Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e35392e302f32342d3234203d3e20323632373938.roa
File:                     3138362e3233362e35392e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          G/gPrFYJvM2kGlu78boINsRI5BPdvYcpGyz6eI0p0lk=
Subject key identifier:   D4:D5:7D:E8:DE:A0:31:71:F2:F4:47:99:1F:25:94:F0:B3:3F:76:8D
Certificate issuer:       /CN=8BE12B31F7A73C05B53BE208097D713296FAC527
Certificate serial:       0FF7525AD9529F1E56323E85DD044D7D55716ADA
Authority key identifier: 8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e35392e302f32342d3234203d3e20323632373938.roa
Signing time:             Tue 14 Nov 2023 02:59:01 +0000
ROA not before:           Tue 14 Nov 2023 02:54:01 +0000
ROA not after:            Tue 12 Nov 2024 02:59:01 +0000
asID:                     262798
IP address blocks:        186.236.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f7:52:5a:d9:52:9f:1e:56:32:3e:85:dd:04:4d:7d:55:71:6a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE12B31F7A73C05B53BE208097D713296FAC527
        Validity
            Not Before: Nov 14 02:54:01 2023 GMT
            Not After : Nov 12 02:59:01 2024 GMT
        Subject: CN=D4D57DE8DEA03171F2F447991F2594F0B33F768D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d6:e2:25:df:47:0c:86:67:80:af:f3:08:4f:
                    f7:d5:68:8e:b1:b3:f1:ce:d9:90:a5:4f:77:ec:14:
                    3f:2d:d9:63:e9:b1:1c:a9:08:e0:01:67:ec:6d:73:
                    2e:84:f0:ec:bb:03:0a:34:96:c5:a3:aa:31:e3:40:
                    6e:18:a9:28:9d:d2:49:d4:4e:3c:6c:02:b7:ac:a4:
                    73:36:f6:4b:22:a5:07:c1:a6:73:3d:5f:bf:42:a6:
                    55:25:48:0d:59:eb:72:8c:1f:dc:3d:e7:d3:3e:76:
                    cb:39:8e:ef:67:dd:e9:b7:7b:41:5f:9c:4d:25:a8:
                    7e:70:d8:a5:f4:01:b3:c9:05:7a:dd:33:55:d5:69:
                    9a:5d:5e:a2:9e:bb:ef:d3:77:5b:fa:a8:74:e6:21:
                    fd:9c:52:18:15:36:fb:1c:f4:1a:39:48:36:f4:fb:
                    9b:e2:f9:3e:e2:0b:15:95:66:a7:75:3d:1a:1b:fc:
                    c5:03:c6:ab:43:7c:d3:21:b7:6a:8e:07:54:e0:15:
                    0a:1b:d6:f0:76:d9:ae:75:2e:1f:0c:6f:45:76:c2:
                    b7:57:04:ba:2f:56:73:94:dc:27:6f:8a:82:c8:b2:
                    f7:94:15:e9:cd:69:1d:f7:1d:6e:0f:ba:af:4e:50:
                    4f:8e:ef:75:0d:d2:70:c1:24:03:d3:d7:d6:02:08:
                    38:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D5:7D:E8:DE:A0:31:71:F2:F4:47:99:1F:25:94:F0:B3:3F:76:8D
            X509v3 Authority Key Identifier:
                keyid:8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/8BE12B31F7A73C05B53BE208097D713296FAC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e35392e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:5f:d5:e1:18:3d:71:55:d7:27:50:bf:f2:f9:9e:ba:8b:7f:
         b6:a9:81:0a:2f:11:3a:f2:3e:af:a3:8c:c2:b0:6b:26:1a:87:
         87:7e:98:4c:d3:87:64:16:af:e4:8a:9e:48:77:f5:50:79:95:
         4c:60:dd:5d:b4:2a:02:41:c3:68:eb:60:ed:5b:81:c7:dd:94:
         49:69:e7:5f:c7:6c:14:4b:97:b1:ff:7d:a9:45:d9:93:5a:d3:
         cc:57:a8:0f:59:7a:43:f2:2b:31:84:42:91:bd:47:0b:51:39:
         5f:40:94:ef:b8:3c:0d:18:bc:b9:59:69:a8:30:6f:0c:e6:ba:
         ae:de:f5:8d:81:85:3a:9b:40:cf:f7:6b:69:52:10:c6:fc:5d:
         cc:b9:9f:33:4b:3c:53:2a:b0:30:39:99:a1:9a:58:74:c5:33:
         e9:8b:df:7c:7e:57:13:d2:ce:dc:63:40:db:e4:64:fe:fc:06:
         4c:e4:52:17:ee:9f:ff:f7:9a:da:e7:f3:4a:6e:86:35:f8:27:
         fd:ef:aa:c7:b6:37:53:4a:8e:68:e9:73:4c:1a:a5:82:f2:42:
         a6:58:3c:ce:d2:c2:38:86:e3:b3:9b:0b:94:b2:30:bf:92:f4:
         d8:3f:28:ef:a9:8f:d9:c7:ec:67:e7:e2:7b:ae:0e:61:2e:39:
         b2:31:4a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org