Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e31352e302f32342d3234203d3e203238313234.roa
File:                     3138372e31392e31352e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          nZsjS5seWBPXJfBQezN4IEILXXmayWaN1ivPjcMGcB0=
Subject key identifier:   F0:E2:7A:D7:4D:35:9C:E0:E4:3D:8D:0C:16:72:CB:9B:D4:D7:B9:52
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       37BE134533997ABE3AA4FFEC35F0B17C9006F51D
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e31352e302f32342d3234203d3e203238313234.roa
Signing time:             Thu 02 Feb 2023 20:00:05 +0000
ROA not before:           Thu 02 Feb 2023 19:55:05 +0000
ROA not after:            Thu 01 Feb 2024 20:00:05 +0000
asID:                     28124
IP address blocks:        187.19.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:be:13:45:33:99:7a:be:3a:a4:ff:ec:35:f0:b1:7c:90:06:f5:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Feb  2 19:55:05 2023 GMT
            Not After : Feb  1 20:00:05 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a2:ef:b2:63:91:ba:c1:a8:53:5a:e3:ce:e2:
                    9e:b4:7b:ac:7c:cb:51:bd:20:31:72:e4:87:9e:6c:
                    e5:ea:b9:9e:75:1c:19:ad:23:3a:e1:b1:e8:a8:38:
                    e3:0f:cd:e3:ef:aa:93:d6:fa:8c:1e:70:40:bd:0c:
                    e0:34:5b:33:6f:8f:e5:0a:e8:d6:8c:b6:c6:a3:66:
                    b1:96:a0:e5:82:61:c7:75:1a:77:d2:01:57:10:e0:
                    90:7f:50:9a:c8:e7:c6:c3:47:7a:03:55:85:75:48:
                    6c:86:a1:ee:af:bf:b1:ef:f4:36:cd:58:7a:ef:0f:
                    e3:ca:96:1c:c3:06:23:9d:af:b1:1a:e2:87:d9:1a:
                    77:c7:d1:e0:54:af:16:a5:a5:bc:aa:01:44:91:af:
                    3d:28:5d:12:4b:ed:bb:12:5e:7a:68:1f:a7:c5:d8:
                    d3:2e:44:e0:59:a2:d4:24:e5:d8:ac:32:23:f0:75:
                    91:7d:18:7d:e3:ee:81:e6:14:9b:13:f0:1b:53:6b:
                    a5:72:fd:7b:45:1c:03:46:50:94:29:58:c1:0a:76:
                    9e:ed:75:ef:2d:40:f8:65:00:8e:e4:58:ac:3a:70:
                    f0:d0:71:3e:92:31:3a:1f:af:93:79:e7:93:78:12:
                    09:c3:27:bf:ee:7f:4d:df:e3:58:fc:94:ca:1f:23:
                    06:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E2:7A:D7:4D:35:9C:E0:E4:3D:8D:0C:16:72:CB:9B:D4:D7:B9:52
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e31352e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:50:f5:09:60:51:e7:a4:bf:66:81:84:e4:2f:be:cf:dd:cb:
         79:51:6d:6e:2d:c6:3b:1e:58:53:24:e9:ea:4c:64:27:ac:38:
         bf:57:f9:c2:0c:69:76:7c:7d:58:f9:2a:54:9c:12:17:26:e4:
         e6:b2:c1:73:1d:59:e8:95:46:84:55:4c:f6:b2:c5:1b:63:51:
         de:94:90:64:d1:da:85:f9:ef:78:fe:d6:57:a6:20:ed:82:5c:
         44:99:be:04:51:fc:37:93:e3:f5:ad:90:36:be:6b:f4:12:89:
         36:f4:0d:87:51:17:7a:17:d6:51:a8:c8:7f:cf:42:22:c4:31:
