Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233342e302f32342d3234203d3e203532343638.roa
File:                     3138372e3130382e3233342e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          Aboh/wzVXO0bx5bylvuIA6tTc8mQXAn2k3PwWJYF5b0=
Subject key identifier:   44:C0:51:F6:60:F8:92:94:3F:EE:0E:B2:34:B5:1A:F6:63:1F:03:A6
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       058E3C381FC91B9D6D2F7E7FDD797A24BAC8D1C3
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233342e302f32342d3234203d3e203532343638.roa
Signing time:             Thu 21 Mar 2024 19:00:00 +0000
ROA not before:           Thu 21 Mar 2024 18:55:00 +0000
ROA not after:            Thu 20 Mar 2025 19:00:00 +0000
asID:                     52468
IP address blocks:        187.108.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8e:3c:38:1f:c9:1b:9d:6d:2f:7e:7f:dd:79:7a:24:ba:c8:d1:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Mar 21 18:55:00 2024 GMT
            Not After : Mar 20 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c9:b0:3d:e0:60:e6:6a:ba:93:f1:26:6a:8c:
                    40:52:02:04:43:fa:ec:b1:5c:66:5b:28:4e:2e:6c:
                    85:33:25:d0:3c:78:29:18:aa:f0:8c:fd:13:9e:a1:
                    99:30:e5:26:9d:cd:31:cf:85:44:05:dc:fd:e0:88:
                    c5:9a:a1:23:81:75:0f:b3:36:ca:62:6e:2c:eb:b4:
                    77:79:1f:50:d8:17:46:74:54:82:3d:a4:8d:1b:53:
                    35:8e:76:9c:ba:6e:2a:96:53:8c:67:e1:45:38:f8:
                    ae:7c:c1:95:c7:64:19:c8:b2:36:ed:ba:65:a6:ef:
                    a2:07:fa:f1:14:26:18:1d:e0:d1:53:15:a1:4d:13:
                    e6:55:40:27:3b:cb:1e:48:ac:57:0e:4b:4c:47:39:
                    ba:0d:df:1e:cb:4d:61:61:1c:38:1e:70:ed:75:8a:
                    4a:ec:21:61:dd:2a:ac:fd:62:6f:57:f7:46:e8:dd:
                    4c:ee:92:04:54:cf:99:db:8f:a0:7f:83:47:6d:54:
                    f7:9a:11:af:d9:16:31:6f:02:f1:55:66:62:8f:98:
                    6e:e9:ef:ec:3e:f2:3c:6e:10:4d:6d:15:1b:bb:ce:
                    5a:cf:6c:2f:36:a8:7e:c3:1d:17:f2:b5:45:f7:6f:
                    09:da:1a:9f:88:a7:0b:68:31:b8:e2:3d:ad:8d:f4:
                    84:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C0:51:F6:60:F8:92:94:3F:EE:0E:B2:34:B5:1A:F6:63:1F:03:A6
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233342e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:cf:68:63:e2:d1:71:23:6a:a8:1e:fe:56:32:eb:74:6f:96:
         11:f2:9f:98:ee:38:a1:19:8a:f7:d6:76:34:b0:04:34:21:ae:
         11:38:02:f3:c7:4c:9e:36:84:e6:fb:8e:d7:5c:30:0d:66:d0:
         2a:1d:0d:93:f6:01:ab:8d:b6:15:ac:5a:0b:95:20:9c:c2:57:
         af:96:00:c6:f9:23:cd:db:ff:05:f1:5b:05:34:78:c8:c1:68:
         c7:0f:49:1f:c2:12:fd:27:2a:28:8f:60:91:ea:cd:50:1a:ca:
         0e:68:93:6f:28:bd:5c:40:22:0f:8b:f4:0e:45:1f:72:ba:8f:
