Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3232342e302f32342d3234203d3e203533313038.roa
File:                     3138372e3130382e3232342e302f32342d3234203d3e203533313038.roa (raw, json)
Hash identifier:          UKoaFsFfmrSow+MR7l9IsqWdeahKsrKIzOgw0ImFrOI=
Subject key identifier:   BD:B2:2E:72:BF:DD:FE:BA:90:D8:19:AD:2A:2A:BD:55:01:29:F9:2B
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       0E2C485989DE8F7324A1BA6143C1C4CAE4BAEEA8
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3232342e302f32342d3234203d3e203533313038.roa
Signing time:             Thu 04 Jan 2024 21:00:01 +0000
ROA not before:           Thu 04 Jan 2024 20:55:01 +0000
ROA not after:            Thu 02 Jan 2025 21:00:01 +0000
asID:                     53108
IP address blocks:        187.108.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:2c:48:59:89:de:8f:73:24:a1:ba:61:43:c1:c4:ca:e4:ba:ee:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Jan  4 20:55:01 2024 GMT
            Not After : Jan  2 21:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dd:05:6e:1f:e7:74:e1:38:a7:54:b2:be:9c:
                    66:25:94:ef:80:01:06:80:c7:e3:64:d6:20:8c:70:
                    27:92:92:58:6b:52:a4:31:26:85:14:dd:d3:18:31:
                    98:33:5c:8d:68:71:9d:1c:9c:5c:37:67:e2:3f:e1:
                    38:31:cf:59:42:c2:fa:23:3e:5b:aa:12:77:cc:ac:
                    87:5d:2a:96:3d:21:3b:bc:25:c1:c4:23:86:fe:8e:
                    11:8a:84:08:7b:d7:33:03:9c:90:9a:24:f7:bf:17:
                    c1:14:a3:52:92:47:45:09:6d:49:97:de:07:1c:ba:
                    02:09:e6:44:01:1f:1e:af:2c:b8:6a:63:b0:11:d5:
                    3d:81:56:a6:61:f6:e2:a6:c1:4e:3c:04:0e:e3:2f:
                    2b:ec:21:c4:73:82:6d:7b:f9:6b:26:b7:fc:59:3c:
                    97:ce:0e:69:ea:b2:4c:d1:41:75:80:49:6e:84:43:
                    7f:04:aa:0c:d7:91:6a:ba:1e:e8:4e:60:5e:6a:a3:
                    54:34:84:88:4b:49:88:39:4c:ab:45:51:ac:82:f9:
                    02:28:4b:1d:84:79:60:dc:86:55:9d:9f:ae:03:ea:
                    f3:4b:5c:77:12:95:ac:e2:f7:0d:d5:3a:53:ff:d9:
                    3e:27:12:0f:84:bf:32:0c:ce:09:42:aa:38:de:16:
                    f5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B2:2E:72:BF:DD:FE:BA:90:D8:19:AD:2A:2A:BD:55:01:29:F9:2B
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3232342e302f32342d3234203d3e203533313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:66:87:1a:f4:86:ab:ab:d6:b7:5c:c5:69:da:40:e7:8c:ed:
         24:16:7d:6a:0e:94:74:27:10:72:f3:12:cb:41:b7:2d:0d:f0:
         ba:8d:54:a9:ab:ff:23:3b:dc:d0:b2:ab:f3:c6:8c:d4:1f:85:
         0c:43:77:b8:aa:64:b9:0b:2a:16:26:70:da:87:76:f9:95:90:
         02:63:05:36:8e:e2:ef:6d:03:51:fb:b4:c3:f1:2d:58:3f:ef:
         cc:14:f3:0f:8a:b9:e8:e1:60:18:de:42:98:57:04:1b:23:4e:
         ab:4c:2a:ca:07:79:e6:4e:a4:0a:9c:c9:cd:45:bc:5b:0b:11:
         67:ee:98:ce:07:76:f3:71:59:33:3a:5b:3e:96:f0:fd:de:42:
         a3:14:6f:db:31:01:b3:78:cf:d2:3e:1e:56:23:81:3b:6d:97:
         41:9e:09:ff:58:1d:87:50:b4:3b:34:50:19:31:5a:af:c8:08:
         5b:80:65:79:f6:2f:a9:8a:ec:6f:d7:35:f9:10:77:92:c2:38:
         c1:ff:34:cb:e8:b6:bf:b9:89:eb:c4:38:e3:3b:c2:8c:9a:86:
         bc:44:7b:29:be:58:73:be:4f:e9:f1:e3:a8:09:6b:87:46:48:
         70:94:86:49:04:f9:9f:8d:67:58:e5:7b:1a:bf:ba:64:e9:e1:
         c0:52:e3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:09 2024 by rpki-client on console-ams.rpki-client.org