Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e31322e302f32322d3232203d3e203238313234.roa
File:                     3138372e31392e31322e302f32322d3232203d3e203238313234.roa (raw, json)
Hash identifier:          IjJuWpHGzn589xCp84TaIt4Nlh1iUUyox59WHAlBKmI=
Subject key identifier:   18:64:4D:C6:42:6E:F1:FA:CA:67:EC:6C:6A:0E:ED:82:A5:D5:D1:D2
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       028C6AD364D66DEF1571CFDF674EF4B6FFA5A0B9
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e31322e302f32322d3232203d3e203238313234.roa
Signing time:             Thu 02 Feb 2023 20:00:03 +0000
ROA not before:           Thu 02 Feb 2023 19:55:03 +0000
ROA not after:            Thu 01 Feb 2024 20:00:03 +0000
asID:                     28124
IP address blocks:        187.19.12.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:8c:6a:d3:64:d6:6d:ef:15:71:cf:df:67:4e:f4:b6:ff:a5:a0:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Feb  2 19:55:03 2023 GMT
            Not After : Feb  1 20:00:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:62:cb:21:4f:0f:46:51:ca:1d:72:46:2c:cf:
                    19:bc:d1:3a:18:80:cd:c8:df:4b:79:9a:1b:bf:a3:
                    93:fa:88:7b:71:b5:18:13:ba:df:52:56:eb:fe:55:
                    fb:36:76:01:10:a3:a9:7c:d0:c4:05:7c:19:2b:f9:
                    a8:ba:a2:b1:8f:fd:96:b5:e7:dc:db:c6:e2:a9:ea:
                    e5:59:2d:39:54:7a:57:46:89:b6:ed:91:e0:38:53:
                    92:d9:7d:0d:db:1b:5d:1d:4a:ed:d0:1a:39:26:82:
                    59:8e:40:7f:ce:19:8e:a4:e2:04:14:63:53:83:bc:
                    c6:74:bc:dc:cb:70:31:1a:de:6d:84:0d:6d:bc:95:
                    aa:33:ae:55:02:56:94:bb:1b:28:b2:6e:d1:8f:12:
                    ac:5d:99:3f:df:ad:90:a4:61:d8:a7:74:21:e0:24:
                    29:38:2a:61:3e:42:72:94:a9:a1:4d:62:c0:ac:f9:
                    57:f1:93:3e:2e:9e:7e:ab:99:08:91:43:0a:d6:32:
                    74:93:b2:72:ed:13:eb:72:2e:02:f7:3b:14:4c:1f:
                    b7:f1:09:99:cb:4c:34:73:ab:93:31:b7:c5:05:dc:
                    38:68:30:f0:21:02:eb:a8:14:38:59:40:ee:bf:08:
                    c2:b8:17:23:ce:0c:13:9c:c7:4b:1f:f2:4b:d4:e2:
                    06:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:64:4D:C6:42:6E:F1:FA:CA:67:EC:6C:6A:0E:ED:82:A5:D5:D1:D2
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e31322e302f32322d3232203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:e0:d8:ad:5c:05:31:7d:68:4d:f7:9a:27:b7:42:15:6a:b9:
         7a:ff:c4:f3:ff:e7:7d:75:b0:3a:0c:c8:56:d4:b1:bf:53:3f:
         69:61:14:3f:4d:67:2d:c7:bf:6c:17:99:ef:77:0c:85:ad:e8:
         25:9f:41:36:ca:3e:e3:0e:78:a7:03:df:d9:06:a3:b4:e7:43:
         8e:03:b8:df:6b:dc:ea:17:bb:71:b7:f0:4e:19:d1:47:02:0c:
         1c:05:9c:05:14:43:f8:c9:c6:1b:a7:14:df:0d:5b:5d:9e:8f:
         0b:f2:17:5d:19:9e:d3:d6:2d:0f:e6:43:2b:64:e7:74:42:e2:
         9d:97:c5:ee:d3:7e:f9:e5:11:3e:f5:f3:25:a1:47:f5:29:7a:
         dc:71:43:70:47:8a:7e:c6:6e:bf:ed:c7:c5:b0:e7:b3:fc:3e:
         af:1e:a7:e0:d1:48:be:a1:4e:ca:94:7a:de:ca:6a:65:48:7e:
         d1:ff:e4:d2:cb:ab:0a:66:0c:4f:70:ce:f0:0c:fa:bb:2a:98:
         c8:46:91:50:4f:ed:87:d9:67:31:85:3e:87:05:5f:6a:b0:39:
         dd:e4:b2:ed:15:d9:3f:de:55:53:83:c6:d2:88:dd:45:00:41:
         9e:ce:fb:f3:ba:c7:34:c5:85:8b:46:93:75:5b:c4:8e:2f:2c:
         52:a2:7d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:09 2024 by rpki-client on console-ams.rpki-client.org