Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233362e302f32342d3234203d3e203532343638.roa
File:                     3138372e3130382e3233362e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          GHVGlNjyQH2IrnM+FYLz1dVgft7bWHGB41zBa9aPoLg=
Subject key identifier:   D6:06:38:F6:FF:3F:BC:62:92:29:82:83:16:1C:FD:0E:F0:35:F5:AD
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       461174D31B7A477D108D48C6E699FE3B48CECADE
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233362e302f32342d3234203d3e203532343638.roa
Signing time:             Fri 29 Mar 2024 20:00:00 +0000
ROA not before:           Fri 29 Mar 2024 19:55:00 +0000
ROA not after:            Fri 28 Mar 2025 20:00:00 +0000
asID:                     52468
IP address blocks:        187.108.236.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:11:74:d3:1b:7a:47:7d:10:8d:48:c6:e6:99:fe:3b:48:ce:ca:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Mar 29 19:55:00 2024 GMT
            Not After : Mar 28 20:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bd:fe:2d:f1:5a:1b:55:37:9e:bd:9c:d2:3f:
                    f0:ce:92:bb:ae:70:04:4e:ab:68:13:71:cf:76:1d:
                    88:bb:da:5b:37:ff:3b:9d:77:c9:98:e3:c5:7b:d8:
                    b0:1e:38:3e:31:15:4c:bd:d2:ac:e2:45:6b:86:7b:
                    54:40:22:d5:6f:66:00:1a:c6:aa:6c:47:f3:4e:33:
                    76:c6:f2:a8:88:79:2b:bf:42:a8:b6:15:9d:cf:dd:
                    a1:15:98:bf:63:39:3e:c8:16:1d:6f:e9:02:b7:17:
                    53:3a:88:5a:03:f3:36:40:ec:59:09:2b:1f:ca:51:
                    73:86:79:c4:bf:1a:51:e5:d4:1e:7a:99:ec:14:51:
                    cc:68:3e:a6:0e:90:50:56:e7:90:6b:bf:ee:16:56:
                    27:6d:ff:80:25:4a:de:23:50:57:a3:b7:2a:4a:e4:
                    1b:38:c6:7c:d6:7c:68:72:23:a7:46:c9:9f:e2:10:
                    9d:6c:76:20:b0:ed:b4:55:3f:73:d0:a8:f1:b2:62:
                    63:49:da:25:5d:84:c9:80:5c:57:17:36:ad:92:cd:
                    71:dc:71:fc:0c:6a:e7:a8:71:75:95:c2:2d:57:a3:
                    3b:dc:52:7f:c5:d3:fb:37:26:d1:7d:07:79:d5:fc:
                    b2:6a:6d:a1:7e:5d:ba:18:3a:3f:46:39:50:02:33:
                    bf:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:06:38:F6:FF:3F:BC:62:92:29:82:83:16:1C:FD:0E:F0:35:F5:AD
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233362e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:0a:62:3e:6f:07:1d:bb:7b:7b:bb:de:bb:98:aa:f1:89:8a:
         ab:47:e4:3e:fc:a9:46:89:e2:c9:fc:a0:70:79:ce:bb:e1:8f:
         4d:2b:dc:6a:ad:e2:ce:c0:9b:f4:39:03:0a:7d:68:91:00:13:
         06:b9:19:4e:4c:d8:d5:80:6d:c1:bb:ab:02:cc:ab:ba:ab:6c:
         f9:49:36:1d:24:ed:20:dd:8a:fb:24:a3:8b:43:69:a0:7d:6c:
         71:6d:99:86:21:2c:1f:89:ef:75:8e:23:7b:dd:ba:40:09:d2:
         36:93:97:8b:e9:50:41:21:ba:0f:71:a0:61:66:f6:77:fe:c6:
