Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e36312e302f32342d3234203d3e20323632373938.roa
File:                     3138362e3233362e36312e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          catg/qwKoAOK5V4e6j306vlorW5pm0FApo6Fms3wzbQ=
Subject key identifier:   35:54:CE:80:D7:CF:31:21:80:15:E2:9F:88:C4:9D:14:92:4A:A8:D4
Certificate issuer:       /CN=8BE12B31F7A73C05B53BE208097D713296FAC527
Certificate serial:       29FBB9447D4220B7051F85DBADC4B724E36258AE
Authority key identifier: 8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e36312e302f32342d3234203d3e20323632373938.roa
Signing time:             Tue 14 Nov 2023 02:59:31 +0000
ROA not before:           Tue 14 Nov 2023 02:54:31 +0000
ROA not after:            Tue 12 Nov 2024 02:59:31 +0000
asID:                     262798
IP address blocks:        186.236.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:fb:b9:44:7d:42:20:b7:05:1f:85:db:ad:c4:b7:24:e3:62:58:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE12B31F7A73C05B53BE208097D713296FAC527
        Validity
            Not Before: Nov 14 02:54:31 2023 GMT
            Not After : Nov 12 02:59:31 2024 GMT
        Subject: CN=3554CE80D7CF31218015E29F88C49D14924AA8D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f0:99:e5:b5:51:13:25:c2:1f:64:f9:34:88:
                    0a:35:4f:7b:4d:21:4e:ac:c9:ea:3d:e0:39:30:59:
                    9a:5f:40:a7:bc:ec:3f:4c:c5:2d:cf:e7:06:ea:8f:
                    20:a5:1c:5f:c3:51:3f:2e:c6:6d:0a:9c:48:bc:d3:
                    6e:c1:7e:1a:da:33:67:ab:d4:5e:b0:4a:09:f1:9f:
                    68:a0:a6:36:b0:31:f0:a4:7e:7c:f4:0a:9f:df:27:
                    10:c8:21:c3:10:23:da:41:a1:11:0f:09:0a:aa:75:
                    c5:42:3b:65:7c:32:36:e9:d4:2f:bc:1a:c2:9c:f5:
                    ae:16:fb:6f:a9:27:fd:8b:81:21:c2:93:de:62:19:
                    20:1c:0f:63:5b:8c:bc:d3:ac:c0:77:7a:38:71:c2:
                    07:ee:23:e3:3b:68:34:5c:23:77:21:70:87:d2:7d:
                    24:d7:f2:15:19:29:3c:f9:ee:fb:e9:5e:7a:22:33:
                    64:bb:3f:60:04:1c:c5:54:cd:99:d3:50:d2:84:09:
                    8b:3a:d0:5b:c9:a6:1c:5f:69:5b:c8:bf:2d:5e:81:
                    df:dd:64:1c:66:2b:8e:38:36:eb:22:d5:a3:cf:82:
                    50:53:a9:6d:31:8d:12:e2:54:53:73:28:c2:94:55:
                    35:60:75:29:c5:74:b4:41:dc:3d:67:f1:1b:69:11:
                    39:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:54:CE:80:D7:CF:31:21:80:15:E2:9F:88:C4:9D:14:92:4A:A8:D4
            X509v3 Authority Key Identifier:
                keyid:8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/8BE12B31F7A73C05B53BE208097D713296FAC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e36312e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:e3:27:f1:0d:01:3c:68:68:41:b6:97:48:be:a5:5a:5a:02:
