Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233322e302f32322d3232203d3e203532343638.roa
File:                     3138372e3130382e3233322e302f32322d3232203d3e203532343638.roa (raw, json)
Hash identifier:          xQibJmBJTKO3ZbGUXiJ48f/egAumYyX+2Tv6Ruw0UJo=
Subject key identifier:   23:35:F9:71:53:8B:E0:FF:4B:8C:35:43:A2:E4:A8:DF:EB:CA:87:C0
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       10F03B836FF2B16424E13AB47935CCE15EC523F3
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233322e302f32322d3232203d3e203532343638.roa
Signing time:             Tue 13 Jun 2023 20:00:00 +0000
ROA not before:           Tue 13 Jun 2023 19:55:00 +0000
ROA not after:            Tue 11 Jun 2024 20:00:00 +0000
asID:                     52468
IP address blocks:        187.108.232.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f0:3b:83:6f:f2:b1:64:24:e1:3a:b4:79:35:cc:e1:5e:c5:23:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Jun 13 19:55:00 2023 GMT
            Not After : Jun 11 20:00:00 2024 GMT
        Subject: CN=3082010A0282010100CF59B176118F1FBB41C49A7E5BF0FEC2C56E513C9397F239192C4E1182963B671BA3FE1D176A74D2B96B325D3C07E15322BDAB351785004B24F7431DDCA3E448D31EFF635686650AE544D936B78DC72A7C7229F61D29417BD2E02F69AE76A105DE1534ACB871B6967DADD0932668D3FD7ABB2940F80B771DA013047C6A2FAA1D6E19B2A151CE74472E1A61DD984A7B01E9F18C14AD488CF54E6977EA488C7F02844EF40D2536B2587999ECB776D6190B23E11BDDD4F356F4E6AF1AB758D171FEDC2BAC70F60D642EA5CF713FECD57CC7836416BA38E7488232B9F99489341DF552DBB82A6FB4AB4BA3FB98A860F8635122109408356D7B2F5757EBCD37244C3F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:59:b1:76:11:8f:1f:bb:41:c4:9a:7e:5b:f0:
                    fe:c2:c5:6e:51:3c:93:97:f2:39:19:2c:4e:11:82:
                    96:3b:67:1b:a3:fe:1d:17:6a:74:d2:b9:6b:32:5d:
                    3c:07:e1:53:22:bd:ab:35:17:85:00:4b:24:f7:43:
                    1d:dc:a3:e4:48:d3:1e:ff:63:56:86:65:0a:e5:44:
                    d9:36:b7:8d:c7:2a:7c:72:29:f6:1d:29:41:7b:d2:
                    e0:2f:69:ae:76:a1:05:de:15:34:ac:b8:71:b6:96:
                    7d:ad:d0:93:26:68:d3:fd:7a:bb:29:40:f8:0b:77:
                    1d:a0:13:04:7c:6a:2f:aa:1d:6e:19:b2:a1:51:ce:
                    74:47:2e:1a:61:dd:98:4a:7b:01:e9:f1:8c:14:ad:
                    48:8c:f5:4e:69:77:ea:48:8c:7f:02:84:4e:f4:0d:
                    25:36:b2:58:79:99:ec:b7:76:d6:19:0b:23:e1:1b:
                    dd:d4:f3:56:f4:e6:af:1a:b7:58:d1:71:fe:dc:2b:
                    ac:70:f6:0d:64:2e:a5:cf:71:3f:ec:d5:7c:c7:83:
                    64:16:ba:38:e7:48:82:32:b9:f9:94:89:34:1d:f5:
                    52:db:b8:2a:6f:b4:ab:4b:a3:fb:98:a8:60:f8:63:
                    51:22:10:94:08:35:6d:7b:2f:57:57:eb:cd:37:24:
                    4c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:35:F9:71:53:8B:E0:FF:4B:8C:35:43:A2:E4:A8:DF:EB:CA:87:C0
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233322e302f32322d3232203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:9c:65:65:70:7a:41:f9:a0:e2:47:b1:e3:dd:96:20:2c:31:
         43:0c:c0:9b:34:e2:1c:ca:17:0c:e8:d7:83:1b:5c:61:bb:1b:
