Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e35382e302f32332d3233203d3e20323632373938.roa
File:                     3138362e3233362e35382e302f32332d3233203d3e20323632373938.roa (raw, json)
Hash identifier:          uJckEEuoXsynm5hm7kS9JpZLWDH7lAhXWQk/7U7B1Vg=
Subject key identifier:   C8:83:18:6E:6A:8E:3C:F8:4B:DE:86:3B:B0:B7:A1:08:52:12:FF:86
Certificate issuer:       /CN=8BE12B31F7A73C05B53BE208097D713296FAC527
Certificate serial:       1AAC7DC553945823FD157C08123F00481907F5DF
Authority key identifier: 8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e35382e302f32332d3233203d3e20323632373938.roa
Signing time:             Tue 16 May 2023 12:27:13 +0000
ROA not before:           Tue 16 May 2023 12:22:13 +0000
ROA not after:            Tue 14 May 2024 12:27:13 +0000
asID:                     262798
IP address blocks:        186.236.58.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ac:7d:c5:53:94:58:23:fd:15:7c:08:12:3f:00:48:19:07:f5:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE12B31F7A73C05B53BE208097D713296FAC527
        Validity
            Not Before: May 16 12:22:13 2023 GMT
            Not After : May 14 12:27:13 2024 GMT
        Subject: CN=C883186E6A8E3CF84BDE863BB0B7A1085212FF86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bc:b8:47:ed:ca:9e:c2:a6:f9:82:d4:87:12:
                    10:45:fc:98:8f:63:cd:4a:e5:db:af:52:cc:37:85:
                    57:c0:f1:43:39:8e:ae:80:29:d9:f2:e8:3e:a3:98:
                    22:2a:c3:0c:c8:5b:9b:0d:51:4c:a8:2d:7f:1f:55:
                    d8:c8:1f:24:22:d3:dc:a3:0b:e3:fe:d2:60:13:e4:
                    26:55:a5:17:8a:98:84:bb:4c:0b:3e:88:c5:f4:5e:
                    74:c8:d7:6b:8d:47:df:ea:dc:61:69:b8:5e:b5:b0:
                    d7:36:73:fa:0e:b6:ef:9d:59:2f:1c:17:42:0f:28:
                    d0:e4:9f:b6:82:c7:d5:0f:ff:16:4a:3b:6f:44:97:
                    fe:72:14:d6:d0:d7:4a:df:45:71:69:6b:9a:d9:7c:
                    67:1b:eb:76:7d:1e:6a:4d:be:79:29:24:d9:29:e3:
                    99:ac:cc:d4:91:14:0d:9f:3a:56:21:b4:89:fa:0e:
                    ba:1b:4d:48:b3:01:e2:82:70:d0:ec:f8:f3:e4:17:
                    64:7d:43:32:e9:43:ee:e5:2c:5c:87:9d:d2:68:b3:
                    3d:b9:99:f4:f5:62:60:46:26:b6:c7:35:9d:a9:a0:
                    eb:69:05:0d:e7:05:b5:31:6d:ca:4d:19:c4:e8:93:
                    ff:72:56:d5:32:a6:0b:88:c4:e0:0d:df:b4:30:75:
                    fe:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:83:18:6E:6A:8E:3C:F8:4B:DE:86:3B:B0:B7:A1:08:52:12:FF:86
            X509v3 Authority Key Identifier:
                keyid:8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/8BE12B31F7A73C05B53BE208097D713296FAC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e35382e302f32332d3233203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:4c:65:73:66:8d:76:35:e4:4a:de:1e:63:bb:70:28:13:eb:
         1d:ea:86:79:4d:90:d0:e3:8f:47:be:e2:df:e0:2a:af:fa:ac:
         37:e2:d2:c4:b6:23:aa:8a:2f:80:03:cb:ca:da:14:c9:0f:3c:
         e8:43:f6:d9:d2:e5:2e:78:cb:66:60:4e:a8:0d:38:dd:05:70:
         d1:99:85:90:52:54:73:26:c1:41:4c:d1:69:6b:24:5c:b6:5a:
         fd:f5:74:73:6f:5d:af:44:c6:50:0d:8a:25:a8:b7:60:d1:31:
         23:5c:8b:00:3e:05:bc:15:a5:4f:05:e7:fd:df:8b:99:02:07:
         a7:b0:8b:69:fd:22:ba:da:c7:6a:e5:6a:d3:2c:fe:c6:9a:7c:
         37:88:40:09:47:e6:02:0c:39:54:f7:f3:7d:8b:4a:ac:d7:b1:
         a8:39:bb:eb:ba:58:ed:22:55:97:ae:30:5a:b8:e9:b9:87:ac:
         73:16:ce:87:97:56:ae:d0:48:27:c9:2f:69:b8:b5:76:c0:e5:
         9b:cb:6f:54:e0:7e:46:72:45:65:80:b1:fe:06:62:4a:1c:73:
         4a:7c:7c:1c:ba:5c:3e:1f:e9:8e:f5:eb:de:38:48:5b:c9:de:
         91:22:43:9e:a9:68:d7:c5:55:52:6c:6c:4c:8f:3d:de:aa:b1:
         2c:7a:a3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org