Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e332e302f32342d3234203d3e203238313234.roa
File:                     3138372e31392e332e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          S5RaY7pIdSHVh9DPzm9sFBd2K0O0Kd/txB5hw+8tyDE=
Subject key identifier:   CD:70:24:01:EC:9B:47:44:04:79:06:37:95:D5:E8:C7:B1:43:C0:18
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       233EE26CED7CCBB3D0C8527A4334BD20C54DF728
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e332e302f32342d3234203d3e203238313234.roa
Signing time:             Thu 02 Feb 2023 20:00:01 +0000
ROA not before:           Thu 02 Feb 2023 19:55:01 +0000
ROA not after:            Thu 01 Feb 2024 20:00:01 +0000
asID:                     28124
IP address blocks:        187.19.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:3e:e2:6c:ed:7c:cb:b3:d0:c8:52:7a:43:34:bd:20:c5:4d:f7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Feb  2 19:55:01 2023 GMT
            Not After : Feb  1 20:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c8:74:9c:39:33:b4:3b:49:66:ce:69:9f:c8:
                    67:f3:1b:1a:50:ac:b3:4b:3e:d5:10:f7:f3:62:a4:
                    b2:c9:be:35:ac:d4:e3:f6:58:72:24:f6:e6:cc:a9:
                    b5:43:df:d9:ae:76:97:eb:75:80:9b:cc:d1:cf:8c:
                    e0:4d:6c:b7:e0:c9:b9:d3:65:2c:d3:41:b0:2d:d4:
                    3b:69:dc:df:35:1b:46:95:90:42:f4:e3:f7:10:02:
                    f5:d0:8a:44:82:94:ff:79:b9:8e:69:4a:73:8e:50:
                    2c:9d:86:61:8a:a8:85:d5:e7:a9:c2:6d:6d:02:cb:
                    09:80:cb:67:52:f1:68:a1:d0:23:80:0a:25:a0:9b:
                    1d:5b:29:59:f7:ce:ba:64:13:02:82:59:ca:c2:8e:
                    0d:4e:fd:7b:54:98:c3:8c:d3:db:94:ac:83:ed:81:
                    77:5c:b0:ac:a3:71:b1:21:c4:95:37:ea:28:eb:cb:
                    b5:22:0f:ba:c3:47:ad:1a:83:3e:b5:2e:ea:81:ad:
                    68:45:70:03:11:44:60:b8:bc:8b:2c:60:dd:0d:22:
                    3c:de:92:52:19:c1:18:fa:f4:11:cd:24:90:a9:03:
                    62:55:63:59:8c:61:2c:58:be:10:73:f8:91:8e:a0:
                    a6:c8:18:e0:f7:2b:5e:33:69:08:4a:aa:5b:c6:fb:
                    79:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:70:24:01:EC:9B:47:44:04:79:06:37:95:D5:E8:C7:B1:43:C0:18
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e332e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:25:af:d4:ae:72:7e:4c:3b:7d:40:69:9e:ae:89:ea:92:67:
         cc:5a:a3:25:b0:bd:d2:ea:24:2b:a6:5d:33:91:40:a7:31:02:
         78:88:b2:cc:f9:b1:fe:d1:3b:4f:e7:81:6e:be:84:8a:b4:8a:
         61:ac:7b:39:0a:93:11:4c:d5:3e:65:2f:43:a1:04:3b:40:08:
         02:72:b5:8b:88:3b:91:b4:32:88:ff:94:d8:53:83:94:7b:1f:
         83:5b:3a:2f:47:e3:0b:07:45:9c:12:8e:bf:84:ed:8f:e8:9e:
         4e:c6:b7:d1:e1:c6:97:88:29:bf:83:a1:f3:ca:40:95:2c:12:
         3b:f8:cc:43:72:01:cf:e3:09:c6:d7:c7:aa:87:31:4f:c2:95:
