Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e35342e302f32342d3234203d3e20323632373938.roa
File:                     3138362e3233362e35342e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          xdgJYOC4hv5unt4yvc222jeIP88qNfI9CbEgiguEQ98=
Subject key identifier:   C2:C5:A0:E4:6F:5F:A1:86:7A:2E:31:10:02:A0:D7:B3:9C:B9:6E:03
Certificate issuer:       /CN=8BE12B31F7A73C05B53BE208097D713296FAC527
Certificate serial:       5FEFD93747768DA68D9ED4EB4D809F50235F4AF9
Authority key identifier: 8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e35342e302f32342d3234203d3e20323632373938.roa
Signing time:             Tue 14 Nov 2023 02:58:07 +0000
ROA not before:           Tue 14 Nov 2023 02:53:07 +0000
ROA not after:            Tue 12 Nov 2024 02:58:07 +0000
asID:                     262798
IP address blocks:        186.236.54.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ef:d9:37:47:76:8d:a6:8d:9e:d4:eb:4d:80:9f:50:23:5f:4a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE12B31F7A73C05B53BE208097D713296FAC527
        Validity
            Not Before: Nov 14 02:53:07 2023 GMT
            Not After : Nov 12 02:58:07 2024 GMT
        Subject: CN=C2C5A0E46F5FA1867A2E311002A0D7B39CB96E03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:74:52:db:d4:7d:fb:01:a0:ad:8a:1f:73:d6:
                    38:8a:ed:80:53:2f:28:8b:e6:e2:84:41:65:b0:9e:
                    8a:f6:63:86:61:5c:77:10:99:61:b8:9d:ec:99:a2:
                    62:60:ec:8e:c6:8b:6b:7e:21:c7:88:57:c3:ed:da:
                    fb:8b:c7:fa:d5:74:40:7f:b2:3f:66:bc:f5:28:93:
                    65:c7:7f:da:18:00:26:43:e7:a4:85:dc:a8:ab:2f:
                    30:ea:07:6e:32:ce:6d:d7:6c:61:1e:bd:e9:da:fe:
                    95:45:2c:67:db:66:51:46:c8:99:fb:a4:9e:4d:99:
                    d9:f6:81:07:ab:02:48:7e:97:7b:ab:a0:10:05:a9:
                    73:ec:91:8e:1e:48:51:db:07:78:3f:18:21:0f:92:
                    f7:b8:31:60:06:86:6c:36:93:29:c5:43:e5:37:78:
                    68:ef:05:11:06:a7:a3:5d:ac:fb:73:da:d0:62:86:
                    95:11:d7:bb:80:6e:14:b0:cf:63:52:9b:1a:68:b3:
                    9d:63:cd:3a:94:64:86:ec:02:45:ea:5e:35:ba:6b:
                    68:d9:eb:c1:36:d4:07:b4:7e:67:22:4d:9a:7b:b3:
                    47:2d:22:5e:0a:15:82:0a:2c:d3:90:9c:ed:6b:37:
                    c1:ed:5a:b8:43:f0:a0:e1:01:cb:67:9d:42:8a:b5:
                    bc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C5:A0:E4:6F:5F:A1:86:7A:2E:31:10:02:A0:D7:B3:9C:B9:6E:03
            X509v3 Authority Key Identifier:
                keyid:8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/8BE12B31F7A73C05B53BE208097D713296FAC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e35342e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:85:b6:25:72:75:9f:da:c7:27:9b:1a:72:8a:e0:50:11:d0:
         3e:97:e3:4e:85:19:fa:c7:8f:ef:4b:99:c6:52:33:81:11:f8:
         f7:24:3b:0c:39:ab:9a:01:a9:93:1b:e4:f9:ea:8a:01:61:62:
         d2:d4:5d:35:01:85:ca:9a:58:34:b3:f5:6f:f3:7d:5a:1e:6d:
         c6:e3:95:fa:c3:8f:39:a7:ad:32:b3:de:40:5c:1d:7a:04:c3:
         b5:d5:33:50:bc:b1:8d:bc:6c:2c:62:62:18:a0:64:bb:d5:90:
         8f:42:52:8c:c0:a1:e0:ca:78:89:63:bb:0a:eb:8e:cf:03:ce:
         ca:eb:4a:1a:ee:31:83:5f:33:69:03:7b:f1:6f:85:f9:70:72:
         01:a7:f1:cf:95:87:60:94:c1:05:c7:36:27:be:c7:89:e2:0b:
         dc:2e:dd:11:2b:1e:0d:17:d2:bb:94:1f:f3:de:7a:01:6a:72:
         bd:ef:7f:77:42:f2:0e:ec:78:8f:04:04:d7:9d:12:c2:57:25:
         e5:49:22:89:03:8e:6f:36:60:74:70:25:16:53:5d:b7:68:7c:
         8d:75:c6:cc:e5:8b:cf:45:54:67:1c:00:85:0e:3a:6d:8f:db:
         f3:fd:0c:cd:48:33:90:7b:48:81:0e:df:54:a2:ff:3d:af:db:
         22:6b:6e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org