Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233382e302f32342d3234203d3e203532343638.roa
File:                     3138372e3130382e3233382e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          2Unw176ygylj/OlbRa1YsEJWpZyI1ZG0UGSIgK818Nk=
Subject key identifier:   56:65:45:34:CE:82:86:09:C3:72:06:BD:B9:23:C5:59:3E:71:F8:96
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       2697BE3589425C7B47D44233AEB3381D0051595D
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233382e302f32342d3234203d3e203532343638.roa
Signing time:             Fri 29 Mar 2024 20:00:00 +0000
ROA not before:           Fri 29 Mar 2024 19:55:00 +0000
ROA not after:            Fri 28 Mar 2025 20:00:00 +0000
asID:                     52468
IP address blocks:        187.108.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:97:be:35:89:42:5c:7b:47:d4:42:33:ae:b3:38:1d:00:51:59:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Mar 29 19:55:00 2024 GMT
            Not After : Mar 28 20:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9b:68:26:98:c4:38:17:e7:b3:18:a9:af:23:
                    61:91:4a:07:8c:4f:cf:01:1e:aa:0e:b6:b0:c2:ee:
                    22:f8:84:d6:91:67:4d:ee:57:ec:ef:b6:ee:8d:06:
                    ba:15:d9:26:8a:be:27:3c:0b:9c:68:5b:80:07:1c:
                    a9:c0:9c:a5:40:90:ed:91:94:55:81:5d:a3:f4:19:
                    3e:91:8e:ed:a1:2d:5f:e3:67:da:74:14:c0:5d:d0:
                    22:e1:df:86:8b:ef:da:a1:0d:cf:15:e0:d1:4c:a5:
                    b0:24:a3:b5:37:34:79:28:4c:e6:2b:f7:bf:35:63:
                    63:4f:22:f3:54:a8:b2:00:39:cc:26:87:a9:8a:a0:
                    14:5a:a7:0e:9e:37:7e:f0:87:a8:04:e0:74:63:b7:
                    dc:23:96:98:aa:5b:29:3a:ed:7d:d8:87:75:48:75:
                    5a:fe:c0:6c:5f:6f:84:f2:3f:b4:38:08:c2:4b:9d:
                    5a:26:f5:d9:93:78:09:10:8f:a0:81:34:90:af:1c:
                    9e:e6:10:2e:29:90:13:c6:2c:f0:ee:b8:01:6b:66:
                    be:4d:85:b4:87:e1:1c:5b:13:85:0b:3e:c8:33:45:
                    62:74:15:e8:61:79:1a:5a:80:03:5e:93:08:46:16:
                    65:9a:4e:ba:c5:ab:8c:8b:08:ba:6d:83:69:59:8b:
                    82:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:65:45:34:CE:82:86:09:C3:72:06:BD:B9:23:C5:59:3E:71:F8:96
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233382e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:52:10:30:bf:44:0a:cb:4b:e6:94:5a:fa:44:b2:05:93:8b:
         b4:30:4c:28:fa:ee:33:2c:3b:b4:5c:4f:0d:6b:5d:9d:31:c6:
         e1:60:2d:1c:aa:77:46:a7:c7:88:fb:1a:46:9c:a7:ce:63:62:
         5d:39:3f:a1:5a:4f:f2:ed:cd:d4:89:74:ad:3e:a1:5c:13:33:
         12:1d:bb:37:2c:85:94:1c:90:bb:35:32:b5:83:88:fe:5f:07:
         ea:51:4d:76:7b:aa:cc:62:dc:75:42:74:6d:b4:21:a2:ee:bf:
         84:4f:f8:88:73:8a:69:33:0a:de:6e:22:28:8f:98:db:3f:d9:
         7c:cd:f4:20:8a:2e:e4:ba:89:15:88:09:21:cf:ed:ee:55:a7:
         06:c6:a8:5d:99:28:af:e5:f5:ef:7e:b9:c4:02:18:30:af:68:
         8b:a4:3d:5a:01:3e:4c:61:3c:ad:14:bd:54:b1:7b:71:c0:75:
         26:4a:5b:b5:34:52:3a:0c:40:f8:56:7f:35:32:1f:f0:01:15:
         43:42:b2:8a:f2:53:d8:09:b8:41:2e:34:f1:ec:b3:b8:a8:b4:
         3f:df:e1:3b:4b:44:f2:b8:9a:6e:8f:77:8b:24:ae:7b:a8:b0:
         14:f6:71:8c:f2:91:33:f1:82:71:04:b4:2b:4b:89:78:5b:20:
         17:21:68:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org