Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233392e302f32342d3234203d3e203532343638.roa
File:                     3138372e3130382e3233392e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          b1A0h8VW7T6jjs+Tqlz4pmanL5TwD7IwO/hG9FhOi0Q=
Subject key identifier:   0B:98:78:AA:36:0E:14:AE:AD:EC:57:46:9C:5B:B8:08:60:92:C6:F4
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       0E199975C00D2BD9047C1232530471887D4D64FB
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233392e302f32342d3234203d3e203532343638.roa
Signing time:             Fri 29 Mar 2024 20:00:00 +0000
ROA not before:           Fri 29 Mar 2024 19:55:00 +0000
ROA not after:            Fri 28 Mar 2025 20:00:00 +0000
asID:                     52468
IP address blocks:        187.108.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:19:99:75:c0:0d:2b:d9:04:7c:12:32:53:04:71:88:7d:4d:64:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Mar 29 19:55:00 2024 GMT
            Not After : Mar 28 20:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4f:cc:5d:b9:0e:96:86:a3:0d:c7:71:19:9b:
                    9c:db:18:00:ff:f7:a3:b8:e1:87:c5:b8:07:b3:ff:
                    26:82:3c:08:56:b3:cf:74:50:f9:75:1c:e8:0c:b8:
                    e9:3c:64:b6:b7:26:c8:f6:1e:1d:24:1e:4c:b9:90:
                    2c:e2:f0:6d:3c:42:06:cb:ba:65:d9:e0:c3:56:0e:
                    96:11:fc:33:fd:e1:42:bf:b5:93:85:5d:47:c7:bb:
                    d0:62:ff:82:3f:61:d7:34:01:97:d8:32:e0:0b:d5:
                    08:a5:4e:c1:4e:d1:b4:95:f1:ed:cc:60:3c:ad:d9:
                    15:47:ae:9e:03:c3:34:de:ef:da:7c:76:d9:09:c9:
                    9e:18:c6:07:da:ef:c7:c9:bd:b8:96:e0:dc:1d:1b:
                    1a:2b:f9:e1:26:f1:d6:6b:ea:de:b0:6c:88:70:3e:
                    cb:ce:b6:79:2d:98:67:77:d0:1b:6e:34:b7:f1:8b:
                    c4:a7:70:c8:e4:37:56:6d:c5:af:a9:7a:90:8d:09:
                    ea:67:c9:ca:82:6b:da:10:e0:a1:a6:41:40:33:ff:
                    63:56:91:c4:f4:ee:16:f9:03:bd:d8:26:d1:d7:67:
                    bc:cb:aa:6c:96:e3:46:0f:d6:77:c6:3c:45:29:77:
                    5c:65:c7:e2:c8:2c:5a:a0:38:5e:02:f4:a9:c4:87:
                    c8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:98:78:AA:36:0E:14:AE:AD:EC:57:46:9C:5B:B8:08:60:92:C6:F4
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e3130382e3233392e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:d5:08:02:0c:ab:90:0f:15:f3:d2:02:3f:e7:5c:66:90:d1:
         73:3d:7a:0c:47:ff:4d:5f:42:fd:f6:89:84:c4:bb:26:5c:28:
         2e:a2:f9:c9:68:8d:3f:f3:73:9a:3d:43:87:16:b2:d8:88:a2:
         56:40:25:28:74:e4:d6:7b:c6:95:a6:eb:fe:e7:8d:0e:32:54:
         a4:d5:13:20:77:10:a3:fe:0b:6e:42:a5:8b:45:4d:01:7e:67:
         fb:0c:19:9a:8b:b0:76:5a:b6:cb:e9:82:4b:ad:a6:d7:9c:b3:
         5c:8a:10:53:07:e1:aa:60:fb:ef:25:f9:cc:a2:19:a0:3c:02:
         26:44:17:09:6f:d3:b4:5d:0c:3b:86:7e:cf:f2:64:a8:7b:10:
         41:ab:fd:e4:8a:06:fc:92:c7:78:3d:85:31:84:67:42:94:0d:
         94:5f:4e:05:1c:cd:3d:33:de:03:62:3f:a4:74:b1:aa:11:e9:
         b8:61:c6:78:70:49:53:10:9b:55:e7:69:66:43:65:9c:5d:10:
         94:87:4d:c9:a0:fb:25:26:6a:e8:7b:56:b7:36:b3:97:87:24:
         0f:23:50:76:4d:27:29:b8:91:c6:f5:c2:1f:32:f4:c2:24:b6:
         51:18:8f:47:4e:fd:99:f6:63:75:51:3e:0c:c2:b7:73:b6:48:
         21:39:15:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:06 2024 by rpki-client on console-fra.rpki-client.org