Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e36332e302f32342d3234203d3e20323632373938.roa
File:                     3138362e3233362e36332e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          FEx+OvhD8WZ6610slzUrc/A0n+t+V/0+eeUwbLbP6uY=
Subject key identifier:   E8:59:5F:D0:C2:9C:81:0B:64:00:DD:0E:05:75:2B:57:72:E4:24:98
Certificate issuer:       /CN=8BE12B31F7A73C05B53BE208097D713296FAC527
Certificate serial:       5A1BC3920A58CBA5EA20B8B569779A172C9C712D
Authority key identifier: 8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e36332e302f32342d3234203d3e20323632373938.roa
Signing time:             Tue 14 Nov 2023 03:00:02 +0000
ROA not before:           Tue 14 Nov 2023 02:55:02 +0000
ROA not after:            Tue 12 Nov 2024 03:00:02 +0000
asID:                     262798
IP address blocks:        186.236.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:1b:c3:92:0a:58:cb:a5:ea:20:b8:b5:69:77:9a:17:2c:9c:71:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE12B31F7A73C05B53BE208097D713296FAC527
        Validity
            Not Before: Nov 14 02:55:02 2023 GMT
            Not After : Nov 12 03:00:02 2024 GMT
        Subject: CN=E8595FD0C29C810B6400DD0E05752B5772E42498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d8:31:e0:ce:98:cf:3c:cd:0e:ff:a4:fc:53:
                    0d:89:4b:ff:c6:b1:e3:33:6e:4d:93:c3:ff:74:9b:
                    4a:ea:a8:8f:83:de:8f:11:cd:57:64:56:cf:2e:17:
                    0b:07:68:57:14:e1:dc:ef:d3:ad:a4:32:c9:4d:fc:
                    a5:43:ff:e1:ae:c4:c5:9c:cc:e1:43:d1:83:3d:f0:
                    1b:e1:c9:2a:ad:4e:61:3d:e1:35:ec:d5:36:9a:bf:
                    fe:8b:e8:2d:19:ef:b4:73:07:c1:d0:a7:6c:3e:50:
                    56:d9:4e:46:86:94:6f:3d:c1:17:e0:ab:b9:91:6f:
                    38:64:af:e2:fa:b5:0a:2d:d6:a5:91:21:83:69:45:
                    3a:6b:b5:20:ad:96:99:5b:8a:5d:02:5e:84:90:07:
                    3e:ff:41:95:96:34:3d:3d:d7:87:69:6e:fe:c8:25:
                    47:be:a7:d2:af:76:40:76:76:e3:ff:8f:97:0c:c0:
                    1d:ab:3e:6a:e8:80:2c:a0:16:60:c3:cf:71:78:fd:
                    c4:fe:ae:0c:ab:e9:76:6a:05:2d:9f:aa:5f:5f:e3:
                    74:df:b3:5d:59:53:55:3f:d3:5c:cd:b4:2e:c1:d0:
                    10:ac:dd:2c:71:f3:59:e0:84:b5:ca:6c:c1:55:48:
                    39:89:a2:49:b1:81:cd:e9:db:f4:54:da:ad:2b:3e:
                    64:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:59:5F:D0:C2:9C:81:0B:64:00:DD:0E:05:75:2B:57:72:E4:24:98
            X509v3 Authority Key Identifier:
                keyid:8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/8BE12B31F7A73C05B53BE208097D713296FAC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/3138362e3233362e36332e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:42:a4:be:4b:f9:fb:6c:b8:95:99:c5:3a:3d:9b:dd:3a:35:
         42:90:f9:91:d0:15:f7:15:d0:46:b4:0b:71:fd:ab:e1:69:71:
         ae:e9:8f:5a:9e:0b:3a:7f:ba:f3:c4:9c:59:96:33:29:6c:c5:
         db:cd:bd:52:cb:51:2c:af:8c:2b:73:1e:4e:8d:36:1b:2c:02:
         5c:41:22:cf:0e:31:a6:c5:61:8b:89:4a:2d:d0:1e:bf:64:04:
         88:ad:3c:bf:4c:25:30:a8:e3:db:51:ef:d3:75:e3:08:a1:f7:
         c2:84:ba:b1:56:58:1c:76:bc:43:51:d6:08:bd:03:7b:c7:a0:
         bb:f3:07:e2:5e:00:71:6f:09:9f:b5:38:7c:a2:d5:0c:26:19:
         d4:b1:49:c0:70:30:c8:d2:d5:6a:19:f5:97:a6:b9:44:54:66:
         75:6e:ca:c9:69:c0:cb:1c:36:3c:23:e6:0a:5b:87:5d:1d:01:
         85:5d:5e:ce:74:74:a3:b8:95:2a:06:d7:13:7a:d5:ee:0c:16:
         86:50:a0:b9:62:cb:64:3b:e7:9c:75:72:c0:50:d7:29:7a:06:
         e3:4d:65:4d:59:04:ab:b0:cd:7c:f4:ef:45:8b:0f:9b:d2:fb:
         28:58:84:df:dd:ee:5c:6c:97:3f:e2:09:fe:19:13:91:f9:9e:
         24:04:e6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org