Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e36322e302f32342d3234203d3e20323632373938.roa
File:                     3138362e3233362e36322e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          GM8R8YOC9c3fqDzvuNGxvl8zKdfhmfyNkQWdALEjrsc=
Subject key identifier:   F5:B0:66:4A:3E:46:51:DF:A3:C6:2D:E0:D6:08:1B:99:62:30:EE:F8
Certificate issuer:       /CN=8BE12B31F7A73C05B53BE208097D713296FAC527
Certificate serial:       147ECFABDF2EC12B336580474E24D4DB5796133D
Authority key identifier: 8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e36322e302f32342d3234203d3e20323632373938.roa
Signing time:             Tue 14 Nov 2023 02:59:46 +0000
ROA not before:           Tue 14 Nov 2023 02:54:46 +0000
ROA not after:            Tue 12 Nov 2024 02:59:46 +0000
asID:                     262798
IP address blocks:        186.236.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7e:cf:ab:df:2e:c1:2b:33:65:80:47:4e:24:d4:db:57:96:13:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE12B31F7A73C05B53BE208097D713296FAC527
        Validity
            Not Before: Nov 14 02:54:46 2023 GMT
            Not After : Nov 12 02:59:46 2024 GMT
        Subject: CN=F5B0664A3E4651DFA3C62DE0D6081B996230EEF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:20:ba:54:79:9a:1b:9e:a0:04:79:28:82:de:
                    8e:33:cb:af:36:73:5d:e6:5c:98:d9:43:04:0b:f5:
                    c5:ed:25:9b:39:70:58:2e:6e:52:c4:36:60:f5:75:
                    2c:64:ed:62:ad:5a:87:0e:e4:9a:e0:60:9a:4f:f3:
                    63:b9:db:32:7b:dd:46:fd:f7:16:35:b2:15:ee:89:
                    17:f5:83:09:8d:03:5d:19:47:90:bf:c1:e0:90:3c:
                    9e:cb:59:58:fb:cb:8e:73:4d:0f:ae:d3:57:9f:00:
                    fa:bc:99:1e:35:80:e2:7a:a0:6a:2c:11:e5:2c:31:
                    74:cf:fa:a4:ac:53:27:dd:70:c6:f5:7f:12:af:fd:
                    d2:58:e1:50:f8:ee:ea:34:e8:11:56:fa:9d:04:19:
                    e2:16:24:c1:47:c1:e5:ae:9e:19:53:f1:30:46:4d:
                    ab:75:70:48:64:e1:ac:77:1f:c5:cf:1e:28:a7:46:
                    de:85:ee:75:8b:e8:8c:78:3d:0c:3e:24:75:e5:50:
                    98:d3:4b:a9:8e:ff:c9:ce:3e:f9:c6:55:45:b4:fd:
                    c7:dd:44:76:9c:30:87:26:60:54:ca:17:ea:f8:16:
                    cc:14:60:e3:01:7e:63:24:4c:5b:c4:19:5e:7f:6b:
                    4b:03:c0:e2:a9:3f:25:43:11:c5:22:d0:4d:a6:da:
                    a5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B0:66:4A:3E:46:51:DF:A3:C6:2D:E0:D6:08:1B:99:62:30:EE:F8
            X509v3 Authority Key Identifier:
                keyid:8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/8BE12B31F7A73C05B53BE208097D713296FAC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e36322e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:75:87:14:6a:e1:2f:26:04:ec:92:66:79:c9:49:ba:0b:77:
         c5:27:5b:5c:0a:6c:9b:80:aa:0a:13:ed:75:b3:fc:dd:16:34:
         af:91:c9:a0:94:94:59:07:ca:5e:ef:fb:95:95:da:34:6b:ba:
         4f:91:34:aa:66:b3:cb:c1:82:d3:38:b1:f7:2e:df:ac:2a:9d:
         ad:c1:95:55:77:3e:35:bf:ed:23:6f:29:00:e2:62:39:0a:dd:
         95:2b:05:d2:d9:ef:89:45:0f:34:3a:42:13:4d:47:85:58:b9:
         bc:a6:ec:95:f8:7b:7d:f9:75:e2:a4:18:96:b5:47:d6:57:73:
         00:a5:eb:ba:67:94:13:3a:e2:bc:93:39:46:20:d4:f0:64:61:
         98:c2:a0:b2:df:bc:99:4a:c8:cb:05:31:d2:9c:1c:84:f4:2d:
         90:83:66:94:72:46:91:24:2d:2f:6a:e4:82:1d:ee:24:d0:01:
         38:43:53:8c:6a:6a:fd:7a:7c:28:03:f3:54:8f:76:a7:0c:bb:
         49:7c:a5:c9:31:d8:35:db:7c:68:63:3f:97:d9:17:df:70:df:
         40:d8:3e:9b:f1:50:ac:07:65:a5:98:44:27:cc:64:1a:de:00:
         36:d2:08:5d:75:da:56:af:07:5a:b2:37:c3:4e:1f:10:37:ad:
         65:30:91:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org