         0b:e5:f7:3f:65:ce:d4:49:55:db:cb:ec:26:16:05:28:c2:9a:
         ca:3a:dd:03:bb:8c:39:71:3e:b0:89:83:75:2e:6a:61:7b:32:
         64:6d:90:8f:cc:b1:fa:4f:99:38:2e:7a:c2:f9:a0:0b:21:5c:
         89:2c:6e:36:b7:2e:75:65:ac:8d:a6:13:0b:69:7f:6c:3e:50:
         c3:1f:e8:24:9f:21:fc:94:bd:d9:df:c3:8d:82:60:bf:c5:ed:
         65:62:55:2d:e6:14:d5:90:6c:5b:0b:93:f9:46:86:bd:01:40:
         42:82:68:2c:b0:a0:9c:14:b2:34:c6:ed:6e:47:f5:a3:ce:0a:
         6c:03:10:1d:82:d5:c4:8d:2d:98:68:3a:5e:59:30:ea:8f:3c:
         5c:2e:f4:b1:b8:ab:69:b0:b9:28:b3:bb:fe:f5:a8:c0:30:6d:
         d5:bb:d4:68:1d:84:57:63:86:39:d7:39:14:01:be:f8:eb:4e:
         9f:2b:44:34:f0:fa:d0:a2:27:30:55:e8:ea:c4:c4:ab:a6:9e:
         50:96:ea:1f:c0:e8:46:80:06:87:a4:ea:f2:f8:f6:0f:55:15:
         e5:27:89:c0:80:77:34:eb:98:27:76:10:e4:09:0f:37:ce:c6:
         13:25:fc:29
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKfu5RH1CILcFH4XbrcS3JONiWK4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJFMTJCMzFGN0E3M0MwNUI1M0JFMjA4MDk3RDcxMzI5
NkZBQzUyNzAeFw0yMzExMTQwMjU0MzFaFw0yNDExMTIwMjU5MzFaMDMxMTAvBgNV
BAMTKDM1NTRDRTgwRDdDRjMxMjE4MDE1RTI5Rjg4QzQ5RDE0OTI0QUE4RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+8JnltVETJcIfZPk0iAo1T3tN
IU6syeo94DkwWZpfQKe87D9MxS3P5wbqjyClHF/DUT8uxm0KnEi8027BfhraM2er
1F6wSgnxn2igpjawMfCkfnz0Cp/fJxDIIcMQI9pBoREPCQqqdcVCO2V8Mjbp1C+8
GsKc9a4W+2+pJ/2LgSHCk95iGSAcD2NbjLzTrMB3ejhxwgfuI+M7aDRcI3chcIfS
fSTX8hUZKTz57vvpXnoiM2S7P2AEHMVUzZnTUNKECYs60FvJphxfaVvIvy1egd/d
ZBxmK444Nusi1aPPglBTqW0xjRLiVFNzKMKUVTVgdSnFdLRB3D1n8RtpETnPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNVTOgNfPMSGAFeKfiMSdFJJKqNQwHwYDVR0j
BBgwFoAUi+ErMfenPAW1O+IICX1xMpb6xScwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVJFVHN1bWl0VHpKblRGd2NNRHZCYUdNWXRiTDRUMkhYVDJnam1tV2Vv
OG0vMC84QkUxMkIzMUY3QTczQzA1QjUzQkUyMDgwOTdENzEzMjk2RkFDNTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhCRTEyQjMxRjdBNzNDMDVC
NTNCRTIwODA5N0Q3MTMyOTZGQUM1MjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlSRVRzdW1pdFR6Sm5URndjTUR2QmFHTVl0Ykw0VDJIWFQyZ2ptbVdlbzhtLzAv
MzEzODM2MmUzMjMzMzYyZTM2MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNzM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC67D0wDQYJKoZIhvcNAQELBQADggEBABHjJ/EN
ATxoaEG2l0i+pVpaAgvl9z9lztRJVdvL7CYWBSjCmso63QO7jDlxPrCJg3UuamF7
MmRtkI/MsfpPmTguesL5oAshXIksbja3LnVlrI2mEwtpf2w+UMMf6CSfIfyUvdnf
w42CYL/F7WViVS3mFNWQbFsLk/lGhr0BQEKCaCywoJwUsjTG7W5H9aPOCmwDEB2C
1cSNLZhoOl5ZMOqPPFwu9LG4q2mwuSizu/71qMAwbdW71GgdhFdjhjnXORQBvvjr
Tp8rRDTw+tCiJzBV6OrExKumnlCW6h/A6EaABoek6vL49g9VFeUnicCAdzTrmCd2
EOQJDzfOxhMl/Ck=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org