Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3136372e3234392e3130362e302f32342d3234203d3e203532343638.roa
File:                     3136372e3234392e3130362e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          bwL3egfkGcW+Yqs19iYj5smqWXSpTl7SMeptUMzCMuQ=
Subject key identifier:   D7:A9:D9:18:C9:73:DD:E0:94:A7:17:FD:E5:63:1E:24:6D:87:69:7C
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       2DE9C84ACCFEABD9C98D715452B6742F9427B1EE
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3136372e3234392e3130362e302f32342d3234203d3e203532343638.roa
Signing time:             Fri 29 Sep 2023 15:01:02 +0000
ROA not before:           Fri 29 Sep 2023 14:56:02 +0000
ROA not after:            Fri 27 Sep 2024 15:01:02 +0000
asID:                     52468
IP address blocks:        167.249.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e9:c8:4a:cc:fe:ab:d9:c9:8d:71:54:52:b6:74:2f:94:27:b1:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Sep 29 14:56:02 2023 GMT
            Not After : Sep 27 15:01:02 2024 GMT
        Subject: CN=3082010A0282010100D77B4D80FD17644E2538C8F9CC82D327514E31C9584C46CC08266833C7B542D5E781188496CFA5645B060DBC1C41BEE823CE8349EAE7FB74C8703839A152E2F8D0D1A48B5E36C69ABFDF50B126A9B6E036E67BA1E37150E03EFD910CB0B02DF334D311750D50EDB4A7AC1BE90A76D26182B169AFB996BCBA1E8951C958BDF04B8FDFB1D315BFE8871D531D0C8E11E5C1EF7447FEC52E23DA4631E5512BFE67462141D5526658E7778969E832644998ED9D201D3D32203F0C5982F092FBCB4A09FF7D1E10F6800FDA941BED7059E8B78C2C1DC5153BF64776624A3FF96D71891E27C74EF09BAC563BA2B3F1A619C032266E19E2F4ED07297E2921801460661C210203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7b:4d:80:fd:17:64:4e:25:38:c8:f9:cc:82:
                    d3:27:51:4e:31:c9:58:4c:46:cc:08:26:68:33:c7:
                    b5:42:d5:e7:81:18:84:96:cf:a5:64:5b:06:0d:bc:
                    1c:41:be:e8:23:ce:83:49:ea:e7:fb:74:c8:70:38:
                    39:a1:52:e2:f8:d0:d1:a4:8b:5e:36:c6:9a:bf:df:
                    50:b1:26:a9:b6:e0:36:e6:7b:a1:e3:71:50:e0:3e:
                    fd:91:0c:b0:b0:2d:f3:34:d3:11:75:0d:50:ed:b4:
                    a7:ac:1b:e9:0a:76:d2:61:82:b1:69:af:b9:96:bc:
                    ba:1e:89:51:c9:58:bd:f0:4b:8f:df:b1:d3:15:bf:
                    e8:87:1d:53:1d:0c:8e:11:e5:c1:ef:74:47:fe:c5:
                    2e:23:da:46:31:e5:51:2b:fe:67:46:21:41:d5:52:
                    66:58:e7:77:89:69:e8:32:64:49:98:ed:9d:20:1d:
                    3d:32:20:3f:0c:59:82:f0:92:fb:cb:4a:09:ff:7d:
                    1e:10:f6:80:0f:da:94:1b:ed:70:59:e8:b7:8c:2c:
                    1d:c5:15:3b:f6:47:76:62:4a:3f:f9:6d:71:89:1e:
                    27:c7:4e:f0:9b:ac:56:3b:a2:b3:f1:a6:19:c0:32:
                    26:6e:19:e2:f4:ed:07:29:7e:29:21:80:14:60:66:
                    1c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A9:D9:18:C9:73:DD:E0:94:A7:17:FD:E5:63:1E:24:6D:87:69:7C
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3136372e3234392e3130362e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:4c:5f:db:ed:03:8a:a6:67:c1:9c:9a:e8:ab:31:a1:c7:25:
         2f:6c:84:0b:d9:16:fb:f9:b9:8b:2e:e4:60:00:a0:f0:af:35:
         a2:9b:89:ce:16:0f:ef:17:e0:83:1e:b2:ae:01:0c:60:c1:70:
         27:4b:9c:dd:67:ad:bc:8a:b3:5a:40:24:9c:ba:82:d5:60:2a:
         af:22:d0:4b:81:c2:74:0d:ef:01:fd:e6:e0:c6:8b:05:4d:1a:
         28:a6:99:8e:a0:63:f4:ed:6b:62:b3:91:59:a6:32:98:3a:37:
         d0:cd:9c:30:4c:76:a1:d2:b6:ab:0e:1b:af:63:c4:be:8a:0d:
         4a:42:58:b6:75:04:bb:64:ff:de:d8:cd:7c:fb:6a:4d:1f:f3:
         88:b7:e2:a7:c4:90:8d:ef:69:df:5a:52:da:ee:d1:d8:5c:32:
         ce:55:5e:3b:aa:c1:16:3b:5e:55:a2:40:b4:b8:9f:da:78:e6:
         33:78:f2:b0:be:7a:16:9a:7e:2d:e9:71:ed:af:18:74:69:a9:
         08:d7:4b:7f:d1:c7:28:91:cb:54:63:66:fa:f2:65:52:b7:3c:
         ea:41:46:c6:50:1b:8c:27:b4:29:e4:8c:c6:a4:4f:86:25:2c:
         d2:a4:e8:58:7d:47:13:ed:c8:9e:a0:e6:62:41:1d:af:c1:f8:
         6c:40:c4:bd
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIULenISsz+q9nJjXFUUrZ0L5Qnse4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFCOUIzOTA1RTkzRkRFNjNBNDFCRjUxOTI5QTNDQURD
Q0EwNjRBQjAeFw0yMzA5MjkxNDU2MDJaFw0yNDA5MjcxNTAxMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDc3QjREODBGRDE3NjQ0RTI1
MzhDOEY5Q0M4MkQzMjc1MTRFMzFDOTU4NEM0NkNDMDgyNjY4MzNDN0I1NDJENUU3
ODExODg0OTZDRkE1NjQ1QjA2MERCQzFDNDFCRUU4MjNDRTgzNDlFQUU3RkI3NEM4
NzAzODM5QTE1MkUyRjhEMEQxQTQ4QjVFMzZDNjlBQkZERjUwQjEyNkE5QjZFMDM2
RTY3QkExRTM3MTUwRTAzRUZEOTEwQ0IwQjAyREYzMzREMzExNzUwRDUwRURCNEE3
QUMxQkU5MEE3NkQyNjE4MkIxNjlBRkI5OTZCQ0JBMUU4OTUxQzk1OEJERjA0QjhG
REZCMUQzMTVCRkU4ODcxRDUzMUQwQzhFMTFFNUMxRUY3NDQ3RkVDNTJFMjNEQTQ2
MzFFNTUxMkJGRTY3NDYyMTQxRDU1MjY2NThFNzc3ODk2OUU4MzI2NDQ5OThFRDlE
MjAxRDNEMzIyMDNGMEM1OTgyRjA5MkZCQ0I0QTA5RkY3RDFFMTBGNjgwMEZEQTk0
MUJFRDcwNTlFOEI3OEMyQzFEQzUxNTNCRjY0Nzc2NjI0QTNGRjk2RDcxODkxRTI3
Qzc0RUYwOUJBQzU2M0JBMkIzRjFBNjE5QzAzMjI2NkUxOUUyRjRFRDA3Mjk3RTI5
MjE4MDE0NjA2NjFDMjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA13tNgP0XZE4lOMj5zILTJ1FOMclYTEbMCCZoM8e1QtXngRiEls+l
ZFsGDbwcQb7oI86DSern+3TIcDg5oVLi+NDRpIteNsaav99QsSaptuA25nuh43FQ
4D79kQywsC3zNNMRdQ1Q7bSnrBvpCnbSYYKxaa+5lry6HolRyVi98EuP37HTFb/o
hx1THQyOEeXB73RH/sUuI9pGMeVRK/5nRiFB1VJmWOd3iWnoMmRJmO2dIB09MiA/
DFmC8JL7y0oJ/30eEPaAD9qUG+1wWei3jCwdxRU79kd2Yko/+W1xiR4nx07wm6xW
O6Kz8aYZwDImbhni9O0HKX4pIYAUYGYcIQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FNep2RjJc93glKcX/eVjHiRth2l8MB8GA1UdIwQYMBaAFKq5s5Bek/3mOkG/UZKa
PK3MoGSrMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzAvQUFCOUIzOTA1RTkzRkRF
NjNBNDFCRjUxOTI5QTNDQURDQ0EwNjRBQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BQUI5QjM5MDVFOTNGREU2M0E0MUJGNTE5MjlBM0NBRENDQTA2
NEFCLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8wLzMxMzYzNzJlMzIzNDM5MmUzMTMw
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
p/lqMA0GCSqGSIb3DQEBCwUAA4IBAQAoTF/b7QOKpmfBnJroqzGhxyUvbIQL2Rb7
+bmLLuRgAKDwrzWim4nOFg/vF+CDHrKuAQxgwXAnS5zdZ628irNaQCScuoLVYCqv
ItBLgcJ0De8B/ebgxosFTRooppmOoGP07Wtis5FZpjKYOjfQzZwwTHah0rarDhuv
Y8S+ig1KQli2dQS7ZP/e2M18+2pNH/OIt+KnxJCN72nfWlLa7tHYXDLOVV47qsEW
O15VokC0uJ/aeOYzePKwvnoWmn4t6XHtrxh0aakI10t/0ccokctUY2b68mVStzzq
QUbGUBuMJ7Qp5IzGpE+GJSzSpOhYfUcT7cieoOZiQR2vwfhsQMS9
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:06 2024 by rpki-client on console-fra.rpki-client.org