Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e35362e302f32342d3234203d3e20323632373938.roa
File:                     3138362e3233362e35362e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          XnGyTFBqksxsRX5DFU7A4XQE93m85VZV1VaGnf1zDnw=
Subject key identifier:   66:D6:B7:54:6B:BD:7A:96:5B:F1:7A:EC:15:DC:C5:24:D2:7D:52:40
Certificate issuer:       /CN=8BE12B31F7A73C05B53BE208097D713296FAC527
Certificate serial:       720AE088B336415E45940B542B234B4636F29E41
Authority key identifier: 8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e35362e302f32342d3234203d3e20323632373938.roa
Signing time:             Tue 14 Nov 2023 02:58:27 +0000
ROA not before:           Tue 14 Nov 2023 02:53:27 +0000
ROA not after:            Tue 12 Nov 2024 02:58:27 +0000
asID:                     262798
IP address blocks:        186.236.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:0a:e0:88:b3:36:41:5e:45:94:0b:54:2b:23:4b:46:36:f2:9e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE12B31F7A73C05B53BE208097D713296FAC527
        Validity
            Not Before: Nov 14 02:53:27 2023 GMT
            Not After : Nov 12 02:58:27 2024 GMT
        Subject: CN=66D6B7546BBD7A965BF17AEC15DCC524D27D5240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f3:e0:6f:5f:f6:be:1d:4c:f3:5d:37:8b:e3:
                    cc:17:8e:c7:67:5d:8b:1e:10:f9:56:ef:d8:54:e6:
                    d0:84:23:12:7e:7c:95:20:5f:6a:83:6f:72:06:6b:
                    b4:79:77:1d:dc:87:b7:66:89:07:21:68:93:09:cc:
                    91:6f:e2:d9:dc:ac:ef:08:d4:9f:76:bd:ee:7a:b0:
                    f9:29:b8:44:1d:ca:0f:99:0d:4a:0a:90:ed:f1:b3:
                    ba:b7:db:33:2a:5c:20:6e:bb:99:48:46:2b:45:42:
                    7a:06:25:24:9e:57:1a:f6:3c:af:30:ec:80:bd:c5:
                    5c:7d:40:7a:7f:50:45:bd:e5:c3:58:1c:e0:f2:bb:
                    e6:f5:ae:3b:87:0f:4b:92:99:78:2d:63:d1:ea:84:
                    60:63:06:5c:b8:1c:27:52:6c:51:53:41:d6:45:8c:
                    57:41:44:93:95:b9:34:ba:96:53:e5:6b:4c:cd:6d:
                    59:76:4d:6f:d9:6a:06:74:f9:fb:c2:5b:4c:1a:ed:
                    fa:3b:3c:c4:f4:5e:40:fd:a8:d9:26:70:19:24:23:
                    00:bd:83:37:5b:72:59:76:d8:b9:e9:b6:53:69:62:
                    fc:f7:33:79:6d:10:ed:9f:28:ba:6f:af:a0:ef:58:
                    2a:79:e8:0f:5c:31:3f:ee:7e:46:3d:4b:26:80:5d:
                    f6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D6:B7:54:6B:BD:7A:96:5B:F1:7A:EC:15:DC:C5:24:D2:7D:52:40
            X509v3 Authority Key Identifier:
                keyid:8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/8BE12B31F7A73C05B53BE208097D713296FAC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e35362e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:a2:d3:09:43:47:19:f5:a0:2a:e2:a2:95:13:fe:12:d0:66:
         84:db:25:0d:79:27:6c:06:19:08:8f:4a:7b:c7:74:2c:f2:47:
         e5:3b:18:56:82:94:d6:e3:35:f8:07:d8:56:a8:d3:b1:82:71:
         be:bd:cb:f2:87:67:f1:28:46:8e:96:64:47:49:f4:e1:95:d3:
         71:64:10:8b:df:8d:27:ff:96:64:c2:9c:c9:c0:d6:56:4b:75:
         9d:a5:aa:c3:c4:cb:93:ac:62:81:4a:65:19:a6:13:6b:84:a6:
         61:7d:04:cd:5d:7e:5e:e2:63:b6:7c:7c:b4:73:91:86:1f:ac:
         b2:aa:b6:a6:fa:f8:0f:f1:04:cb:01:23:71:00:41:b8:aa:ae:
         68:32:04:6e:3f:e8:50:68:6a:a3:38:a3:92:48:5c:dd:69:fa:
         94:2a:52:f6:ec:dc:1a:98:bf:70:45:68:29:94:27:f7:1c:db:
         9b:79:f6:5f:e6:01:3c:dc:ca:f8:38:f0:6a:cb:05:de:71:b1:
         d3:f5:d2:7e:1d:d4:8f:f9:c3:35:20:90:2e:f5:d2:17:c1:dc:
         0f:8a:77:ed:a0:a8:3f:8c:f9:72:91:e7:73:e9:ea:d6:a6:3a:
         69:b5:7b:c4:0b:9c:db:6f:bf:a6:87:31:ec:d2:0e:92:c5:0b:
         7e:d2:f3:d2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcgrgiLM2QV5FlAtUKyNLRjbynkEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJFMTJCMzFGN0E3M0MwNUI1M0JFMjA4MDk3RDcxMzI5
NkZBQzUyNzAeFw0yMzExMTQwMjUzMjdaFw0yNDExMTIwMjU4MjdaMDMxMTAvBgNV
BAMTKDY2RDZCNzU0NkJCRDdBOTY1QkYxN0FFQzE1RENDNTI0RDI3RDUyNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB8+BvX/a+HUzzXTeL48wXjsdn
XYseEPlW79hU5tCEIxJ+fJUgX2qDb3IGa7R5dx3ch7dmiQchaJMJzJFv4tncrO8I
1J92ve56sPkpuEQdyg+ZDUoKkO3xs7q32zMqXCBuu5lIRitFQnoGJSSeVxr2PK8w
7IC9xVx9QHp/UEW95cNYHODyu+b1rjuHD0uSmXgtY9HqhGBjBly4HCdSbFFTQdZF
jFdBRJOVuTS6llPla0zNbVl2TW/ZagZ0+fvCW0wa7fo7PMT0XkD9qNkmcBkkIwC9
gzdbcll22LnptlNpYvz3M3ltEO2fKLpvr6DvWCp56A9cMT/ufkY9SyaAXfYZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZta3VGu9epZb8XrsFdzFJNJ9UkAwHwYDVR0j
BBgwFoAUi+ErMfenPAW1O+IICX1xMpb6xScwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVJFVHN1bWl0VHpKblRGd2NNRHZCYUdNWXRiTDRUMkhYVDJnam1tV2Vv
OG0vMC84QkUxMkIzMUY3QTczQzA1QjUzQkUyMDgwOTdENzEzMjk2RkFDNTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhCRTEyQjMxRjdBNzNDMDVC
NTNCRTIwODA5N0Q3MTMyOTZGQUM1MjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlSRVRzdW1pdFR6Sm5URndjTUR2QmFHTVl0Ykw0VDJIWFQyZ2ptbVdlbzhtLzAv
MzEzODM2MmUzMjMzMzYyZTM1MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNzM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC67DgwDQYJKoZIhvcNAQELBQADggEBABKi0wlD
Rxn1oCriopUT/hLQZoTbJQ15J2wGGQiPSnvHdCzyR+U7GFaClNbjNfgH2Fao07GC
cb69y/KHZ/EoRo6WZEdJ9OGV03FkEIvfjSf/lmTCnMnA1lZLdZ2lqsPEy5OsYoFK
ZRmmE2uEpmF9BM1dfl7iY7Z8fLRzkYYfrLKqtqb6+A/xBMsBI3EAQbiqrmgyBG4/
6FBoaqM4o5JIXN1p+pQqUvbs3BqYv3BFaCmUJ/cc25t59l/mATzcyvg48GrLBd5x
sdP10n4d1I/5wzUgkC710hfB3A+Kd+2gqD+M+XKR53Pp6tamOmm1e8QLnNtvv6aH
MezSDpLFC37S89I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org