Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233302e302f32342d3234203d3e203532343638.roa
File:                     3138372e3130382e3233302e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          5iLfhmqKGLrdmzT4XoBW4MSjIA9L4Xuxvpqgn1ncQmk=
Subject key identifier:   D7:70:48:29:26:DA:6E:18:E9:B3:13:F4:BD:85:5F:D7:F6:76:B6:C1
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       3D3C86433C67638A50FAEFB7A77A937598A004D3
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233302e302f32342d3234203d3e203532343638.roa
Signing time:             Fri 26 May 2023 22:53:17 +0000
ROA not before:           Fri 26 May 2023 22:48:17 +0000
ROA not after:            Fri 24 May 2024 22:53:17 +0000
asID:                     52468
IP address blocks:        187.108.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:3c:86:43:3c:67:63:8a:50:fa:ef:b7:a7:7a:93:75:98:a0:04:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: May 26 22:48:17 2023 GMT
            Not After : May 24 22:53:17 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:09:ff:e1:fa:72:76:38:e3:f0:be:a5:af:73:
                    4d:ae:9a:eb:0d:9d:02:ce:f6:30:f4:81:3a:83:1f:
                    11:fa:cc:cf:8b:5d:70:8b:15:9a:c5:f1:cf:a5:ce:
                    41:ff:0e:14:6d:1e:ae:8a:c9:cf:8f:c2:b3:44:1c:
                    f0:7f:eb:d9:f7:0e:71:48:a9:a0:89:c6:0c:9c:28:
                    4b:3b:84:ec:5c:1f:53:ee:cd:a4:53:eb:47:14:d8:
                    89:1a:ee:b0:d6:18:13:cb:54:55:8d:74:2f:dd:77:
                    5e:59:a0:d0:a0:4a:3d:48:63:37:d2:fc:bf:42:33:
                    36:bd:c5:6e:5a:79:2c:45:d7:57:80:f0:97:b9:2d:
                    50:02:87:2a:a0:35:fd:48:f6:55:46:db:da:07:7d:
                    91:25:a3:8a:b8:c7:6e:f7:94:86:13:ec:6c:26:6e:
                    9a:f6:a9:24:7c:21:42:b6:54:bb:7e:f5:90:56:7e:
                    bf:b6:57:a9:49:a1:d4:8c:17:2c:87:ef:3f:3a:11:
                    d9:45:3a:54:02:c7:99:c9:59:3c:e0:0c:50:cd:0a:
                    55:1a:55:63:55:d6:34:79:4d:7c:9c:25:86:65:2e:
                    65:21:2b:c9:11:e7:fd:2a:5d:48:01:5a:2b:47:09:
                    8f:d9:a1:e8:94:9d:ba:da:ef:ec:aa:96:88:fc:8a:
                    ef:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:70:48:29:26:DA:6E:18:E9:B3:13:F4:BD:85:5F:D7:F6:76:B6:C1
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233302e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:4a:fd:f6:c3:c6:47:1b:be:8e:51:4c:2a:61:81:d7:f1:ef:
         7c:f6:ca:d9:e8:db:55:ad:f4:b8:5a:1c:64:ed:50:f7:12:f6:
         94:11:ae:37:13:25:da:da:e1:d7:49:cf:73:68:be:9a:b4:85:
         a4:e0:b2:7e:38:49:ca:5a:a8:ca:83:38:be:79:02:ab:9d:38:
         7c:e6:ce:30:ea:72:34:67:17:30:f7:ed:4c:f0:f7:70:90:40:
         3c:42:70:d2:cf:d3:19:61:61:a3:bd:b1:2d:ee:d6:ae:0c:2c:
