA04vjZwi8QZcR
iegEBH+IBMayWmTt7t/KzFXubxhuavQSuHhH7cV5CsoFkAyfaZMqZcFPtaAzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFAuF9S4+C1EPNbd119oLa3Fx9y8wHwYDVR0j
BBgwFoAUi+ErMfenPAW1O+IICX1xMpb6xScwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVJFVHN1bWl0VHpKblRGd2NNRHZCYUdNWXRiTDRUMkhYVDJnam1tV2Vv
OG0vMC84QkUxMkIzMUY3QTczQzA1QjUzQkUyMDgwOTdENzEzMjk2RkFDNTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhCRTEyQjMxRjdBNzNDMDVC
NTNCRTIwODA5N0Q3MTMyOTZGQUM1MjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlSRVRzdW1pdFR6Sm5URndjTUR2QmFHTVl0Ykw0VDJIWFQyZ2ptbVdlbzhtLzAv
MzEzODM2MmUzMjMzMzYyZTM1MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNzM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC67DkwDQYJKoZIhvcNAQELBQADggEBALNu1JPg
gwc/I13XG1x39VYhoZWrSg44AIZQHN2VMzHR0ER7p1k2uT5NYtdtbzsNG0q6Ep/A
wIJq4bxz4Pzn4mUOWvqLJ15JTAJLSLbCEyWvjLOFgTUvhXD/BnE31ssaJK5RFnan
fd00+Qb2j2yc7K7k7gKzDNzExdj9FO3+CH/wH4Qjby2oGsL79++QTmDNmnbHkYu3
4VmGlRM7FjlF9LK1J5QSSTT1KrlYOkoHOjXNaSO3eyDdrFXsFWKQZZXDFr1/dTdA
ocz0TCE9vAolpLTxnSHNTi9QNqNXrbVj44NQ2R/hYKdPVnfQnwGmEdKTJD+5DsXx
8n8ON2QHIxyE7/U=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:52 2024 by rpki-client on console-fra.rpki-client.org