Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e302e302f32312d3231203d3e203238313234.roa
File:                     3138372e31392e302e302f32312d3231203d3e203238313234.roa (raw, json)
Hash identifier:          ljavRdeDI53cDlS7RACJX8S++sB4biAHFnijw6lygHM=
Subject key identifier:   AE:27:A9:7F:84:E8:53:3D:34:23:77:6E:96:8A:DE:63:63:01:DE:C0
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       673B34DA62819FAF4F302E5521E2E84738CE14C0
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e302e302f32312d3231203d3e203238313234.roa
Signing time:             Thu 02 Feb 2023 20:00:07 +0000
ROA not before:           Thu 02 Feb 2023 19:55:07 +0000
ROA not after:            Thu 01 Feb 2024 20:00:07 +0000
asID:                     28124
IP address blocks:        187.19.0.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:3b:34:da:62:81:9f:af:4f:30:2e:55:21:e2:e8:47:38:ce:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Feb  2 19:55:07 2023 GMT
            Not After : Feb  1 20:00:07 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:50:03:74:94:df:ab:d6:aa:85:7e:ac:85:ed:
                    9b:0c:5f:3a:ed:2c:0d:5b:7b:8c:e8:9e:8c:40:1e:
                    5f:08:38:7b:c5:5c:69:fd:2b:5c:39:67:6b:04:59:
                    89:d5:5b:f5:10:6b:f0:5f:bd:23:12:85:59:ae:d0:
                    e3:c2:d6:c6:3c:5f:00:8a:42:b8:bc:3e:b5:5a:e9:
                    93:08:00:98:0c:1e:fb:a6:3a:ac:01:49:fb:ce:2c:
                    23:b3:d0:5e:2c:17:a7:3a:81:ce:39:2c:34:ed:ac:
                    44:e5:2f:70:2a:fb:f7:db:07:30:07:9d:25:03:17:
                    06:1a:a5:33:20:d4:67:a5:ed:57:ef:f5:4d:ff:11:
                    f8:53:48:27:bd:c2:81:68:5f:b2:5d:ce:fd:1d:2e:
                    15:c7:dc:c9:8c:58:01:a9:a6:83:c0:ac:4a:38:79:
                    42:ef:69:fc:ed:d7:4a:2e:43:1f:fa:7d:0a:00:18:
                    42:8d:06:d0:5e:a4:21:a4:03:9b:b0:a3:9d:a4:bb:
                    17:37:c8:4f:b5:4f:02:dc:58:50:74:56:8a:e3:bd:
                    b7:75:16:10:62:cc:b7:38:83:df:36:86:8b:6f:99:
                    f6:08:7e:57:04:67:3a:87:15:7f:e8:72:8b:68:4f:
                    a7:5a:53:10:6a:5c:68:cc:7c:03:88:90:b8:d0:a6:
                    60:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:27:A9:7F:84:E8:53:3D:34:23:77:6E:96:8A:DE:63:63:01:DE:C0
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e302e302f32312d3231203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         79:9b:b9:8b:9f:bd:59:68:13:49:a6:d2:8c:03:56:2f:50:2f:
         21:61:b2:4a:b4:9f:23:d0:71:c6:cb:ea:c1:82:b8:6c:86:ad:
         47:72:d9:98:d4:1d:3b:de:c0:47:e3:13:67:48:1a:cc:3b:f5:
         be:06:fc:0c:28:27:88:0c:de:af:76:d9:d4:67:52:3c:87:82:
         2e:de:59:af:9e:93:18:05:bd:f4:03:c5:72:48:49:7e:40:c4:
         d0:10:1c:f0:ba:a6:35:8f:e1:6e:f7:c5:dc:c6:86:06:29:7e:
         5a:f3:e3:79:3e:55:f3:59:b3:f3:c5:37:91:5e:c8:bc:b3:fd:
         3a:9b:8f:30:01:51:8a:9a:9c:df:41:7b:7c:97:0c:f0:d2:75:
         6b:29:9a:e7:89:1d:73:ea:68:c5:4d:ff:c1:c9:7c:a6:18:ce:
         40:fa:45:60:aa:85:89:87:8d:7f:49:8c:fe:ad:d3:45:1b:00:
         3b:31:a4:01:4b:57:19:51:e4:72:e7:04:61:21:50:c8:97:ad:
         4c:20:51:df:a6:7f:94:8d:3c:89:c5:e6:38:85:ed:b8:ed:76:
         b4:05:45:0d:90:c8:3a:bc:cc:e9:00:8c:60:f1:9d:b3:80:c0:
         1a:b7:9b:9a:a7:7e:01:9d:67:92:43:43:ce:61:c6:91:ef:c5:
         c8:c0:25:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org