Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3232372e302f32342d3234203d3e203533313038.roa
File:                     3138372e3130382e3232372e302f32342d3234203d3e203533313038.roa (raw, json)
Hash identifier:          MdaFA9YCAeEPoDth+BCmHL19ZWTVJZGDNL9KKifvYBc=
Subject key identifier:   6D:10:E7:AA:4B:F6:0F:44:57:FC:43:F0:56:96:97:99:D9:3D:E8:61
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       768FFC6BCAE3055D1A1F6D50AFDF45855F917045
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3232372e302f32342d3234203d3e203533313038.roa
Signing time:             Thu 04 Jan 2024 21:00:00 +0000
ROA not before:           Thu 04 Jan 2024 20:55:00 +0000
ROA not after:            Thu 02 Jan 2025 21:00:00 +0000
asID:                     53108
IP address blocks:        187.108.227.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:8f:fc:6b:ca:e3:05:5d:1a:1f:6d:50:af:df:45:85:5f:91:70:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Jan  4 20:55:00 2024 GMT
            Not After : Jan  2 21:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:db:bd:6f:a6:f2:b7:20:03:f6:ed:64:ed:64:
                    c6:de:ad:f9:0d:37:eb:01:7e:a6:0a:93:b0:7a:cb:
                    72:0b:db:f2:1d:31:0d:1b:ca:6d:ba:54:15:68:c6:
                    56:98:e1:49:7f:ae:97:00:19:9b:86:8b:00:5f:6e:
                    a2:e2:ac:ea:6e:4b:3c:ea:91:5a:ce:d6:2c:0f:eb:
                    8c:d9:ce:43:8b:b2:6b:54:07:3e:41:33:1b:b9:82:
                    bd:9f:0f:31:69:cd:79:55:5d:57:f7:c9:0c:03:44:
                    99:fd:53:85:6e:6f:3a:f6:a1:db:b7:f3:d7:91:b2:
                    5a:05:22:d0:0a:4d:de:8a:df:22:0d:b7:b5:ed:94:
                    16:bc:0a:e7:34:4d:ac:79:ce:30:85:eb:fd:21:e6:
                    1a:74:02:f5:ae:0c:58:63:9e:e3:9b:30:76:0c:d9:
                    e5:9e:0b:46:c8:fa:af:8e:3f:c3:2a:03:8d:4e:4c:
                    7d:96:ce:24:e3:e8:17:01:07:bc:2f:20:51:dd:f7:
                    ac:b5:a9:e7:59:3e:b5:af:42:94:7c:5a:0f:63:9e:
                    17:a3:ba:7e:c2:79:e0:d1:84:ab:3f:48:8f:24:f7:
                    3a:6d:d8:32:5f:93:b0:2f:57:b0:49:d5:da:13:08:
                    5f:da:47:31:40:d1:70:09:33:23:6c:db:3a:5f:58:
                    4a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:10:E7:AA:4B:F6:0F:44:57:FC:43:F0:56:96:97:99:D9:3D:E8:61
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3232372e302f32342d3234203d3e203533313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:26:8c:3d:63:50:40:4a:4b:a5:68:ed:06:75:5d:38:02:7f:
         44:10:18:84:5a:d3:80:81:a8:74:c4:2a:13:46:6c:b7:76:6b:
         ef:30:75:9b:07:f6:56:54:31:fb:5d:db:52:f5:4c:13:8e:a1:
         5b:c0:c4:1b:60:43:5a:9b:80:0f:67:ac:77:63:d4:ff:8d:2e:
         f0:79:af:1a:49:ba:0d:0b:83:8b:a9:94:c9:17:a9:4d:81:e6:
         81:fc:67:20:b9:a7:6b:1a:88:bd:68:20:d3:67:73:f0:3a:c8:
         c6:54:ee:cc:7a:87:b8:33:18:0a:d2:bb:1e:98:90:1c:55:a4:
         1a:7b:de:34:03:7b:af:8b:7d:22:d1:6c:59:c1:77:a4:b0:ac:
         db:17:c6:a3:7d:b6:d8:ee:04:f5:34:af:92:3e:a0:ca:64:13:
         94:9d:b0:f2:85:62:69:a2:e0:af:18:ef:af:14:a0:bd:22:7c:
         03:9b:b4:c7:81:3f:88:22:72:a1:65:5a:08:c9:08:80:42:5e:
         a9:1c:29:cc:f3:76:c6:84:d4:f7:65:3f:2f:9c:2c:d5:82:8b:
         3f:3e:9b:31:9b:56:cd:d6:04:99:b0:66:e8:89:0c:d2:84:3e:
         52:91:ea:4c:6a:24:1f:e0:27:af:b5:a5:14:dc:ef:e7:f7:88:
         df:74:23:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:10 2025 by rpki-client