Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3136372e3234392e3130342e302f32322d3232203d3e203532343638.roa
File:                     3136372e3234392e3130342e302f32322d3232203d3e203532343638.roa (raw, json)
Hash identifier:          IyLyMVzSwmlgCKCv+R88OFw/VpqFOJt9CCcdhkY9Bzw=
Subject key identifier:   87:E7:2F:FB:34:D2:2E:84:3B:5A:B2:77:3C:38:83:67:5F:30:A9:15
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       02C881D000DC1F3D79DF3FB7E380A0B60054DE81
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3136372e3234392e3130342e302f32322d3232203d3e203532343638.roa
Signing time:             Fri 29 Sep 2023 14:58:52 +0000
ROA not before:           Fri 29 Sep 2023 14:53:52 +0000
ROA not after:            Fri 27 Sep 2024 14:58:52 +0000
asID:                     52468
IP address blocks:        167.249.104.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c8:81:d0:00:dc:1f:3d:79:df:3f:b7:e3:80:a0:b6:00:54:de:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Sep 29 14:53:52 2023 GMT
            Not After : Sep 27 14:58:52 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:28:1f:d0:ed:54:2a:97:dc:f2:6e:92:8f:e3:
                    26:b2:6d:ea:28:aa:29:ca:2e:e8:fe:53:7a:df:3e:
                    41:52:7f:d5:f7:76:4a:05:a2:57:53:00:72:ee:c3:
                    34:50:51:ac:17:18:ec:24:cd:e5:8f:9b:f2:6d:91:
                    c7:7a:de:01:92:b6:cf:b6:f5:5e:bd:e0:04:28:49:
                    1e:92:b4:ad:fd:c1:f3:d6:ee:31:59:7c:8b:7f:d0:
                    62:3e:dc:b4:d2:bf:90:9d:72:4a:c1:0a:f7:9e:91:
                    f8:4c:e3:d5:ce:61:4f:cc:7a:ec:11:1b:10:ee:1c:
                    35:a8:3e:c1:ec:40:e1:94:bd:68:e4:0a:fb:f9:4f:
                    d9:ce:5a:ca:2e:17:88:53:b8:cd:31:21:f8:d6:a8:
                    6a:53:ee:61:3b:9d:a1:9d:8a:f0:2a:03:11:7d:c0:
                    fc:29:4f:32:69:99:48:ec:eb:71:47:84:30:d3:33:
                    6f:5c:44:c7:7b:a7:79:0c:c9:f9:d4:4b:09:f6:3e:
                    00:93:e3:4d:4d:09:0d:97:73:67:54:3b:43:ad:24:
                    7c:62:32:2a:10:b7:72:91:76:d1:b3:3d:c4:09:03:
                    44:0f:7b:a0:55:41:d2:3f:d3:39:fe:c1:93:b8:99:
                    9b:4d:38:03:92:7e:be:43:0c:28:0e:e2:1d:27:f2:
                    3e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E7:2F:FB:34:D2:2E:84:3B:5A:B2:77:3C:38:83:67:5F:30:A9:15
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3136372e3234392e3130342e302f32322d3232203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:ad:24:e9:fd:f7:97:a2:ed:dc:4c:36:00:84:bf:ce:53:68:
         f7:52:1e:36:aa:2c:70:7a:6e:9c:64:06:a5:d0:79:42:53:c3:
         89:a5:22:e2:c4:1c:66:bf:cd:ca:ee:43:3a:7b:4e:5a:b1:58:
         15:09:ab:8a:98:b0:11:72:f9:20:8b:dd:be:65:4c:8a:be:7a:
         29:4e:61:16:d3:e4:37:0a:d9:ad:ff:49:06:55:6d:c2:b6:f6:
         9d:f8:45:22:fe:aa:77:de:fb:b8:20:e0:e5:ca:c8:77:bd:24:
         88:18:c3:b2:0d:57:0f:e8:64:f9:83:59:5e:ac:32:e9:62:90:
         61:bb:41:f5:51:c2:60:0f:95:1d:45:fd:68:95:5e:25:63:86:
         a8:33:37:ef:aa:ce:1e:e0:ec:d8:e0:76:29:91:99:e5:c7:92:
         46:ab:de:1a:01:31:03:e6:02:82:f6:9c:a8:a6:6e:cc:a2:e2:
         cc:b4:6f:eb:05:db:1d:ac:ab:ce:72:e2:8a:c1:b5:1a:a6:91:
         34:8f:6d:35:26:b2:fc:36:e0:b5:45:ae:75:fa:28:9c:59:90:
         5b:85:89:6a:46:1e:ca:9e:9f:25:da:62:6b:db:6c:e7:86:c8:
         f3:9f:ec:83:c3:70:ba:d7:94:61:02:9a:11:9e:1e:cf:92:f5:
         52:7a:13:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:06 2024 by rpki-client on console-fra.rpki-client.org