Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3232342e302f32322d3232203d3e203533313038.roa
File:                     3138372e3130382e3232342e302f32322d3232203d3e203533313038.roa (raw, json)
Hash identifier:          hFlQek+f/iZsp5p1G8t30TYU/G9TvmazI/YuJ1Wx+vU=
Subject key identifier:   22:8E:C2:5B:49:FF:C7:95:D4:96:A8:BC:AB:81:7C:43:B4:16:EB:2F
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       368BE5D167E2824B80A879FFE00C1D83541CF543
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3232342e302f32322d3232203d3e203533313038.roa
Signing time:             Mon 15 Jan 2024 20:00:00 +0000
ROA not before:           Mon 15 Jan 2024 19:55:00 +0000
ROA not after:            Mon 13 Jan 2025 20:00:00 +0000
asID:                     53108
IP address blocks:        187.108.224.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:8b:e5:d1:67:e2:82:4b:80:a8:79:ff:e0:0c:1d:83:54:1c:f5:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Jan 15 19:55:00 2024 GMT
            Not After : Jan 13 20:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a5:67:d6:a3:1e:30:c6:ce:f0:c7:5a:73:36:
                    91:89:0b:f7:ee:2e:26:9f:aa:9a:3a:4e:2e:fc:f5:
                    66:5b:fd:63:85:e3:b1:c5:18:13:cf:03:92:b8:88:
                    7a:4d:64:0b:41:46:f7:eb:a7:c5:2e:c2:dd:4a:ed:
                    ec:85:5b:21:7f:c8:87:a7:f2:ef:1a:6c:14:3a:b8:
                    62:b9:90:61:93:15:87:2e:cd:b4:54:4e:c3:5b:54:
                    5b:c1:9d:48:3d:43:82:5a:1b:3d:1c:38:6b:dd:66:
                    e0:d8:42:6a:a9:8e:7d:80:25:1e:e2:31:0f:7b:8c:
                    6e:0a:4d:ee:1a:a6:ed:d6:09:0a:71:0a:4a:e0:77:
                    3e:ae:a2:a4:26:14:25:52:80:c7:dc:38:69:78:09:
                    43:09:18:ac:e9:c4:dd:42:12:4b:59:99:5c:48:13:
                    56:2b:60:6e:b1:31:5a:3f:06:b5:32:a1:d0:e8:e7:
                    a5:e0:d3:95:08:6d:77:e4:ac:41:90:d6:36:fd:76:
                    02:ff:a3:2c:45:a6:cf:d9:be:62:62:62:c0:d6:b2:
                    2c:6e:58:4b:c1:dd:63:65:b7:87:69:38:c9:5e:03:
                    eb:b6:c3:21:88:25:95:c7:b5:88:d5:2b:44:57:8a:
                    65:d0:0c:24:b7:6e:3e:16:de:1c:39:08:65:e8:71:
                    78:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8E:C2:5B:49:FF:C7:95:D4:96:A8:BC:AB:81:7C:43:B4:16:EB:2F
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3232342e302f32322d3232203d3e203533313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:a3:86:29:80:17:f7:bb:8e:0d:8b:eb:75:01:99:8e:06:1b:
         e8:fd:4e:3c:b0:27:d5:ba:47:61:4e:76:b4:d8:7a:94:f5:68:
         58:91:84:9e:7c:13:13:4a:cd:c8:4e:6b:9d:23:1a:f4:37:46:
         a4:99:7b:d3:b0:a5:0d:1c:ca:15:fa:4b:2f:db:b8:3b:7e:09:
         64:c5:d9:87:12:1d:b4:50:76:13:71:ee:53:87:8b:52:dd:f0:
         a5:a8:33:a5:f3:42:ce:3e:77:5e:21:1d:3d:58:0c:7f:74:aa:
         da:5d:27:52:47:bc:e6:0e:76:be:5d:e6:92:35:70:ac:18:01:
         22:9b:ca:59:b3:52:c7:a5:59:ce:21:b2:af:1b:54:c1:5c:6a:
         03:91:e4:67:5a:12:54:43:f4:1f:7b:a4:42:66:a3:b0:f9:c6:
         cd:1f:ad:56:cc:a6:74:e9:7b:b4:ff:3b:53:f8:94:f7:b6:32:
         42:24:ef:64:20:4e:8b:e2:62:c4:92:0a:8d:d1:50:2a:27:e2:
         c5:cf:0e:2c:37:02:2f:db:1e:21:6d:4e:81:16:81:6b:3a:36:
         60:fb:fd:07:49:76:56:88:1a:b3:45:41:ec:26:f3:24:87:59:
         4d:5e:37:0b:3c:a5:3c:44:63:97:03:58:70:96:6d:f2:f8:9c:
         a0:5a:3f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org