Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e312e302f32342d3234203d3e203238313234.roa
File:                     3138372e31392e312e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          sp7KxR4xrofaQ/uKkvXhZSuzRDzagQfa3RU9fW5TVo4=
Subject key identifier:   7A:7E:E6:58:DD:26:D2:B2:94:C5:35:ED:75:0F:44:9C:4A:00:59:F1
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       2B3F447F420E2F7BF0449A41F5F9804C72F28F9A
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e312e302f32342d3234203d3e203238313234.roa
Signing time:             Thu 02 Feb 2023 20:00:06 +0000
ROA not before:           Thu 02 Feb 2023 19:55:06 +0000
ROA not after:            Thu 01 Feb 2024 20:00:06 +0000
asID:                     28124
IP address blocks:        187.19.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:3f:44:7f:42:0e:2f:7b:f0:44:9a:41:f5:f9:80:4c:72:f2:8f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Feb  2 19:55:06 2023 GMT
            Not After : Feb  1 20:00:06 2024 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9b:6c:b9:71:b4:08:3b:e3:18:86:73:5d:d4:
                    19:f6:fb:8c:6d:04:2a:08:7e:08:d7:9f:98:83:14:
                    6b:6c:db:6d:52:5f:3c:46:e2:ae:a0:00:76:7a:72:
                    a9:90:0d:ca:8b:4a:ce:39:f2:fe:ed:e8:8e:03:cb:
                    07:33:7d:21:72:e0:2b:86:b6:60:0d:23:25:cc:aa:
                    54:78:d8:a4:54:60:8f:f4:97:fa:5d:62:64:ca:a3:
                    b4:fc:04:fa:d7:67:e9:2b:de:f7:d0:af:75:c9:e7:
                    3e:43:38:90:b6:be:a1:24:18:0d:44:8d:22:6b:e6:
                    71:6b:f8:8d:39:28:a9:be:20:ea:a0:26:f8:cb:a8:
                    b5:b0:34:b1:b8:d0:aa:31:85:e5:7e:f3:26:01:70:
                    d8:bf:ff:69:da:dd:4f:3b:03:e7:d5:70:d7:a3:4e:
                    c0:3e:53:aa:d4:b1:0f:77:c6:be:a2:10:69:f4:b9:
                    10:93:13:4d:09:5a:49:12:db:88:d4:f0:93:be:d6:
                    66:97:84:31:b7:3d:cf:b6:fb:81:56:35:38:e7:db:
                    30:72:fd:47:fd:fc:16:31:86:58:b2:3a:15:db:e0:
                    a6:c7:bb:ed:35:06:0f:27:c7:90:a5:16:1d:9b:63:
                    07:b9:64:e0:20:40:71:6b:95:80:ca:f2:c7:c3:33:
                    ce:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7E:E6:58:DD:26:D2:B2:94:C5:35:ED:75:0F:44:9C:4A:00:59:F1
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e312e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:ed:a7:20:0a:8c:78:a3:3d:f0:a5:96:99:94:5a:fc:f0:78:
         0e:93:66:ce:35:8c:3b:9c:4c:e8:13:ae:dc:0a:59:80:22:00:
         72:d0:96:10:a0:4a:6d:98:b7:be:60:60:fe:b7:7c:8c:21:ce:
         e7:6a:7e:9e:61:92:6b:6a:b2:fa:73:bb:6f:e7:4b:bc:b8:91:
         8b:d7:71:c8:83:fd:6f:94:fc:b2:d2:76:85:36:c6:f2:f7:31:
         04:e8:2c:bb:e2:48:32:97:44:9f:73:8b:c6:5e:44:01:3a:88:
         88:2d:21:54:70:fe:ba:31:18:10:cc:a1:30:82:87:e6:19:19:
         46:45:8e:0d:88:3f:cb:17:59:a4:24:ad:31:68:0b:e0:35:f1:
         7e:56:61:44:98:03:70:78:58:7b:e6:36:81:0a:60:10:e6:56:
         6e:63:bd:e8:6c:0e:98:4c:80:5b:05:9b:65:fe:b0:2a:81:d3:
         ee:c7:d9:71:3e:6e:31:b3:59:e3:1e:8f:fb:64:89:3f:07:cc:
         a2:f3:0a:84:0b:1e:37:91:ed:49:ca:45:b4:38:1c:4d:d7:a5:
         68:91:69:bd:be:6f:70:00:1e:29:34:22:2d:93:e3:4f:b4:e7:
         f1:22:36:36:8a:7c:fb:2d:71:af:d2:2e:ea:ce:b9:73:dd:56:
         d5:8f:f4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:09 2024 by rpki-client on console-ams.rpki-client.org