Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3232392e302f32342d3234203d3e203532343638.roa
File:                     3138372e3130382e3232392e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          eKWTXDqQTZKggLDPuwpNM2+X8eBunzGezNuWS695Vko=
Subject key identifier:   91:B2:8A:64:A4:4F:A9:35:70:E4:AE:B2:EF:4A:43:AE:B2:DD:D0:C5
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       39B3B4A1E5F835B2D12A3B736E23585A3A727C8E
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3232392e302f32342d3234203d3e203532343638.roa
Signing time:             Fri 22 Sep 2023 17:45:06 +0000
ROA not before:           Fri 22 Sep 2023 17:40:06 +0000
ROA not after:            Fri 20 Sep 2024 17:45:06 +0000
asID:                     52468
IP address blocks:        187.108.229.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b3:b4:a1:e5:f8:35:b2:d1:2a:3b:73:6e:23:58:5a:3a:72:7c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Sep 22 17:40:06 2023 GMT
            Not After : Sep 20 17:45:06 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:40:fa:75:9c:0d:a1:85:99:e4:ba:fa:74:4a:
                    29:69:92:6e:f7:83:b9:fa:f1:36:f6:15:a6:19:d4:
                    0a:51:98:6b:36:9e:2f:28:1c:50:3c:8e:dd:39:f6:
                    65:a6:fc:81:0d:72:b3:81:93:65:f1:cc:27:48:e6:
                    b3:c5:d4:cd:59:54:70:53:45:86:2a:56:be:97:9a:
                    36:63:71:83:aa:e1:db:3d:85:ec:aa:14:56:56:f5:
                    af:a5:f0:95:6d:bf:4d:90:35:cc:d3:49:2a:cf:af:
                    29:74:73:6f:f6:ea:ea:7f:79:84:7e:48:2e:bf:61:
                    a3:b4:fc:6b:69:88:d3:7b:88:7d:90:0e:ef:d7:04:
                    bd:65:64:69:7b:49:96:f4:8c:60:86:87:a5:d1:a0:
                    f1:56:f0:35:fd:a9:f4:d6:ef:10:5a:2c:b6:cf:d8:
                    01:36:89:7d:f5:f7:4e:90:fe:1e:f8:47:c1:e4:51:
                    06:3f:e4:98:66:6a:5f:53:91:d9:77:e2:8e:65:fb:
                    a1:9c:db:2e:d0:6b:d2:18:2b:54:af:1a:84:f9:61:
                    46:d2:63:1f:2f:3f:a2:a8:48:6b:2a:40:51:41:27:
                    04:ea:43:b1:9d:0c:c8:3b:fb:07:a7:0c:ff:2e:3a:
                    70:6f:43:6f:15:32:f8:4b:56:39:58:42:e0:39:e4:
                    81:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B2:8A:64:A4:4F:A9:35:70:E4:AE:B2:EF:4A:43:AE:B2:DD:D0:C5
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3232392e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:9c:36:f9:7e:8d:56:9f:12:6b:e3:6a:81:91:93:58:5f:2a:
         50:76:98:f3:58:bf:ca:37:17:fb:45:07:86:b9:c2:03:0f:b7:
         1f:bf:47:c8:a2:71:e8:c7:05:05:40:7b:dc:22:2e:5f:2a:91:
         96:be:98:5a:45:9a:35:e6:26:16:c0:96:a0:e5:d3:85:54:ce:
         d5:4d:36:8c:fe:eb:55:f8:bf:17:8c:b4:d2:00:d2:71:23:f4:
         86:95:24:b7:b4:3e:a7:77:f4:93:2c:64:7e:fc:e7:0f:44:56:
         4b:14:90:8b:2d:cd:d5:3e:59:ba:da:4f:66:42:6b:2b:7c:cc:
         8c:19:2c:63:17:f0:d7:2b:a1:1e:44:75:2a:76:bd:40:82:af:
         7b:24:b6:03:af:7b:68:c6:ad:13:06:ef:3c:e1:96:55:76:fe:
         c2:9e:9e:d4:8e:bc:58:e2:cd:d5:78:4c:b8:98:1d:64:a3:47:
         30:04:d0:ef:46:fc:9d:46:14:96:5b:3e:73:7a:8b:41:00:01:
         a1:69:0f:45:8c:a3:ec:5f:ac:9b:de:67:b5:f8:d3:f2:c0:63:
         d2:fc:b1:43:65:bd:2a:81:e8:b1:9d:c3:81:51:24:0c:82:a9:
         3c:dd:fa:13:fc:55:05:0a:d7:65:9a:52:f9:d2:50:ee:0f:83:
         66:62:7c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org