Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3232352e302f32342d3234203d3e203533313038.roa
File:                     3138372e3130382e3232352e302f32342d3234203d3e203533313038.roa (raw, json)
Hash identifier:          gRQXjsWaYMqq64HxdfbKv+EHm3tMw6+2cUgZP2fDZPs=
Subject key identifier:   A6:CB:27:36:0A:59:53:E4:97:9C:EC:EA:CC:CB:42:C5:AE:37:89:D7
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       55CA5B32497FB57B0F285D767F8AE042B3516D67
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3232352e302f32342d3234203d3e203533313038.roa
Signing time:             Thu 04 Jan 2024 21:00:01 +0000
ROA not before:           Thu 04 Jan 2024 20:55:01 +0000
ROA not after:            Thu 02 Jan 2025 21:00:01 +0000
asID:                     53108
IP address blocks:        187.108.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ca:5b:32:49:7f:b5:7b:0f:28:5d:76:7f:8a:e0:42:b3:51:6d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Jan  4 20:55:01 2024 GMT
            Not After : Jan  2 21:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bb:b2:57:53:ae:fc:c1:4e:ef:80:b9:cd:94:
                    d1:e9:9d:62:49:bd:91:b3:1c:cc:a0:73:71:4a:59:
                    98:bc:d5:76:01:33:68:db:8f:b3:9f:07:4a:b7:0b:
                    fa:0a:5d:2e:e6:fb:6d:60:d2:89:dc:43:21:37:88:
                    84:94:6c:a2:7a:0b:fc:09:1d:1f:bd:e7:64:fe:bf:
                    19:ac:db:47:06:a8:27:39:15:b1:e3:b0:e7:07:c6:
                    f8:8e:53:bd:4a:e8:2f:41:05:3c:ec:74:ec:ba:75:
                    83:53:ba:6d:f5:1c:90:03:ff:ea:66:82:ea:c9:10:
                    07:31:eb:b5:9d:3a:de:98:a5:83:1a:e2:1b:31:f6:
                    9b:ce:0c:96:89:af:d1:b0:96:8a:6a:a7:57:9e:7b:
                    cf:86:e9:4b:ce:a3:50:10:18:3f:f5:f9:c9:34:5e:
                    13:a9:33:eb:2a:e6:67:44:cc:11:32:05:ae:d1:a8:
                    c0:1f:7c:df:3c:87:72:2e:e4:08:5f:99:a4:bc:89:
                    0e:84:25:e9:2f:5b:73:de:17:0b:c9:3a:ce:d2:25:
                    6b:af:36:c7:c9:10:86:44:7a:d0:7c:1b:b4:5f:32:
                    51:6d:5f:98:fa:3a:98:6c:ab:5a:2d:9f:a6:79:3d:
                    9d:d2:ac:7e:bc:73:2a:0f:5d:df:d8:c8:0f:09:51:
                    f8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CB:27:36:0A:59:53:E4:97:9C:EC:EA:CC:CB:42:C5:AE:37:89:D7
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3232352e302f32342d3234203d3e203533313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:4a:6e:c1:08:e3:ec:d0:97:17:b0:97:96:36:ff:75:63:5f:
         00:9b:20:6a:a7:78:82:b3:c0:3a:37:b5:a8:ef:2b:ae:ae:25:
         c1:2b:6d:c2:fc:31:c2:23:a1:6a:8f:97:4a:10:d1:93:81:86:
         89:50:9f:67:ba:6d:75:58:d0:d9:c3:23:d2:72:ec:a7:e8:05:
         e5:e2:8d:d6:02:f8:e4:5e:44:29:91:e2:ca:43:c0:47:15:41:
         50:9c:d5:d2:0e:ef:34:d8:f2:c3:4d:45:09:a3:2f:f2:28:6f:
         b4:35:08:3f:64:70:c1:78:79:56:96:ed:e0:b4:da:1b:df:48:
         0b:76:07:7b:62:aa:f2:5b:24:8f:2b:bd:4c:9f:74:7e:d6:3a:
         1e:17:5e:61:7c:22:e2:fd:5b:43:95:6e:8d:8d:1d:5f:c9:0d:
         65:7e:f5:cf:6c:3d:04:95:38:1d:94:c0:fc:22:da:c6:cf:ff:
         95:c6:a3:f7:ff:a3:86:57:ec:9d:df:d8:cd:ed:40:03:3d:f2:
         93:9f:5e:57:c7:50:29:98:1f:aa:f1:3c:7c:8a:03:35:3b:8d:
         b7:80:61:f7:1e:5a:c7:1b:6c:85:4a:bd:25:5e:6b:29:be:52:
         21:a3:ea:45:3e:a1:bf:c1:34:97:17:ce:4b:37:79:3d:c8:d9:
         f4:72:f4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:39:46 2025 by rpki-client