Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e34392e302f32342d3234203d3e20323632373938.roa
File:                     3138362e3233362e34392e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          FBd6f/wRvGgY0V50ixXni8c5MEpJwtmD7IqiDGNvggY=
Subject key identifier:   65:D6:72:C4:11:10:7D:4E:69:DB:F4:A7:29:6A:7B:E8:5F:13:22:E2
Certificate issuer:       /CN=8BE12B31F7A73C05B53BE208097D713296FAC527
Certificate serial:       5958EE93E0262C4FAD8D63F8EFC898AD3CB4CC4B
Authority key identifier: 8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e34392e302f32342d3234203d3e20323632373938.roa
Signing time:             Tue 14 Nov 2023 02:57:07 +0000
ROA not before:           Tue 14 Nov 2023 02:52:07 +0000
ROA not after:            Tue 12 Nov 2024 02:57:07 +0000
asID:                     262798
IP address blocks:        186.236.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:58:ee:93:e0:26:2c:4f:ad:8d:63:f8:ef:c8:98:ad:3c:b4:cc:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE12B31F7A73C05B53BE208097D713296FAC527
        Validity
            Not Before: Nov 14 02:52:07 2023 GMT
            Not After : Nov 12 02:57:07 2024 GMT
        Subject: CN=65D672C411107D4E69DBF4A7296A7BE85F1322E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:90:ca:5b:12:55:ad:2b:22:05:db:5a:62:96:
                    d2:ba:dd:6f:53:d0:13:70:7e:bd:58:9f:cd:92:4b:
                    75:83:ad:6b:8e:76:7e:c4:d8:b0:49:39:5e:f7:f5:
                    1b:d4:a4:d5:d3:07:e8:e2:a2:65:e7:a9:9e:03:91:
                    1b:e0:47:3b:ac:38:b9:86:7d:69:ba:ec:83:ef:67:
                    19:e7:99:fd:7a:15:0c:88:5b:c1:e5:67:58:b3:03:
                    fd:cc:e8:7a:43:01:c4:6f:08:32:72:01:ae:46:6c:
                    a2:e0:eb:16:af:77:cd:01:28:50:79:6a:31:f9:a0:
                    6e:91:2d:43:26:9f:0e:8e:af:14:1d:3e:98:d6:6a:
                    65:b5:4e:e2:f1:b6:ae:3f:f6:57:9f:06:82:02:97:
                    4f:9b:ef:fb:f2:6d:54:14:0d:bf:55:61:f3:c5:fd:
                    fd:cd:e2:db:70:4d:53:6d:fc:0d:06:4b:e4:47:85:
                    01:c7:59:1a:36:f2:46:dd:e6:e6:cb:86:7c:6d:cf:
                    a1:f3:63:1f:2a:50:6b:fb:c1:68:1d:db:95:46:84:
                    65:25:19:25:5a:5e:83:1c:c6:55:5c:46:9e:ef:93:
                    91:0a:05:6e:b3:a8:ec:3e:71:39:1f:9c:96:98:0d:
                    bc:b9:84:47:67:3c:58:64:ce:d2:da:39:78:f0:49:
                    e8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D6:72:C4:11:10:7D:4E:69:DB:F4:A7:29:6A:7B:E8:5F:13:22:E2
            X509v3 Authority Key Identifier:
                keyid:8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/8BE12B31F7A73C05B53BE208097D713296FAC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e34392e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:28:ac:9d:4e:90:13:2c:bd:84:1b:5c:9a:b4:29:50:9b:1a:
         15:62:88:c3:47:7a:41:6b:41:f4:8a:53:4b:f9:8e:d2:68:a5:
         30:9b:3f:15:73:5e:87:59:1f:36:cf:33:d3:4c:36:4a:8a:f6:
         de:51:65:f6:a2:da:dd:df:db:5e:54:47:b3:f4:e1:d1:78:35:
         e7:31:ae:33:59:3a:90:8a:95:48:19:ad:39:15:1f:83:9d:2a:
         c7:87:2d:8c:7d:40:bb:70:99:a5:5e:28:fd:44:ab:a4:b8:84:
         df:15:9b:19:c5:39:b4:00:80:19:96:d0:4a:bf:44:06:b1:2f:
         42:6f:e2:c6:da:9e:4d:4d:18:e5:b7:07:6b:4b:10:c7:13:04:
         d9:f3:81:17:dd:eb:2f:7e:b5:7c:46:b1:a0:59:10:fb:6d:50:
         a3:22:92:0a:99:45:7d:aa:f4:86:7c:9d:96:d9:6c:bb:8c:b5:
         e2:52:03:68:81:1f:d5:fe:bf:32:16:da:d2:8f:e5:87:d7:da:
         b2:bc:45:95:12:2b:d7:cc:d4:f0:99:01:9d:0b:f3:68:8a:34:
         e8:8d:ac:ea:1e:7b:c7:c4:8a:7b:4d:67:9f:e8:43:11:2a:9c:
         84:29:30:d4:bb:b7:bd:15:cc:6e:a2:dd:c1:2c:0b:de:27:53:
         e6:97:3f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org