Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3136372e3234392e3130372e302f32342d3234203d3e203238313234.roa
File:                     3136372e3234392e3130372e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          t+VT3wyVmqA27urHxgHGjYD3eVQ1jGoCZ3peCV5n+Dc=
Subject key identifier:   48:EC:98:19:07:56:3C:A4:E9:73:B5:74:07:EE:92:42:B6:E3:C2:C2
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       3C26ED4ECF93D6A87CD98565A49700C914602570
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3136372e3234392e3130372e302f32342d3234203d3e203238313234.roa
Signing time:             Thu 02 Feb 2023 20:00:05 +0000
ROA not before:           Thu 02 Feb 2023 19:55:05 +0000
ROA not after:            Thu 01 Feb 2024 20:00:05 +0000
asID:                     28124
IP address blocks:        167.249.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:26:ed:4e:cf:93:d6:a8:7c:d9:85:65:a4:97:00:c9:14:60:25:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Feb  2 19:55:05 2023 GMT
            Not After : Feb  1 20:00:05 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:aa:f6:57:08:55:de:32:e3:a2:49:d3:4b:6e:
                    87:d5:e3:05:50:b9:5d:53:0e:58:7a:01:30:a7:12:
                    bc:91:13:70:67:27:86:7c:75:31:64:e0:07:b4:f4:
                    64:88:ff:10:85:f1:6f:82:3f:20:fa:87:49:29:b8:
                    64:e1:e1:03:8a:fa:7c:56:72:b6:cc:9a:b5:6e:16:
                    df:4a:8a:5f:76:67:96:f6:bd:c2:41:0c:da:01:e4:
                    ee:d6:51:a9:d1:01:38:d2:43:f4:5d:0d:31:40:97:
                    56:10:7f:61:f3:0d:a7:85:d6:da:f9:75:2d:26:ad:
                    58:fb:96:b1:06:b5:a8:2b:13:68:3d:12:94:7b:6c:
                    3b:62:48:f9:80:d7:bb:f7:5f:db:a7:f2:02:17:b9:
                    d8:d6:c4:27:7c:46:bf:e8:16:d8:5e:a0:ca:2b:5d:
                    4b:17:8b:ac:30:1c:9d:f0:7e:bd:53:8c:e2:e5:28:
                    12:3b:27:e7:97:6e:57:4d:26:aa:a2:5e:f7:3b:12:
                    f8:12:97:94:52:ea:06:ed:26:a6:5c:de:60:d4:c0:
                    ff:6f:61:57:1a:31:61:01:eb:d8:51:c1:e1:25:66:
                    60:33:2e:6f:ac:9e:97:08:20:a6:f3:9a:58:d0:01:
                    22:19:e7:92:75:be:36:94:b6:6b:11:8d:5b:52:ee:
                    7c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EC:98:19:07:56:3C:A4:E9:73:B5:74:07:EE:92:42:B6:E3:C2:C2
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3136372e3234392e3130372e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:60:80:ee:2c:2a:36:cc:91:03:11:16:a8:33:7f:4a:46:24:
         e2:0c:31:ec:c1:bc:f2:c0:78:60:ce:cc:c6:63:72:66:1a:61:
         d2:f2:0a:bf:32:a4:e9:c7:71:5a:59:44:7f:09:be:08:94:1f:
         17:0b:51:1b:5b:96:e4:da:63:6f:22:df:35:2a:80:63:e6:09:
         34:69:74:85:12:ed:17:bc:9d:cb:78:87:8d:6e:d0:aa:0d:46:
         38:55:6d:86:66:d7:98:b0:12:5a:01:40:11:ba:86:64:35:67:
