Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233372e302f32342d3234203d3e203533313038.roa
File:                     3138372e3130382e3233372e302f32342d3234203d3e203533313038.roa (raw, json)
Hash identifier:          uvh+Nd+hjEmjGZ1QozvTlJGYOedbd9g9MLAqtZPzeXM=
Subject key identifier:   6D:D1:3A:0E:3B:D6:5D:6D:DE:E8:F8:FF:F2:DC:5E:A6:45:D1:A0:45
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       5D3DB0B6E3A53186899126C61245227C03880921
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233372e302f32342d3234203d3e203533313038.roa
Signing time:             Thu 04 Jan 2024 21:00:01 +0000
ROA not before:           Thu 04 Jan 2024 20:55:01 +0000
ROA not after:            Thu 02 Jan 2025 21:00:01 +0000
asID:                     53108
IP address blocks:        187.108.237.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3d:b0:b6:e3:a5:31:86:89:91:26:c6:12:45:22:7c:03:88:09:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Jan  4 20:55:01 2024 GMT
            Not After : Jan  2 21:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2f:ac:f7:b6:55:2d:97:ed:67:0f:00:50:86:
                    15:c9:bd:24:08:61:82:65:61:24:79:7f:16:42:ab:
                    e4:e9:1c:ac:39:12:51:e9:3b:f5:4c:a4:62:65:ae:
                    3d:9a:20:62:76:c8:3c:e2:d0:06:92:b2:36:1e:5c:
                    b0:bf:ab:aa:90:f1:ef:e3:42:59:be:85:04:25:6c:
                    a0:5f:c6:ee:f0:e3:ad:a7:43:20:4d:3e:ca:30:3d:
                    5e:bf:62:b6:70:8a:d8:e3:65:d2:d7:75:4d:55:37:
                    25:d8:92:24:ee:1d:90:8b:b5:64:f7:1a:a4:ec:fd:
                    9c:21:01:7c:99:44:70:32:77:28:91:e0:61:35:6d:
                    5f:b3:43:e7:02:ce:4a:05:35:ed:3a:f8:9d:56:77:
                    cb:2b:f1:88:da:ba:c6:15:a0:93:eb:2a:44:cd:63:
                    60:18:c0:04:df:7a:11:0e:74:23:0e:7e:26:8a:6a:
                    4f:64:45:3b:8a:e0:a0:9c:42:cb:c5:13:f1:50:83:
                    7f:b7:fc:60:b1:94:ba:00:9b:f3:45:66:ca:3e:7c:
                    62:2f:79:e7:25:70:58:4d:ec:b4:dc:e5:9b:56:80:
                    5b:10:44:93:23:5e:fe:c8:78:31:88:20:da:84:47:
                    56:5b:dd:a7:a8:1d:de:79:0d:8b:1a:6b:1c:89:97:
                    5c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D1:3A:0E:3B:D6:5D:6D:DE:E8:F8:FF:F2:DC:5E:A6:45:D1:A0:45
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233372e302f32342d3234203d3e203533313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:65:b6:a1:4a:2c:24:1d:55:bd:7c:56:19:42:85:8d:2b:90:
         6b:3f:41:57:e5:cd:5b:8f:89:78:6e:2a:76:4f:db:9e:49:9c:
         86:e2:ee:e8:15:94:84:2a:74:12:67:4d:dc:b6:c5:39:26:6c:
         30:4a:6a:7f:6e:23:ce:2f:40:c4:30:d2:04:b3:9b:dc:fa:50:
         09:b6:af:63:47:32:60:f0:f9:4e:91:51:67:8f:d7:12:3f:e9:
         76:34:c3:81:ad:02:91:19:d0:73:05:26:a7:4f:88:78:22:37:
         b2:24:78:ca:fd:93:7d:f3:1e:35:3e:81:78:a9:be:b9:7a:58:
         98:19:bb:d9:8d:8d:eb:f5:ff:e2:ad:0d:cd:aa:89:dd:04:91:
         36:5e:c9:f0:3e:93:e1:3d:10:9e:97:7a:8d:ab:6a:07:3f:dd:
         09:cf:58:64:31:07:5e:ed:54:e5:9a:5e:31:f9:71:77:82:11:
         4c:46:97:51:35:64:03:af:f0:95:ba:f8:95:18:d5:a4:ff:17:
         cf:e9:71:92:32:e1:71:c2:ba:f3:14:e1:dc:80:e2:c9:ef:6b:
         20:4e:3e:d3:d4:dd:aa:44:0c:ea:13:b1:45:bf:da:a5:d2:9a:
         24:c8:73:91:02:e7:4c:67:55:49:e6:62:82:de:7a:8d:96:dd:
         ce:9a:97:c1
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUXT2wtuOlMYaJkSbGEkUifAOICSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFCOUIzOTA1RTkzRkRFNjNBNDFCRjUxOTI5QTNDQURD
Q0EwNjRBQjAeFw0yNDAxMDQyMDU1MDFaFw0yNTAxMDIyMTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTIyRkFDRjdCNjU1MkQ5N0VE
NjcwRjAwNTA4NjE1QzlCRDI0MDg2MTgyNjU2MTI0Nzk3RjE2NDJBQkU0RTkxQ0FD
MzkxMjUxRTkzQkY1NENBNDYyNjVBRTNEOUEyMDYyNzZDODNDRTJEMDA2OTJCMjM2
MUU1Q0IwQkZBQkFBOTBGMUVGRTM0MjU5QkU4NTA0MjU2Q0EwNUZDNkVFRjBFM0FE
QTc0MzIwNEQzRUNBMzAzRDVFQkY2MkI2NzA4QUQ4RTM2NUQyRDc3NTRENTUzNzI1
RDg5MjI0RUUxRDkwOEJCNTY0RjcxQUE0RUNGRDlDMjEwMTdDOTk0NDcwMzI3NzI4
OTFFMDYxMzU2RDVGQjM0M0U3MDJDRTRBMDUzNUVEM0FGODlENTY3N0NCMkJGMTg4
REFCQUM2MTVBMDkzRUIyQTQ0Q0Q2MzYwMThDMDA0REY3QTExMEU3NDIzMEU3RTI2
OEE2QTRGNjQ0NTNCOEFFMEEwOUM0MkNCQzUxM0YxNTA4MzdGQjdGQzYwQjE5NEJB
MDA5QkYzNDU2NkNBM0U3QzYyMkY3OUU3MjU3MDU4NERFQ0I0RENFNTlCNTY4MDVC
MTA0NDkzMjM1RUZFQzg3ODMxODgyMERBODQ0NzU2NUJEREE3QTgxRERFNzkwRDhC
MUE2QjFDODk5NzVDMkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAoi+s97ZVLZftZw8AUIYVyb0kCGGCZWEkeX8WQqvk6RysORJR6Tv1
TKRiZa49miBidsg84tAGkrI2Hlywv6uqkPHv40JZvoUEJWygX8bu8OOtp0MgTT7K
MD1ev2K2cIrY42XS13VNVTcl2JIk7h2Qi7Vk9xqk7P2cIQF8mURwMncokeBhNW1f
s0PnAs5KBTXtOvidVnfLK/GI2rrGFaCT6ypEzWNgGMAE33oRDnQjDn4mimpPZEU7
iuCgnELLxRPxUIN/t/xgsZS6AJvzRWbKPnxiL3nnJXBYTey03OWbVoBbEESTI17+
yHgxiCDahEdWW92nqB3eeQ2LGmsciZdcKwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FG3ROg471l1t3uj4//LcXqZF0aBFMB8GA1UdIwQYMBaAFKq5s5Bek/3mOkG/UZKa
PK3MoGSrMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzAvQUFCOUIzOTA1RTkzRkRF
NjNBNDFCRjUxOTI5QTNDQURDQ0EwNjRBQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BQUI5QjM5MDVFOTNGREU2M0E0MUJGNTE5MjlBM0NBRENDQTA2
NEFCLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8wLzMxMzgzNzJlMzEzMDM4MmUzMjMz
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMzMzEzMDM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
u2ztMA0GCSqGSIb3DQEBCwUAA4IBAQCpZbahSiwkHVW9fFYZQoWNK5BrP0FX5c1b
j4l4bip2T9ueSZyG4u7oFZSEKnQSZ03ctsU5JmwwSmp/biPOL0DEMNIEs5vc+lAJ
tq9jRzJg8PlOkVFnj9cSP+l2NMOBrQKRGdBzBSanT4h4IjeyJHjK/ZN98x41PoF4
qb65eliYGbvZjY3r9f/irQ3NqondBJE2XsnwPpPhPRCel3qNq2oHP90Jz1hkMQde
7VTlml4x+XF3ghFMRpdRNWQDr/CVuviVGNWk/xfP6XGSMuFxwrrzFOHcgOLJ72sg
Tj7T1N2qRAzqE7FFv9ql0pokyHORAudMZ1VJ5mKC3nqNlt3OmpfB
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:10 2025 by rpki-client