         7a:6c:f4:e0:ae:0c:ec:12:96:b1:9c:76:93:ba:15:b7:62:41:
         74:b0:c8:4d:56:a3:45:53:9d:64:51:5a:95:8e:3b:6d:a5:ea:
         0e:87:bc:d2:63:e9:93:2f:74:79:05:61:48:7d:a5:2c:a0:0f:
         59:03:14:42:6b:49:0b:65:90:21:98:75:8d:4d:63:2a:42:d5:
         29:95:43:a8:73:00:32:3e:61:0b:72:b6:18:c8:75:cf:ab:85:
         69:ca:bb:69:44:3a:a0:1d:ae:83:8a:52:a5:a0:63:79:8c:5a:
         8b:c4:ec:76
-----BEGIN CERTIFICATE-----
MIIHPTCCBiWgAwIBAgIUIz7ibO18y7PQyFJ6QzS9IMVN9ygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFCOUIzOTA1RTkzRkRFNjNBNDFCRjUxOTI5QTNDQURD
Q0EwNjRBQjAeFw0yMzAyMDIxOTU1MDFaFw0yNDAyMDEyMDAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0FDODc0OUMzOTMzQjQzQjQ5
NjZDRTY5OUZDODY3RjMxQjFBNTBBQ0IzNEIzRUQ1MTBGN0YzNjJBNEIyQzlCRTM1
QUNENEUzRjY1ODcyMjRGNkU2Q0NBOUI1NDNERkQ5QUU3Njk3RUI3NTgwOUJDQ0Qx
Q0Y4Q0UwNEQ2Q0I3RTBDOUI5RDM2NTJDRDM0MUIwMkRENDNCNjlEQ0RGMzUxQjQ2
OTU5MDQyRjRFM0Y3MTAwMkY1RDA4QTQ0ODI5NEZGNzlCOThFNjk0QTczOEU1MDJD
OUQ4NjYxOEFBODg1RDVFN0E5QzI2RDZEMDJDQjA5ODBDQjY3NTJGMTY4QTFEMDIz
ODAwQTI1QTA5QjFENUIyOTU5RjdDRUJBNjQxMzAyODI1OUNBQzI4RTBENEVGRDdC
NTQ5OEMzOENEM0RCOTRBQzgzRUQ4MTc3NUNCMEFDQTM3MUIxMjFDNDk1MzdFQTI4
RUJDQkI1MjIwRkJBQzM0N0FEMUE4MzNFQjUyRUVBODFBRDY4NDU3MDAzMTE0NDYw
QjhCQzhCMkM2MEREMEQyMjNDREU5MjUyMTlDMTE4RkFGNDExQ0QyNDkwQTkwMzYy
NTU2MzU5OEM2MTJDNThCRTEwNzNGODkxOEVBMEE2QzgxOEUwRjcyQjVFMzM2OTA4
NEFBQTVCQzZGQjc5NUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAysh0nDkztDtJZs5pn8hn8xsaUKyzSz7VEPfzYqSyyb41rNTj9lhy
JPbmzKm1Q9/ZrnaX63WAm8zRz4zgTWy34Mm502Us00GwLdQ7adzfNRtGlZBC9OP3
EAL10IpEgpT/ebmOaUpzjlAsnYZhiqiF1eepwm1tAssJgMtnUvFoodAjgAoloJsd
WylZ9866ZBMCglnKwo4NTv17VJjDjNPblKyD7YF3XLCso3GxIcSVN+oo68u1Ig+6
w0etGoM+tS7qga1oRXADEURguLyLLGDdDSI83pJSGcEY+vQRzSSQqQNiVWNZjGEs
WL4Qc/iRjqCmyBjg9yteM2kISqpbxvt5XQIDAQABo4ICSzCCAkcwHQYDVR0OBBYE
FM1wJAHsm0dEBHkGN5XV6MexQ8AYMB8GA1UdIwQYMBaAFKq5s5Bek/3mOkG/UZKa
PK3MoGSrMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzAvQUFCOUIzOTA1RTkzRkRF
NjNBNDFCRjUxOTI5QTNDQURDQ0EwNjRBQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BQUI5QjM5MDVFOTNGREU2M0E0MUJGNTE5MjlBM0NBRENDQTA2
NEFCLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GeXk5dDdiQWFZMVNSdE1qamtY
d1VNbkVjeFl1ZXE2NWRaOUxhVjFORDJ5QS8wLzMxMzgzNzJlMzEzOTJlMzMyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzEzMjM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuxMDMA0G
CSqGSIb3DQEBCwUAA4IBAQC9Ja/UrnJ+TDt9QGmeronqkmfMWqMlsL3S6iQrpl0z
kUCnMQJ4iLLM+bH+0TtP54FuvoSKtIphrHs5CpMRTNU+ZS9DoQQ7QAgCcrWLiDuR
tDKI/5TYU4OUex+DWzovR+MLB0WcEo6/hO2P6J5OxrfR4caXiCm/g6HzykCVLBI7
+MxDcgHP4wnG18eqhzFPwpV6bPTgrgzsEpaxnHaTuhW3YkF0sMhNVqNFU51kUVqV
jjttpeoOh7zSY+mTL3R5BWFIfaUsoA9ZAxRCa0kLZZAhmHWNTWMqQtUplUOocwAy
PmELcrYYyHXPq4VpyrtpRDqgHa6DilKloGN5jFqLxOx2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:09 2024 by rpki-client on console-ams.rpki-client.org