         96:ed:28:e5:6a:95:53:e6:03:df:4d:7c:3f:32:14:43:5d:e0:
         7d:8e:eb:43:d5:ef:41:17:f6:bb:c4:20:ad:10:55:79:78:66:
         05:f1:f3:bf:df:21:90:25:07:ee:51:02:13:bb:a7:fe:c0:09:
         4f:d3:b8:9d:fc:ec:43:f0:b9:8e:c9:6a:ce:8f:61:89:eb:f0:
         cd:13:de:cc:e9:80:bd:78:21:c9:86:4b:20:81:ff:8d:11:ec:
         62:6b:43:6e:45:f2:b8:86:59:40:d4:28:7d:06:af:bf:8a:0e:
         6e:21:9c:ba:aa:c6:d9:ef:e2:f9:0f:31:7d:1b:93:1f:fd:67:
         7c:76:d0:66:c7:c8:64:ac:52:bf:df:ed:8f:db:b0:62:2a:d6:
         b7:9c:0e:95:8f:ed:37:c5:bd:fc:9a:82:8a:78:9d:bd:36:91:
         31:3b:ab:fd:38:16:95:fa:3a:e9:23:8c:f9:ae:c9:9c:50:c8:
         c9:15:b0:86:d9:a3:b1:b2:c3:e0:36:fc:d9:51:9f:cf:13:e6:
         4a:64:e6:5c:a3:fd:f7:dc:b9:6c:c1:ed:7b:6b:1b:3b:31:ce:
         3e:4c:01:8b
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUEPA7g2/ysWQk4Tq0eTXM4V7FI/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFCOUIzOTA1RTkzRkRFNjNBNDFCRjUxOTI5QTNDQURD
Q0EwNjRBQjAeFw0yMzA2MTMxOTU1MDBaFw0yNDA2MTEyMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0Y1OUIxNzYxMThGMUZCQjQx
QzQ5QTdFNUJGMEZFQzJDNTZFNTEzQzkzOTdGMjM5MTkyQzRFMTE4Mjk2M0I2NzFC
QTNGRTFEMTc2QTc0RDJCOTZCMzI1RDNDMDdFMTUzMjJCREFCMzUxNzg1MDA0QjI0
Rjc0MzFERENBM0U0NDhEMzFFRkY2MzU2ODY2NTBBRTU0NEQ5MzZCNzhEQzcyQTdD
NzIyOUY2MUQyOTQxN0JEMkUwMkY2OUFFNzZBMTA1REUxNTM0QUNCODcxQjY5NjdE
QUREMDkzMjY2OEQzRkQ3QUJCMjk0MEY4MEI3NzFEQTAxMzA0N0M2QTJGQUExRDZF
MTlCMkExNTFDRTc0NDcyRTFBNjFERDk4NEE3QjAxRTlGMThDMTRBRDQ4OENGNTRF
Njk3N0VBNDg4QzdGMDI4NDRFRjQwRDI1MzZCMjU4Nzk5OUVDQjc3NkQ2MTkwQjIz
RTExQkRERDRGMzU2RjRFNkFGMUFCNzU4RDE3MUZFREMyQkFDNzBGNjBENjQyRUE1
Q0Y3MTNGRUNENTdDQzc4MzY0MTZCQTM4RTc0ODgyMzJCOUY5OTQ4OTM0MURGNTUy
REJCODJBNkZCNEFCNEJBM0ZCOThBODYwRjg2MzUxMjIxMDk0MDgzNTZEN0IyRjU3
NTdFQkNEMzcyNDRDM0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAz1mxdhGPH7tBxJp+W/D+wsVuUTyTl/I5GSxOEYKWO2cbo/4dF2p0
0rlrMl08B+FTIr2rNReFAEsk90Md3KPkSNMe/2NWhmUK5UTZNreNxyp8cin2HSlB
e9LgL2mudqEF3hU0rLhxtpZ9rdCTJmjT/Xq7KUD4C3cdoBMEfGovqh1uGbKhUc50
Ry4aYd2YSnsB6fGMFK1IjPVOaXfqSIx/AoRO9A0lNrJYeZnst3bWGQsj4Rvd1PNW
9OavGrdY0XH+3CuscPYNZC6lz3E/7NV8x4NkFro450iCMrn5lIk0HfVS27gqb7Sr
S6P7mKhg+GNRIhCUCDVtey9XV+vNNyRMPwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FCM1+XFTi+D/S4w1Q6LkqN/ryofAMB8GA1UdIwQYMBaAFKq5s5Bek/3mOkG/UZKa
PK3MoGSrMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzAvQUFCOUIzOTA1RTkzRkRF
NjNBNDFCRjUxOTI5QTNDQURDQ0EwNjRBQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BQUI5QjM5MDVFOTNGREU2M0E0MUJGNTE5MjlBM0NBRENDQTA2
NEFCLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8wLzMxMzgzNzJlMzEzMDM4MmUzMjMz
MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
u2zoMA0GCSqGSIb3DQEBCwUAA4IBAQCmnGVlcHpB+aDiR7Hj3ZYgLDFDDMCbNOIc
yhcM6NeDG1xhuxuW7SjlapVT5gPfTXw/MhRDXeB9jutD1e9BF/a7xCCtEFV5eGYF
8fO/3yGQJQfuUQITu6f+wAlP07id/OxD8LmOyWrOj2GJ6/DNE97M6YC9eCHJhksg
gf+NEexia0NuRfK4hllA1Ch9Bq+/ig5uIZy6qsbZ7+L5DzF9G5Mf/Wd8dtBmx8hk
rFK/3+2P27BiKta3nA6Vj+03xb38moKKeJ29NpExO6v9OBaV+jrpI4z5rsmcUMjJ
FbCG2aOxssPgNvzZUZ/PE+ZKZOZco/333Llswe17axs7Mc4+TAGL
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:06 2024 by rpki-client on console-fra.rpki-client.org