Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e31322e302f32342d3234203d3e203533313038.roa
File:                     3138372e31392e31322e302f32342d3234203d3e203533313038.roa (raw, json)
Hash identifier:          9XZG2fYqxlDM60nbWhFVeVFSeROQRIn6EDE30YJOhKw=
Subject key identifier:   6B:6C:EF:0F:09:36:6E:75:8F:8E:2D:0D:05:59:86:43:58:FE:67:47
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       694D341EF0D515ECCE8980712F208D626FEE6F8B
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e31322e302f32342d3234203d3e203533313038.roa
Signing time:             Thu 02 Feb 2023 20:00:08 +0000
ROA not before:           Thu 02 Feb 2023 19:55:08 +0000
ROA not after:            Thu 01 Feb 2024 20:00:08 +0000
asID:                     53108
IP address blocks:        187.19.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:4d:34:1e:f0:d5:15:ec:ce:89:80:71:2f:20:8d:62:6f:ee:6f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Feb  2 19:55:08 2023 GMT
            Not After : Feb  1 20:00:08 2024 GMT
        Subject: CN=3082010A0282010100D8CD26A140E8541CD16D6713801030DA67C8728B259DDC038621D7440DC6A9A9C008A3E7D8725597D2364E9973F8C0E39146A6239E83B02C6274322E6AA4ACAF8E3A50F6B9E0A41E023948ABEDAC25464F701ED35C7AA9824C4A2EBB35BF831D6327B97FDC5DF45C38AF75F0E666857D4D99B9783CAF6B9E090F45DBC3B7932D56FA7E9261A5280A5D9DA32A8E810B07A5EA50CD946D1C6A22FF9870FC9FBFF6999473AF8BDE323C284202A52CC2A13BA614583E0B03CAD446208C5A1D2F29ABAFE2DE56766B3896E2A267CD01DAA487B0D72C6DCF2385DA3706540B1B33C67FBC2E02743DC069773DA3D891D7A07D1A5763AD0467567A1DAC973166B0B5E90D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cd:26:a1:40:e8:54:1c:d1:6d:67:13:80:10:
                    30:da:67:c8:72:8b:25:9d:dc:03:86:21:d7:44:0d:
                    c6:a9:a9:c0:08:a3:e7:d8:72:55:97:d2:36:4e:99:
                    73:f8:c0:e3:91:46:a6:23:9e:83:b0:2c:62:74:32:
                    2e:6a:a4:ac:af:8e:3a:50:f6:b9:e0:a4:1e:02:39:
                    48:ab:ed:ac:25:46:4f:70:1e:d3:5c:7a:a9:82:4c:
                    4a:2e:bb:35:bf:83:1d:63:27:b9:7f:dc:5d:f4:5c:
                    38:af:75:f0:e6:66:85:7d:4d:99:b9:78:3c:af:6b:
                    9e:09:0f:45:db:c3:b7:93:2d:56:fa:7e:92:61:a5:
                    28:0a:5d:9d:a3:2a:8e:81:0b:07:a5:ea:50:cd:94:
                    6d:1c:6a:22:ff:98:70:fc:9f:bf:f6:99:94:73:af:
                    8b:de:32:3c:28:42:02:a5:2c:c2:a1:3b:a6:14:58:
                    3e:0b:03:ca:d4:46:20:8c:5a:1d:2f:29:ab:af:e2:
                    de:56:76:6b:38:96:e2:a2:67:cd:01:da:a4:87:b0:
                    d7:2c:6d:cf:23:85:da:37:06:54:0b:1b:33:c6:7f:
                    bc:2e:02:74:3d:c0:69:77:3d:a3:d8:91:d7:a0:7d:
                    1a:57:63:ad:04:67:56:7a:1d:ac:97:31:66:b0:b5:
                    e9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6C:EF:0F:09:36:6E:75:8F:8E:2D:0D:05:59:86:43:58:FE:67:47
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e31322e302f32342d3234203d3e203533313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:0e:26:d4:77:d7:d4:10:35:e4:c1:ee:c7:e7:5f:ed:96:df:
         02:c1:af:31:30:be:c0:a2:58:21:8b:dc:13:bd:28:d5:c2:f7:
         2b:79:4d:51:fe:7f:81:f7:1a:9c:a7:10:74:84:09:b8:72:13:
         58:24:52:87:f7:c8:b3:11:d8:19:a3:f9:95:9b:be:86:3f:6c:
         48:ba:91:95:1e:07:c0:0b:eb:84:ab:1d:74:6e:a4:aa:70:dc:
         22:ba:c1:02:92:c3:e7:31:8f:24:47:b7:a3:e8:cd:0c:be:61:
         56:76:77:43:1d:92:05:90:84:88:d5:42:1e:58:03:9f:70:af:
         b7:16:29:46:61:3b:02:5d:f8:b3:e9:49:a0:fb:2b:af:4e:7a:
         2a:46:d0:f0:d5:05:31:3a:5f:b9:d6:c3:38:cc:26:7a:89:30:
         12:bc:b9:10:24:5e:82:79:3a:0c:60:04:b2:8b:45:06:1b:fd:
         4f:ce:0e:9a:ea:c9:3b:45:01:52:18:97:b7:92:6e:50:7f:82:
         06:10:6e:e7:72:c3:f5:e2:0c:ec:56:f5:c7:f1:4c:32:d5:2e:
         59:f0:73:92:5f:3c:d5:d9:d4:a4:72:46:49:72:d2:f4:65:e2:
         7a:2d:08:82:e0:21:8e:5e:4c:82:e2:19:e6:74:90:cb:34:67:
         cb:24:85:81
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUaU00HvDVFezOiYBxLyCNYm/ub4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFCOUIzOTA1RTkzRkRFNjNBNDFCRjUxOTI5QTNDQURD
Q0EwNjRBQjAeFw0yMzAyMDIxOTU1MDhaFw0yNDAyMDEyMDAwMDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDhDRDI2QTE0MEU4NTQxQ0Qx
NkQ2NzEzODAxMDMwREE2N0M4NzI4QjI1OUREQzAzODYyMUQ3NDQwREM2QTlBOUMw
MDhBM0U3RDg3MjU1OTdEMjM2NEU5OTczRjhDMEUzOTE0NkE2MjM5RTgzQjAyQzYy
NzQzMjJFNkFBNEFDQUY4RTNBNTBGNkI5RTBBNDFFMDIzOTQ4QUJFREFDMjU0NjRG
NzAxRUQzNUM3QUE5ODI0QzRBMkVCQjM1QkY4MzFENjMyN0I5N0ZEQzVERjQ1QzM4
QUY3NUYwRTY2Njg1N0Q0RDk5Qjk3ODNDQUY2QjlFMDkwRjQ1REJDM0I3OTMyRDU2
RkE3RTkyNjFBNTI4MEE1RDlEQTMyQThFODEwQjA3QTVFQTUwQ0Q5NDZEMUM2QTIy
RkY5ODcwRkM5RkJGRjY5OTk0NzNBRjhCREUzMjNDMjg0MjAyQTUyQ0MyQTEzQkE2
MTQ1ODNFMEIwM0NBRDQ0NjIwOEM1QTFEMkYyOUFCQUZFMkRFNTY3NjZCMzg5NkUy
QTI2N0NEMDFEQUE0ODdCMEQ3MkM2RENGMjM4NURBMzcwNjU0MEIxQjMzQzY3RkJD
MkUwMjc0M0RDMDY5NzczREEzRDg5MUQ3QTA3RDFBNTc2M0FEMDQ2NzU2N0ExREFD
OTczMTY2QjBCNUU5MEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2M0moUDoVBzRbWcTgBAw2mfIcoslndwDhiHXRA3GqanACKPn2HJV
l9I2Tplz+MDjkUamI56DsCxidDIuaqSsr446UPa54KQeAjlIq+2sJUZPcB7TXHqp
gkxKLrs1v4MdYye5f9xd9Fw4r3Xw5maFfU2ZuXg8r2ueCQ9F28O3ky1W+n6SYaUo
Cl2doyqOgQsHpepQzZRtHGoi/5hw/J+/9pmUc6+L3jI8KEICpSzCoTumFFg+CwPK
1EYgjFodLymrr+LeVnZrOJbiomfNAdqkh7DXLG3PI4XaNwZUCxszxn+8LgJ0PcBp
dz2j2JHXoH0aV2OtBGdWeh2slzFmsLXpDQIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FGts7w8JNm51j44tDQVZhkNY/mdHMB8GA1UdIwQYMBaAFKq5s5Bek/3mOkG/UZKa
PK3MoGSrMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzAvQUFCOUIzOTA1RTkzRkRF
NjNBNDFCRjUxOTI5QTNDQURDQ0EwNjRBQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BQUI5QjM5MDVFOTNGREU2M0E0MUJGNTE5MjlBM0NBRENDQTA2
NEFCLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8wLzMxMzgzNzJlMzEzOTJlMzEzMjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzMzMTMwMzgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC7Ewww
DQYJKoZIhvcNAQELBQADggEBAIQOJtR319QQNeTB7sfnX+2W3wLBrzEwvsCiWCGL
3BO9KNXC9yt5TVH+f4H3GpynEHSECbhyE1gkUof3yLMR2Bmj+ZWbvoY/bEi6kZUe
B8AL64SrHXRupKpw3CK6wQKSw+cxjyRHt6PozQy+YVZ2d0MdkgWQhIjVQh5YA59w
r7cWKUZhOwJd+LPpSaD7K69OeipG0PDVBTE6X7nWwzjMJnqJMBK8uRAkXoJ5Ogxg
BLKLRQYb/U/ODprqyTtFAVIYl7eSblB/ggYQbudyw/XiDOxW9cfxTDLVLlnwc5Jf
PNXZ1KRyRkly0vRl4notCILgIY5eTILiGeZ0kMs0Z8skhYE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org