Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233312e302f32342d3234203d3e203532343638.roa
File:                     3138372e3130382e3233312e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          GpuEA4xXmzaghpaPMstjrfHmFAV0Jir/S2Z4tfi5shU=
Subject key identifier:   EB:1C:3F:1B:A9:7E:87:85:A9:96:6F:8C:3B:84:3B:2F:B8:2F:B6:44
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       0B4CF6446A25E6CA0F698D374DBA66358899D004
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233312e302f32342d3234203d3e203532343638.roa
Signing time:             Wed 28 Feb 2024 19:00:00 +0000
ROA not before:           Wed 28 Feb 2024 18:55:00 +0000
ROA not after:            Wed 26 Feb 2025 19:00:00 +0000
asID:                     52468
IP address blocks:        187.108.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4c:f6:44:6a:25:e6:ca:0f:69:8d:37:4d:ba:66:35:88:99:d0:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Feb 28 18:55:00 2024 GMT
            Not After : Feb 26 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fb:c1:5a:ec:9c:c8:10:e4:ec:eb:a9:e5:44:
                    ea:80:a4:34:80:43:d6:7f:15:6b:57:03:92:d9:46:
                    55:45:df:b5:5c:b5:de:33:e1:d0:36:52:8e:d7:ef:
                    c7:ef:d4:c6:90:e1:df:64:fc:b7:65:e4:46:e8:35:
                    2b:cb:97:e2:dd:48:8d:47:6f:75:78:a3:d8:7b:ca:
                    15:18:02:2c:53:de:99:a6:1a:7f:0d:a2:e7:94:2d:
                    62:95:9d:20:c0:6a:eb:b9:bf:df:da:3c:0f:04:55:
                    bb:f7:00:7d:5d:a8:89:a5:2d:61:c5:e9:b2:d3:b7:
                    d3:e5:34:0c:71:95:b7:73:a1:1c:7f:66:4b:21:09:
                    bb:b5:33:6d:53:87:8b:1e:7e:81:8d:13:45:d8:9c:
                    8f:c8:f1:db:07:a2:78:1b:d1:93:d6:ac:bf:fc:b5:
                    0c:63:b2:05:9d:1a:59:3f:ee:79:21:96:bc:c9:12:
                    40:9a:53:bd:03:c8:d3:19:1b:b0:16:99:99:3c:ed:
                    b1:43:c3:b3:8e:a5:2e:0a:5c:18:6d:3a:f6:66:54:
                    0d:6b:97:dc:72:53:42:72:15:5d:69:d9:a3:c6:99:
                    b9:87:b3:d5:da:7d:23:85:37:66:d6:8b:5a:f2:78:
                    b4:66:bb:fb:b7:bf:4e:24:1d:be:cc:7a:a8:fa:79:
                    09:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1C:3F:1B:A9:7E:87:85:A9:96:6F:8C:3B:84:3B:2F:B8:2F:B6:44
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233312e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:b3:3d:47:f0:8d:a8:74:c4:03:b2:e6:41:36:f4:a2:42:50:
         20:bc:80:5b:b9:cb:9e:3d:34:84:ac:ab:bc:00:54:36:27:83:
         e3:a1:ae:ac:1e:0b:6e:15:ee:1e:0a:40:b2:00:5e:7b:41:ae:
         c6:8c:f5:94:7c:4e:f8:11:92:c1:9b:e5:15:04:73:b5:1b:07:
         18:8f:a2:1d:c0:67:14:a6:23:25:f3:02:e9:3a:e6:4d:74:67:
         be:9e:f5:26:a3:8e:99:4a:64:51:3e:b9:dd:ae:5a:6d:2f:81:
         1b:8c:53:23:a6:77:15:36:08:b2:b7:60:d9:f5:1a:db:b8:5b:
         d7:6d:15:ce:d0:e7:d7:45:4b:ce:e7:01:6f:fc:d7:28:1b:27:
         d9:f4:c3:28:7e:30:db:2e:4c:90:ed:f0:d3:48:e5:1f:fe:4e:
         f7:be:0c:26:2d:57:38:63:0d:dd:e0:d0:5c:76:72:21:be:83:
         1d:d7:12:ab:c7:97:57:11:dd:03:4e:74:49:44:ac:ac:5d:31:
         c8:c3:ef:e8:b7:6b:3e:28:b5:3e:da:7c:41:2f:89:6b:74:2a:
         13:2b:63:94:5b:ad:9f:74:69:84:8d:16:47:80:9e:9d:81:1a:
         0f:14:f1:f6:d8:59:83:12:cc:c7:8b:01:02:c2:a7:41:33:59:
         13:5c:c0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:06 2024 by rpki-client on console-fra.rpki-client.org