         10:b0:f9:47:7d:2b:3b:32:d4:45:92:60:b5:f9:5e:a4:e2:63:
         1e:f5:90:f8:69:37:91:e4:78:57:52:0c:9c:66:52:92:df:13:
         5d:85:6d:04:db:8e:8a:70:27:9c:78:0b:81:33:2b:d1:b8:e6:
         c2:a7:7e:8a:94:71:78:d2:45:d3:42:69:64:6b:e4:ac:8c:27:
         c1:00:91:04:99:b4:ab:18:d9:ad:db:e3:cc:20:40:8e:fa:72:
         12:95:4b:3f:9b:9c:af:7a:ca:49:0d:2a:1a:ff:9c:e4:62:d8:
         8d:90:f0:46:70:47:8a:3f:29:f6:63:f1:f5:6c:fe:09:b4:e8:
         f5:54:ab:fd:c2:ab:ce:75:48:39:08:1f:bb:ca:03:5a:30:cc:
         4c:aa:ca:3d
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUPTyGQzxnY4pQ+u+3p3qTdZigBNMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFCOUIzOTA1RTkzRkRFNjNBNDFCRjUxOTI5QTNDQURD
Q0EwNjRBQjAeFw0yMzA1MjYyMjQ4MTdaFw0yNDA1MjQyMjUzMTdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTMwOUZGRTFGQTcyNzYzOEUz
RjBCRUE1QUY3MzREQUU5QUVCMEQ5RDAyQ0VGNjMwRjQ4MTNBODMxRjExRkFDQ0NG
OEI1RDcwOEIxNTlBQzVGMUNGQTVDRTQxRkYwRTE0NkQxRUFFOEFDOUNGOEZDMkIz
NDQxQ0YwN0ZFQkQ5RjcwRTcxNDhBOUEwODlDNjBDOUMyODRCM0I4NEVDNUMxRjUz
RUVDREE0NTNFQjQ3MTREODg5MUFFRUIwRDYxODEzQ0I1NDU1OEQ3NDJGREQ3NzVF
NTlBMEQwQTA0QTNENDg2MzM3RDJGQ0JGNDIzMzM2QkRDNTZFNUE3OTJDNDVENzU3
ODBGMDk3QjkyRDUwMDI4NzJBQTAzNUZENDhGNjU1NDZEQkRBMDc3RDkxMjVBMzhB
QjhDNzZFRjc5NDg2MTNFQzZDMjY2RTlBRjZBOTI0N0MyMTQyQjY1NEJCN0VGNTkw
NTY3RUJGQjY1N0E5NDlBMUQ0OEMxNzJDODdFRjNGM0ExMUQ5NDUzQTU0MDJDNzk5
Qzk1OTNDRTAwQzUwQ0QwQTU1MUE1NTYzNTVENjM0Nzk0RDdDOUMyNTg2NjUyRTY1
MjEyQkM5MTFFN0ZEMkE1RDQ4MDE1QTJCNDcwOThGRDlBMUU4OTQ5REJBREFFRkVD
QUE5Njg4RkM4QUVGNkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAkwn/4fpydjjj8L6lr3NNrprrDZ0CzvYw9IE6gx8R+szPi11wixWa
xfHPpc5B/w4UbR6uisnPj8KzRBzwf+vZ9w5xSKmgicYMnChLO4TsXB9T7s2kU+tH
FNiJGu6w1hgTy1RVjXQv3XdeWaDQoEo9SGM30vy/QjM2vcVuWnksRddXgPCXuS1Q
AocqoDX9SPZVRtvaB32RJaOKuMdu95SGE+xsJm6a9qkkfCFCtlS7fvWQVn6/tlep
SaHUjBcsh+8/OhHZRTpUAseZyVk84AxQzQpVGlVjVdY0eU18nCWGZS5lISvJEef9
Kl1IAVorRwmP2aHolJ262u/sqpaI/IrvawIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FNdwSCkm2m4Y6bMT9L2FX9f2drbBMB8GA1UdIwQYMBaAFKq5s5Bek/3mOkG/UZKa
PK3MoGSrMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzAvQUFCOUIzOTA1RTkzRkRF
NjNBNDFCRjUxOTI5QTNDQURDQ0EwNjRBQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BQUI5QjM5MDVFOTNGREU2M0E0MUJGNTE5MjlBM0NBRENDQTA2
NEFCLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8wLzMxMzgzNzJlMzEzMDM4MmUzMjMz
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
u2zmMA0GCSqGSIb3DQEBCwUAA4IBAQC2Sv32w8ZHG76OUUwqYYHX8e989srZ6NtV
rfS4Whxk7VD3EvaUEa43EyXa2uHXSc9zaL6atIWk4LJ+OEnKWqjKgzi+eQKrnTh8
5s4w6nI0Zxcw9+1M8PdwkEA8QnDSz9MZYWGjvbEt7tauDCwQsPlHfSs7MtRFkmC1
+V6k4mMe9ZD4aTeR5HhXUgycZlKS3xNdhW0E246KcCeceAuBMyvRuObCp36KlHF4
0kXTQmlka+SsjCfBAJEEmbSrGNmt2+PMIECO+nISlUs/m5yvespJDSoa/5zkYtiN
kPBGcEeKPyn2Y/H1bP4JtOj1VKv9wqvOdUg5CB+7ygNaMMxMqso9
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org