         fa:ef:6c:83:36:bf:c6:28:00:44:87:d7:f3:33:23:4c:51:55:
         39:61:cb:cc:41:d6:14:e7:53:a2:cd:d0:e1:90:2d:b3:c8:c3:
         ae:67:f8:38:e7:51:4a:df:e6:a5:3d:70:56:f4:d1:b2:04:c0:
         07:8b:5d:fe:6d:b3:49:17:8a:24:02:74:e3:95:20:3c:ec:c0:
         83:2b:be:af:fc:6c:03:05:b6:29:86:fa:25:6c:95:61:e6:3f:
         3f:10:0a:c8:67:0c:48:b5:c7:c3:a0:45:91:f3:38:e7:66:6f:
         c7:b3:2b:ab:28:b2:38:49:a1:f3:f6:6f:a2:4b:6b:1a:b3:27:
         38:b3:78:65:78:ce:c8:3e:f2:66:c5:08:c0:bb:23:7e:b6:ae:
         ae:65:bf:28
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUPCbtTs+T1qh82YVlpJcAyRRgJXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFCOUIzOTA1RTkzRkRFNjNBNDFCRjUxOTI5QTNDQURD
Q0EwNjRBQjAeFw0yMzAyMDIxOTU1MDVaFw0yNDAyMDEyMDAwMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzVBQUY2NTcwODU1REUzMkUz
QTI0OUQzNEI2RTg3RDVFMzA1NTBCOTVENTMwRTU4N0EwMTMwQTcxMkJDOTExMzcw
NjcyNzg2N0M3NTMxNjRFMDA3QjRGNDY0ODhGRjEwODVGMTZGODIzRjIwRkE4NzQ5
MjlCODY0RTFFMTAzOEFGQTdDNTY3MkI2Q0M5QUI1NkUxNkRGNEE4QTVGNzY2Nzk2
RjZCREMyNDEwQ0RBMDFFNEVFRDY1MUE5RDEwMTM4RDI0M0Y0NUQwRDMxNDA5NzU2
MTA3RjYxRjMwREE3ODVENkRBRjk3NTJEMjZBRDU4RkI5NkIxMDZCNUE4MkIxMzY4
M0QxMjk0N0I2QzNCNjI0OEY5ODBEN0JCRjc1RkRCQTdGMjAyMTdCOUQ4RDZDNDI3
N0M0NkJGRTgxNkQ4NUVBMENBMkI1RDRCMTc4QkFDMzAxQzlERjA3RUJENTM4Q0Uy
RTUyODEyM0IyN0U3OTc2RTU3NEQyNkFBQTI1RUY3M0IxMkY4MTI5Nzk0NTJFQTA2
RUQyNkE2NUNERTYwRDRDMEZGNkY2MTU3MUEzMTYxMDFFQkQ4NTFDMUUxMjU2NjYw
MzMyRTZGQUM5RTk3MDgyMEE2RjM5QTU4RDAwMTIyMTlFNzkyNzVCRTM2OTRCNjZC
MTE4RDVCNTJFRTdDMDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxar2VwhV3jLjoknTS26H1eMFULldUw5YegEwpxK8kRNwZyeGfHUx
ZOAHtPRkiP8QhfFvgj8g+odJKbhk4eEDivp8VnK2zJq1bhbfSopfdmeW9r3CQQza
AeTu1lGp0QE40kP0XQ0xQJdWEH9h8w2nhdba+XUtJq1Y+5axBrWoKxNoPRKUe2w7
Ykj5gNe791/bp/ICF7nY1sQnfEa/6BbYXqDKK11LF4usMByd8H69U4zi5SgSOyfn
l25XTSaqol73OxL4EpeUUuoG7SamXN5g1MD/b2FXGjFhAevYUcHhJWZgMy5vrJ6X
CCCm85pY0AEiGeeSdb42lLZrEY1bUu58AQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FEjsmBkHVjyk6XO1dAfukkK248LCMB8GA1UdIwQYMBaAFKq5s5Bek/3mOkG/UZKa
PK3MoGSrMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzAvQUFCOUIzOTA1RTkzRkRF
NjNBNDFCRjUxOTI5QTNDQURDQ0EwNjRBQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BQUI5QjM5MDVFOTNGREU2M0E0MUJGNTE5MjlBM0NBRENDQTA2
NEFCLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8wLzMxMzYzNzJlMzIzNDM5MmUzMTMw
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzEzMjM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
p/lrMA0GCSqGSIb3DQEBCwUAA4IBAQAuYIDuLCo2zJEDERaoM39KRiTiDDHswbzy
wHhgzszGY3JmGmHS8gq/MqTpx3FaWUR/Cb4IlB8XC1EbW5bk2mNvIt81KoBj5gk0
aXSFEu0XvJ3LeIeNbtCqDUY4VW2GZteYsBJaAUARuoZkNWf672yDNr/GKABEh9fz
MyNMUVU5YcvMQdYU51OizdDhkC2zyMOuZ/g451FK3+alPXBW9NGyBMAHi13+bbNJ
F4okAnTjlSA87MCDK76v/GwDBbYphvolbJVh5j8/EArIZwxItcfDoEWR8zjnZm/H
syurKLI4SaHz9m+iS2sasyc4s3hleM7IPvJmxQjAuyN+tq6uZb8o
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org