Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233322e302f32342d3234203d3e203532343638.roa
File:                     3138372e3130382e3233322e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          2kAR1yi44PR98HLqhyPvupdteNin/AW6cL8UAl4G03A=
Subject key identifier:   01:91:44:DF:81:5A:4B:60:2A:B9:D8:5F:D6:3B:61:2D:B7:5F:A4:E6
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       79EFFF75A4C4EF42DC3D6B1E342EA388FB0D38D6
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233322e302f32342d3234203d3e203532343638.roa
Signing time:             Thu 04 Jan 2024 21:00:01 +0000
ROA not before:           Thu 04 Jan 2024 20:55:01 +0000
ROA not after:            Thu 02 Jan 2025 21:00:01 +0000
asID:                     52468
IP address blocks:        187.108.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ef:ff:75:a4:c4:ef:42:dc:3d:6b:1e:34:2e:a3:88:fb:0d:38:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Jan  4 20:55:01 2024 GMT
            Not After : Jan  2 21:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a7:46:8b:55:13:65:e9:93:b1:fd:a4:ba:ed:
                    63:c4:bf:be:26:b2:6b:39:03:49:3d:b4:f0:50:ee:
                    7e:e8:1b:6a:31:1d:c0:49:85:23:e4:f9:fe:47:d4:
                    12:a8:1b:c0:1e:ac:32:9c:cd:35:37:51:ee:7b:f1:
                    9f:69:0f:76:e5:1c:92:3d:08:ba:35:a4:eb:f7:14:
                    dc:2f:e2:aa:2d:a5:4d:e0:9b:ed:2d:c5:7f:96:f1:
                    70:1c:c8:c7:ab:02:37:b6:63:6c:93:99:80:ef:a3:
                    07:e9:80:5c:9f:56:f7:ab:59:15:33:07:49:62:c8:
                    1c:a4:27:bc:68:a8:73:b1:bb:d6:20:aa:5d:f5:7e:
                    9d:35:1f:07:38:e9:69:8f:4f:17:89:9b:a2:91:0b:
                    27:0e:0c:91:ae:9a:b1:5e:bf:86:fd:6c:da:2b:f2:
                    9e:6d:91:6b:9f:0e:d3:d0:66:79:88:14:be:7a:ac:
                    fc:91:73:88:36:f4:34:16:3a:be:ad:17:46:84:4c:
                    dd:96:b9:bb:3b:c3:a3:59:6e:4a:81:f7:88:49:32:
                    10:68:60:9d:b0:bc:55:6b:10:84:56:db:e6:15:3a:
                    3c:c0:ab:e9:72:b9:64:b6:4b:28:f1:ad:69:e3:3f:
                    0b:65:7b:1f:df:60:1a:17:3d:74:6f:a3:18:36:d6:
                    2a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:91:44:DF:81:5A:4B:60:2A:B9:D8:5F:D6:3B:61:2D:B7:5F:A4:E6
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233322e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:72:2c:54:a3:c9:19:bc:79:b3:fa:52:25:77:47:d5:5d:09:
         db:4e:c0:c5:d3:eb:64:db:cc:61:a4:60:e6:7a:12:82:be:84:
         88:a0:98:5a:bb:00:1a:2b:86:18:f7:4c:73:d7:18:2f:0a:7b:
         ff:d6:76:72:62:91:06:c5:7a:88:03:8f:2c:81:d0:fb:c2:d7:
         4d:df:31:83:e8:73:a3:e7:d3:04:ff:34:11:06:48:b7:71:f0:
         e0:6c:1a:3c:95:0c:5b:8b:af:53:16:a9:b7:9e:e2:6c:4f:31:
         fb:ba:ab:f9:91:d8:16:2e:e0:16:07:d2:38:5e:5e:71:cc:34:
         a9:4e:36:d9:2a:37:85:54:ce:ef:9a:2c:bf:ab:c0:db:d5:ca:
         09:0d:08:32:d5:6b:52:3e:01:de:c2:9f:4a:1c:2a:93:b5:12:
         fc:c9:eb:2b:c7:55:63:5e:b1:7d:cf:f1:c9:db:fc:17:d2:69:
         87:d9:e4:f4:7f:62:7a:da:4c:22:8f:8f:e4:41:dd:ba:23:70:
         00:14:e6:3d:de:97:45:d9:ce:1a:d1:63:ad:25:9f:46:b0:91:
         9f:67:0f:16:00:f3:25:c7:8e:05:34:d1:22:3e:8f:f3:bd:0d:
         56:66:13:7e:36:04:ff:73:0c:9a:27:a2:ab:01:52:ca:d4:84:
         e5:7b:ef:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org