         60:3a:d2:97:7a:ee:0f:82:0a:6b:aa:75:fd:08:f2:cd:cf:be:
         4e:4d:7c:2d:91:3a:53:49:41:2d:79:0b:cb:0c:cc:a1:5c:91:
         ed:a5:ca:56:53:d9:63:e3:52:91:70:6a:5d:a7:5f:ff:94:48:
         a9:d3:0e:af:c8:e6:f1:53:6e:c8:5f:5f:7d:57:4f:a5:7f:15:
         76:00:65:e9:4f:79:5f:d9:e7:6f:00:ad:19:46:75:33:8f:31:
         3a:1e:aa:88:65:ae:63:56:0f:21:41:2d:18:d1:1b:bd:ba:00:
         ac:cb:6c:53:86:9e:9b:c3:e7:cd:37:b7:24:4e:c4:49:f2:22:
         53:a2:8e:ec
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUBY48OB/JG51tL35/3Xl6JLrI0cMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFCOUIzOTA1RTkzRkRFNjNBNDFCRjUxOTI5QTNDQURD
Q0EwNjRBQjAeFw0yNDAzMjExODU1MDBaFw0yNTAzMjAxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkNDOUIwM0RFMDYwRTY2QUJB
OTNGMTI2NkE4QzQwNTIwMjA0NDNGQUVDQjE1QzY2NUIyODRFMkU2Qzg1MzMyNUQw
M0M3ODI5MThBQUYwOENGRDEzOUVBMTk5MzBFNTI2OURDRDMxQ0Y4NTQ0MDVEQ0ZE
RTA4OEM1OUFBMTIzODE3NTBGQjMzNkNBNjI2RTJDRUJCNDc3NzkxRjUwRDgxNzQ2
NzQ1NDgyM0RBNDhEMUI1MzM1OEU3NjlDQkE2RTJBOTY1MzhDNjdFMTQ1MzhGOEFF
N0NDMTk1Qzc2NDE5QzhCMjM2RURCQTY1QTZFRkEyMDdGQUYxMTQyNjE4MURFMEQx
NTMxNUExNEQxM0U2NTU0MDI3M0JDQjFFNDhBQzU3MEU0QjRDNDczOUJBMERERjFF
Q0I0RDYxNjExQzM4MUU3MEVENzU4QTRBRUMyMTYxREQyQUFDRkQ2MjZGNTdGNzQ2
RThERDRDRUU5MjA0NTRDRjk5REI4RkEwN0Y4MzQ3NkQ1NEY3OUExMUFGRDkxNjMx
NkYwMkYxNTU2NjYyOEY5ODZFRTlFRkVDM0VGMjNDNkUxMDRENkQxNTFCQkJDRTVB
Q0Y2QzJGMzZBODdFQzMxRDE3RjJCNTQ1Rjc2RjA5REExQTlGODhBNzBCNjgzMUI4
RTIzREFEOERGNDg0QkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvMmwPeBg5mq6k/EmaoxAUgIEQ/rssVxmWyhOLmyFMyXQPHgpGKrw
jP0TnqGZMOUmnc0xz4VEBdz94IjFmqEjgXUPszbKYm4s67R3eR9Q2BdGdFSCPaSN
G1M1jnacum4qllOMZ+FFOPiufMGVx2QZyLI27bplpu+iB/rxFCYYHeDRUxWhTRPm
VUAnO8seSKxXDktMRzm6Dd8ey01hYRw4HnDtdYpK7CFh3Sqs/WJvV/dG6N1M7pIE
VM+Z24+gf4NHbVT3mhGv2RYxbwLxVWZij5hu6e/sPvI8bhBNbRUbu85az2wvNqh+
wx0X8rVF928J2hqfiKcLaDG44j2tjfSEvQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FETAUfZg+JKUP+4OsjS1GvZjHwOmMB8GA1UdIwQYMBaAFKq5s5Bek/3mOkG/UZKa
PK3MoGSrMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzAvQUFCOUIzOTA1RTkzRkRF
NjNBNDFCRjUxOTI5QTNDQURDQ0EwNjRBQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BQUI5QjM5MDVFOTNGREU2M0E0MUJGNTE5MjlBM0NBRENDQTA2
NEFCLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8wLzMxMzgzNzJlMzEzMDM4MmUzMjMz
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
u2zqMA0GCSqGSIb3DQEBCwUAA4IBAQDJz2hj4tFxI2qoHv5WMut0b5YR8p+Y7jih
GYr31nY0sAQ0Ia4ROALzx0yeNoTm+47XXDANZtAqHQ2T9gGrjbYVrFoLlSCcwlev
lgDG+SPN2/8F8VsFNHjIwWjHD0kfwhL9Jyooj2CR6s1QGsoOaJNvKL1cQCIPi/QO
RR9yuo9gOtKXeu4PggprqnX9CPLNz75OTXwtkTpTSUEteQvLDMyhXJHtpcpWU9lj
41KRcGpdp1//lEip0w6vyObxU27IX199V0+lfxV2AGXpT3lf2edvAK0ZRnUzjzE6
HqqIZa5jVg8hQS0Y0Ru9ugCsy2xThp6bw+fNN7ckTsRJ8iJToo7s
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:09 2024 by rpki-client on console-ams.rpki-client.org