Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3136372e3234392e3130352e302f32342d3234203d3e203532343638.roa
File:                     3136372e3234392e3130352e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          fdYfNiPKR7o178Uh1vVxKaFAxK8t3A+EGToMGUafCFU=
Subject key identifier:   D6:8B:D2:56:51:14:C5:9A:35:84:13:FE:6F:DE:44:BA:21:C3:9B:23
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       584414EC8A8F81D85195519D361FEEE798332221
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3136372e3234392e3130352e302f32342d3234203d3e203532343638.roa
Signing time:             Fri 29 Sep 2023 15:00:22 +0000
ROA not before:           Fri 29 Sep 2023 14:55:22 +0000
ROA not after:            Fri 27 Sep 2024 15:00:22 +0000
asID:                     52468
IP address blocks:        167.249.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:44:14:ec:8a:8f:81:d8:51:95:51:9d:36:1f:ee:e7:98:33:22:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Sep 29 14:55:22 2023 GMT
            Not After : Sep 27 15:00:22 2024 GMT
        Subject: CN=3082010A0282010100BDABC47D62EA0E6CC43EC0868CBADB9D676ED629E718D9690F1ABC67FE388A58841EF72F835F0D983CDA9F8E897A9295719B905EC44B30190C8F47A35280969654DA5C1B49701BFA9614C28071601BEFD67CDE765F2A65F89E1DEF1B1379BD9AA611D6A1B5319BA824557F293CE0E9F760421BADBCAB12C4D26F5D2AC6F4B7164B7E958ECCA6F01B09753B4CDDF7E4310AA6D2FDF00965AC68CB46A92461C715B9E7BFD771E13A95103918EDFEB06B1D10DE73EB7B9EC30F6523621793E176A3641385C4ED241EC62D1D9F49684F1B53C4D8D1586FC8FABF72944F61AD1F90DCEB4B814B73000747F7525E1D5A92D0CBDC2E199E61C2CA42AE272BAC0D492D890203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ab:c4:7d:62:ea:0e:6c:c4:3e:c0:86:8c:ba:
                    db:9d:67:6e:d6:29:e7:18:d9:69:0f:1a:bc:67:fe:
                    38:8a:58:84:1e:f7:2f:83:5f:0d:98:3c:da:9f:8e:
                    89:7a:92:95:71:9b:90:5e:c4:4b:30:19:0c:8f:47:
                    a3:52:80:96:96:54:da:5c:1b:49:70:1b:fa:96:14:
                    c2:80:71:60:1b:ef:d6:7c:de:76:5f:2a:65:f8:9e:
                    1d:ef:1b:13:79:bd:9a:a6:11:d6:a1:b5:31:9b:a8:
                    24:55:7f:29:3c:e0:e9:f7:60:42:1b:ad:bc:ab:12:
                    c4:d2:6f:5d:2a:c6:f4:b7:16:4b:7e:95:8e:cc:a6:
                    f0:1b:09:75:3b:4c:dd:f7:e4:31:0a:a6:d2:fd:f0:
                    09:65:ac:68:cb:46:a9:24:61:c7:15:b9:e7:bf:d7:
                    71:e1:3a:95:10:39:18:ed:fe:b0:6b:1d:10:de:73:
                    eb:7b:9e:c3:0f:65:23:62:17:93:e1:76:a3:64:13:
                    85:c4:ed:24:1e:c6:2d:1d:9f:49:68:4f:1b:53:c4:
                    d8:d1:58:6f:c8:fa:bf:72:94:4f:61:ad:1f:90:dc:
                    eb:4b:81:4b:73:00:07:47:f7:52:5e:1d:5a:92:d0:
                    cb:dc:2e:19:9e:61:c2:ca:42:ae:27:2b:ac:0d:49:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8B:D2:56:51:14:C5:9A:35:84:13:FE:6F:DE:44:BA:21:C3:9B:23
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3136372e3234392e3130352e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:2f:79:d0:f5:d8:93:42:30:c4:61:e9:54:7c:e1:3f:20:88:
         3c:70:b2:91:72:1f:f9:38:3b:99:22:89:70:cc:f5:13:e3:fd:
         54:76:c8:6c:55:a8:57:4f:5a:88:c7:4d:88:46:b1:03:e2:4a:
         ae:9e:6e:73:66:ba:00:b7:c4:b8:9b:c8:a6:5b:17:df:f3:02:
         79:83:e7:8b:f7:55:de:87:c5:c7:06:ba:0c:b5:3e:0d:29:3c:
         8b:15:71:15:43:ec:c2:8d:17:15:93:70:d2:25:c4:3b:b3:00:
         e2:16:b4:9b:b1:66:b8:57:32:6e:bb:d5:d7:ab:45:6d:6d:ea:
         d5:c0:02:07:b1:1f:6d:7d:4d:67:c3:42:3b:c0:3f:c5:78:12:
         b3:49:ed:e8:64:1c:79:df:c3:16:ef:21:53:19:f9:08:dd:15:
         9e:52:35:ae:9c:fa:dc:22:73:e6:33:3a:e3:0f:d7:5b:e7:44:
         b8:47:c8:74:46:94:b8:72:a6:26:11:a9:bd:e6:28:23:e7:74:
         92:71:0a:90:8b:57:f7:b7:2c:30:f2:bb:21:4b:4f:ab:07:d6:
         83:83:13:aa:cb:59:ec:ae:a6:01:23:ee:b8:55:f8:1d:2b:b5:
         af:ca:24:e2:d0:b0:02:81:73:36:aa:67:66:96:9f:4c:8d:cc:
         a3:fc:62:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org