         8f:b4:f7:39:2f:68:f7:fa:2b:27:c4:3d:00:42:54:e0:b0:b1:
         fd:38:5f:89:95:a0:a2:73:e4:a6:88:aa:d5:94:e5:d7:07:22:
         45:15:cd:4f:dd:3d:0f:e3:54:e9:b8:22:63:cb:38:6c:94:ef:
         70:cb:5b:d0:61:ee:f8:60:a2:11:96:7e:4b:83:4a:43:5e:85:
         db:af:b2:b9:c4:0f:56:20:b0:93:e8:a5:ba:df:c3:9b:c8:b2:
         41:fe:90:17:9d:64:41:5a:e0:e8:b0:3d:09:9c:b1:98:68:d4:
         77:31:af:df:49:fd:7f:cf:9d:87:65:6a:af:12:9f:de:2c:db:
         1f:f2:32:b8
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIURhF00xt6R30QjUjG5pn+O0jOyt4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFCOUIzOTA1RTkzRkRFNjNBNDFCRjUxOTI5QTNDQURD
Q0EwNjRBQjAeFw0yNDAzMjkxOTU1MDBaFw0yNTAzMjgyMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDNCREZFMkRGMTVBMUI1NTM3
OUVCRDlDRDIzRkYwQ0U5MkJCQUU3MDA0NEVBQjY4MTM3MUNGNzYxRDg4QkJEQTVC
MzdGRjNCOUQ3N0M5OThFM0M1N0JEOEIwMUUzODNFMzExNTRDQkREMkFDRTI0NTZC
ODY3QjU0NDAyMkQ1NkY2NjAwMUFDNkFBNkM0N0YzNEUzMzc2QzZGMkE4ODg3OTJC
QkY0MkE4QjYxNTlEQ0ZEREExMTU5OEJGNjMzOTNFQzgxNjFENkZFOTAyQjcxNzUz
M0E4ODVBMDNGMzM2NDBFQzU5MDkyQjFGQ0E1MTczODY3OUM0QkYxQTUxRTVENDFF
N0E5OUVDMTQ1MUNDNjgzRUE2MEU5MDUwNTZFNzkwNkJCRkVFMTY1NjI3NkRGRjgw
MjU0QURFMjM1MDU3QTNCNzJBNEFFNDFCMzhDNjdDRDY3QzY4NzIyM0E3NDZDOTlG
RTIxMDlENkM3NjIwQjBFREI0NTUzRjczRDBBOEYxQjI2MjYzNDlEQTI1NUQ4NEM5
ODA1QzU3MTczNkFEOTJDRDcxREM3MUZDMEM2QUU3QTg3MTc1OTVDMjJENTdBMzNC
REM1MjdGQzVEM0ZCMzcyNkQxN0QwNzc5RDVGQ0IyNkE2REExN0U1REJBMTgzQTNG
NDYzOTUwMDIzM0JGQkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA073+LfFaG1U3nr2c0j/wzpK7rnAETqtoE3HPdh2Iu9pbN/87nXfJ
mOPFe9iwHjg+MRVMvdKs4kVrhntUQCLVb2YAGsaqbEfzTjN2xvKoiHkrv0KothWd
z92hFZi/Yzk+yBYdb+kCtxdTOohaA/M2QOxZCSsfylFzhnnEvxpR5dQeepnsFFHM
aD6mDpBQVueQa7/uFlYnbf+AJUreI1BXo7cqSuQbOMZ81nxociOnRsmf4hCdbHYg
sO20VT9z0KjxsmJjSdolXYTJgFxXFzatks1x3HH8DGrnqHF1lcItV6M73FJ/xdP7
NybRfQd51fyyam2hfl26GDo/RjlQAjO/uwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FNYGOPb/P7xikimCgxYc/Q7wNfWtMB8GA1UdIwQYMBaAFKq5s5Bek/3mOkG/UZKa
PK3MoGSrMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzAvQUFCOUIzOTA1RTkzRkRF
NjNBNDFCRjUxOTI5QTNDQURDQ0EwNjRBQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BQUI5QjM5MDVFOTNGREU2M0E0MUJGNTE5MjlBM0NBRENDQTA2
NEFCLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8wLzMxMzgzNzJlMzEzMDM4MmUzMjMz
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzQzNjM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
u2zsMA0GCSqGSIb3DQEBCwUAA4IBAQB/CmI+bwcdu3t7u967mKrxiYqrR+Q+/KlG
ieLJ/KBwec674Y9NK9xqreLOwJv0OQMKfWiRABMGuRlOTNjVgG3Bu6sCzKu6q2z5
STYdJO0g3Yr7JKOLQ2mgfWxxbZmGISwfie91jiN73bpACdI2k5eL6VBBIboPcaBh
ZvZ3/saPtPc5L2j3+isnxD0AQlTgsLH9OF+JlaCic+SmiKrVlOXXByJFFc1P3T0P
41TpuCJjyzhslO9wy1vQYe74YKIRln5Lg0pDXoXbr7K5xA9WILCT6KW638ObyLJB
/pAXnWRBWuDosD0JnLGYaNR3Ma/fSf1/z52HZWqvEp/eLNsf8jK4
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org