Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3232382e302f32342d3234203d3e203532343638.roa
File:                     3138372e3130382e3232382e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          MsNdhtgAfghtX+T/8L5Rrv6kQBx8K8kXIPwFNXOjnI4=
Subject key identifier:   C2:F5:3E:60:C3:5E:64:DA:FC:EF:56:15:CF:DD:49:97:27:7A:0F:EC
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       1FFC380FA6E9C0A9982ECC68BA356127701F29AE
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3232382e302f32342d3234203d3e203532343638.roa
Signing time:             Fri 01 Dec 2023 18:00:00 +0000
ROA not before:           Fri 01 Dec 2023 17:55:00 +0000
ROA not after:            Fri 29 Nov 2024 18:00:00 +0000
asID:                     52468
IP address blocks:        187.108.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:fc:38:0f:a6:e9:c0:a9:98:2e:cc:68:ba:35:61:27:70:1f:29:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Dec  1 17:55:00 2023 GMT
            Not After : Nov 29 18:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fb:80:bf:14:b9:b8:7e:8a:e4:a3:3f:58:81:
                    9a:ed:32:02:b7:31:8a:82:25:20:bb:29:be:0d:94:
                    f4:84:73:66:e0:e1:72:f2:83:76:45:e0:2a:f6:01:
                    d1:fc:3e:16:b1:eb:98:1a:29:21:b6:2b:da:69:4a:
                    80:12:a9:4a:8f:ba:54:63:08:45:48:e8:79:da:e1:
                    24:56:44:34:c7:6e:1e:9d:3d:fe:81:c8:e0:b0:36:
                    06:9b:c3:6a:a8:b9:bf:28:fb:88:06:18:7a:63:5b:
                    d8:95:ac:8b:90:f7:93:fe:6e:89:a3:bb:dd:66:41:
                    2f:d5:b2:8f:58:cc:5f:f1:be:fa:6b:1a:81:68:22:
                    ba:ba:64:13:85:68:39:6f:4b:e1:d3:2c:86:89:21:
                    25:fc:ba:d6:c3:36:5f:aa:a4:d1:2d:a3:ce:b4:6e:
                    de:fd:91:da:58:5d:2a:b1:79:6c:e8:9b:14:42:49:
                    aa:ce:e7:97:17:fb:5d:c6:3d:e7:2d:18:c8:38:6b:
                    93:25:9f:45:26:66:ff:d3:54:86:bd:5c:3f:62:aa:
                    a1:ce:30:4b:79:71:d3:c7:da:e0:dd:a2:07:03:35:
                    62:4d:29:4d:54:b0:56:2c:19:a9:94:84:af:3f:42:
                    2a:65:56:f0:9b:aa:a7:41:f8:80:52:bc:97:b5:cc:
                    dd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F5:3E:60:C3:5E:64:DA:FC:EF:56:15:CF:DD:49:97:27:7A:0F:EC
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3232382e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:b6:0c:19:91:75:9d:6b:0b:b4:a8:38:ef:d2:d3:88:a7:f0:
         7c:7f:cc:21:0a:ff:ab:06:34:c3:e2:56:2a:d2:52:db:b1:3f:
         5a:a9:b9:b8:45:c4:6e:c9:10:27:9c:a3:88:79:27:9d:da:6a:
         f2:1a:91:c0:36:8c:47:31:db:e5:4c:36:df:2c:50:0a:96:79:
         f3:fa:9f:f6:00:13:a8:bc:fd:ff:d2:fe:39:80:fd:f4:d4:09:
         c2:8a:07:47:03:d3:30:41:d6:0a:db:19:80:66:4e:a8:71:60:
         1a:77:52:b9:f2:6c:92:0d:3e:a6:14:59:e2:57:ec:f1:c5:75:
         c7:f5:fe:34:3b:29:97:47:10:8e:9b:67:d2:42:c5:a9:d0:9f:
         0c:8e:5c:6f:01:1c:74:de:67:19:d8:5a:f7:7b:1e:05:ea:d8:
         36:cf:e1:5b:ce:22:76:a4:ff:b0:75:7d:b1:dd:ab:15:ea:3c:
         f1:5b:a8:a5:26:20:bf:d9:2b:75:36:b5:50:20:da:04:8a:c1:
         00:55:bf:8c:4e:a0:37:92:30:26:4b:f9:8c:27:45:48:bc:7c:
         bf:8f:f1:49:2a:e7:5e:1b:b9:07:95:89:98:2d:2b:7d:9c:61:
         fe:d5:18:d6:85:47:de:b1:b6:9c:45:14:68:bb:96:9a:f6:fe:
         f8:14:9c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org