Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e31332e302f32342d3234203d3e203238313234.roa
File:                     3138372e31392e31332e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          8uvQEmQ4mijH+pCQvW+2CXxN85aJt1zead9bqlr2oNs=
Subject key identifier:   1F:AA:94:D0:25:7F:B7:12:0E:48:6A:2F:E4:6D:96:93:E6:65:91:D1
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       0F638DAE4F7F48A640F0D562A6DED99C63594286
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e31332e302f32342d3234203d3e203238313234.roa
Signing time:             Thu 02 Feb 2023 20:00:08 +0000
ROA not before:           Thu 02 Feb 2023 19:55:08 +0000
ROA not after:            Thu 01 Feb 2024 20:00:08 +0000
asID:                     28124
IP address blocks:        187.19.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:63:8d:ae:4f:7f:48:a6:40:f0:d5:62:a6:de:d9:9c:63:59:42:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Feb  2 19:55:08 2023 GMT
            Not After : Feb  1 20:00:08 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:68:16:e4:b1:8b:72:5a:2d:31:05:2f:69:b8:
                    30:70:53:8a:1e:65:17:bd:f8:cf:36:32:98:b8:05:
                    e0:7f:29:bc:ce:46:15:c4:87:54:6c:2a:43:36:b5:
                    b8:d8:c9:26:c8:18:30:e6:31:bd:00:bf:94:df:a1:
                    f2:f0:89:e5:b5:ae:50:b5:e7:b7:ff:8d:d7:93:fa:
                    2e:50:53:f9:d2:bd:7b:1b:37:b7:8d:dd:9f:f9:3d:
                    a0:88:a0:40:89:3b:0a:66:db:68:10:a4:4a:97:19:
                    41:4f:bb:73:5d:1b:6a:a2:b7:81:8b:b8:6e:a4:9b:
                    fb:94:95:05:e6:48:5a:d2:97:5e:d5:48:af:c5:80:
                    b3:7c:9e:13:ef:1d:0f:73:e3:5f:f6:fc:57:00:53:
                    3e:12:69:5d:f8:43:c9:bf:12:d8:fb:45:9e:ec:54:
                    f2:87:19:d3:f4:65:e4:fe:d6:c0:94:a1:d6:3c:d6:
                    3d:b4:21:fd:4a:62:86:f1:f0:a3:ee:b3:3a:b0:8d:
                    91:37:a2:08:97:a4:e9:0d:a4:ed:cb:9b:31:3e:f0:
                    b9:01:ec:a4:91:81:e8:de:13:02:6e:f4:f8:a3:f6:
                    b3:82:3f:8b:25:6f:ab:74:dc:ef:93:cf:f1:25:81:
                    65:7c:a0:02:50:c7:e6:b5:23:74:e0:d4:48:66:89:
                    f0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AA:94:D0:25:7F:B7:12:0E:48:6A:2F:E4:6D:96:93:E6:65:91:D1
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e31332e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:71:74:30:4b:f6:38:a3:3d:e4:fd:96:17:14:e7:af:b4:c5:
         0e:a9:a3:dd:d1:f9:92:df:4a:c0:ec:b9:55:be:e4:ca:df:86:
         8f:45:ce:23:14:04:b5:58:fc:0f:06:a8:3b:a0:da:56:ea:61:
         99:f3:02:ca:0b:80:33:9b:68:9c:8c:73:dc:c2:a1:cf:5f:ea:
         c0:b5:3f:72:ac:d0:72:75:fe:ce:97:c2:85:77:a6:79:dc:56:
         bc:49:70:10:06:e4:3c:23:bd:f8:47:70:e2:d5:b0:09:a4:1a:
         42:a4:c8:c8:a2:d4:4d:b2:ee:5b:a9:3b:d6:a6:ae:f7:13:34:
         b4:93:90:ec:55:aa:27:b0:26:2c:d4:98:96:be:bf:c4:d6:74:
         f5:e1:b9:42:67:74:3a:ca:61:68:5d:2e:b9:6b:e9:ab:31:03:
         15:e1:c3:df:09:43:bd:5a:bd:58:bb:e3:07:98:b3:b4:8e:3d:
         f2:61:37:a1:63:f2:ec:e4:40:b6:56:c2:bd:f7:f4:34:72:d0:
         4d:ef:2c:23:55:51:11:3d:3a:b6:85:f4:a9:ce:e9:6d:f5:0c:
         52:5b:b7:0e:2e:db:5f:fb:a6:b8:21:c4:ad:13:9d:73:d6:d3:
         62:5f:2f:91:b7:27:db:c6:d5:9d:79:97:0e:56:d4:ed:43:c8:
         13:85:67:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org