         c6:cf:0c:f6:1b:de:e8:b0:26:28:58:a8:33:c1:e2:ab:b0:6c:
         a3:0f:fd:ce:b1:c1:14:fa:18:1d:04:d3:ff:0c:a5:9c:2f:01:
         3c:62:da:c8:1a:fe:a2:c4:89:e8:f3:52:0d:40:f5:dc:16:0a:
         0c:0a:ff:38:04:f7:96:a5:b9:5d:1a:e0:ba:bd:01:8b:96:c6:
         77:c5:04:03:fb:3f:a3:8e:a5:01:e0:47:2d:75:ad:72:08:11:
         3f:be:6e:82:03:b1:a4:48:c3:3e:6b:05:83:e2:33:b1:93:83:
         da:5b:26:7e:71:0b:a2:31:8f:6e:ea:58:61:85:0c:01:26:76:
         9e:c4:ac:44
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUN74TRTOZer46pP/sNfCxfJAG9R0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFCOUIzOTA1RTkzRkRFNjNBNDFCRjUxOTI5QTNDQURD
Q0EwNjRBQjAeFw0yMzAyMDIxOTU1MDVaFw0yNDAyMDEyMDAwMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRURBMkVGQjI2MzkxQkFDMUE4
NTM1QUUzQ0VFMjlFQjQ3QkFDN0NDQjUxQkQyMDMxNzJFNDg3OUU2Q0U1RUFCOTlF
NzUxQzE5QUQyMzNBRTFCMUU4QTgzOEUzMEZDREUzRUZBQTkzRDZGQThDMUU3MDQw
QkQwQ0UwMzQ1QjMzNkY4RkU1MEFFOEQ2OENCNkM2QTM2NkIxOTZBMEU1ODI2MUM3
NzUxQTc3RDIwMTU3MTBFMDkwN0Y1MDlBQzhFN0M2QzM0NzdBMDM1NTg1NzU0ODZD
ODZBMUVFQUZCRkIxRUZGNDM2Q0Q1ODdBRUYwRkUzQ0E5NjFDQzMwNjIzOURBRkIx
MUFFMjg3RDkxQTc3QzdEMUUwNTRBRjE2QTVBNUJDQUEwMTQ0OTFBRjNEMjg1RDEy
NEJFREJCMTI1RTdBNjgxRkE3QzVEOEQzMkU0NEUwNTlBMkQ0MjRFNUQ4QUMzMjIz
RjA3NTkxN0QxODdERTNFRTgxRTYxNDlCMTNGMDFCNTM2QkE1NzJGRDdCNDUxQzAz
NDY1MDk0Mjk1OEMxMEE3NjlFRUQ3NUVGMkQ0MEY4NjUwMDhFRTQ1OEFDM0E3MEYw
RDA3MTNFOTIzMTNBMUZBRjkzNzlFNzkzNzgxMjA5QzMyN0JGRUU3RjREREZFMzU4
RkM5NENBMUYyMzA2ODUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA7aLvsmORusGoU1rjzuKetHusfMtRvSAxcuSHnmzl6rmedRwZrSM6
4bHoqDjjD83j76qT1vqMHnBAvQzgNFszb4/lCujWjLbGo2axlqDlgmHHdRp30gFX
EOCQf1CayOfGw0d6A1WFdUhshqHur7+x7/Q2zVh67w/jypYcwwYjna+xGuKH2Rp3
x9HgVK8WpaW8qgFEka89KF0SS+27El56aB+nxdjTLkTgWaLUJOXYrDIj8HWRfRh9
4+6B5hSbE/AbU2ulcv17RRwDRlCUKVjBCnae7XXvLUD4ZQCO5FisOnDw0HE+kjE6
H6+TeeeTeBIJwye/7n9N3+NY/JTKHyMGhQIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FPDietdNNZzg5D2NDBZyy5vU17lSMB8GA1UdIwQYMBaAFKq5s5Bek/3mOkG/UZKa
PK3MoGSrMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzAvQUFCOUIzOTA1RTkzRkRF
NjNBNDFCRjUxOTI5QTNDQURDQ0EwNjRBQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BQUI5QjM5MDVFOTNGREU2M0E0MUJGNTE5MjlBM0NBRENDQTA2
NEFCLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8wLzMxMzgzNzJlMzEzOTJlMzEzNTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMTMyMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC7Ew8w
DQYJKoZIhvcNAQELBQADggEBAAxQ9QlgUeekv2aBhOQvvs/dy3lRbW4txjseWFMk
6epMZCesOL9X+cIMaXZ8fVj5KlScEhcm5OaywXMdWeiVRoRVTPayxRtjUd6UkGTR
2oX573j+1lemIO2CXESZvgRR/DeT4/WtkDa+a/QSiTb0DYdRF3oX1lGoyH/PQiLE
McbPDPYb3uiwJihYqDPB4quwbKMP/c6xwRT6GB0E0/8MpZwvATxi2sga/qLEiejz
Ug1A9dwWCgwK/zgE95aluV0a4Lq9AYuWxnfFBAP7P6OOpQHgRy11rXIIET++boID
saRIwz5rBYPiM7GTg9pbJn5xC6Ixj27qWGGFDAEmdp7ErEQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org