Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e342e302f32322d3232203d3e203238313234.roa
File:                     3138372e31392e342e302f32322d3232203d3e203238313234.roa (raw, json)
Hash identifier:          WcjBzXItWgV7R6nuhT1oWKWYgeuPSxlQnIbBumG7iYg=
Subject key identifier:   85:7A:47:C7:41:C6:F3:18:AA:B6:F4:DF:B7:9C:9A:B8:52:E8:6A:0B
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       383B3980F8D848DDABFA30008CA646C97CA93410
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e342e302f32322d3232203d3e203238313234.roa
Signing time:             Thu 02 Feb 2023 20:00:03 +0000
ROA not before:           Thu 02 Feb 2023 19:55:03 +0000
ROA not after:            Thu 01 Feb 2024 20:00:03 +0000
asID:                     28124
IP address blocks:        187.19.4.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:3b:39:80:f8:d8:48:dd:ab:fa:30:00:8c:a6:46:c9:7c:a9:34:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Feb  2 19:55:03 2023 GMT
            Not After : Feb  1 20:00:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:26:a2:27:5f:76:80:a7:01:2d:6e:f5:f0:d3:
                    eb:a5:24:91:91:87:f3:32:2b:45:96:52:15:13:08:
                    ee:9c:1d:eb:74:d4:eb:09:cf:d4:f3:d6:04:da:bc:
                    f3:20:c8:52:93:24:a3:07:8d:ab:41:57:d5:ba:20:
                    cc:7c:fa:d1:bf:49:8e:c0:ce:c7:cd:30:97:0d:9a:
                    fb:07:6d:4e:4e:6f:5f:42:4a:b4:8b:0c:62:29:da:
                    11:49:1e:87:40:43:5a:c0:2c:c7:9f:69:3f:02:c2:
                    ed:53:64:63:ba:15:c2:6c:34:58:cf:5f:7f:d9:23:
                    39:88:d2:db:9d:d8:e5:a0:f1:62:0e:8e:99:ab:eb:
                    1a:93:8b:6d:38:85:ee:0c:db:46:83:56:25:95:62:
                    ea:03:68:33:b9:d2:78:5f:cb:da:c3:46:1b:e5:ee:
                    18:56:9b:b3:a0:16:49:56:e0:c5:e1:09:90:19:fc:
                    80:73:f8:81:ec:1a:b3:3e:8c:e9:20:c9:29:b2:95:
                    1c:70:67:d9:ce:f9:56:52:59:bd:d5:83:f0:c8:fd:
                    a6:df:e8:c4:37:47:4a:37:70:60:6e:9e:75:1e:f3:
                    4b:cb:63:58:e5:35:1d:70:8c:da:f3:0c:16:5c:8e:
                    65:e0:28:d8:c0:a6:31:f2:7a:21:fe:34:d1:c3:53:
                    48:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7A:47:C7:41:C6:F3:18:AA:B6:F4:DF:B7:9C:9A:B8:52:E8:6A:0B
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e342e302f32322d3232203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:a9:bb:80:a2:eb:83:e8:89:fd:5f:21:e6:d2:30:82:b9:7a:
         f9:06:e7:43:cc:ba:24:3f:07:7d:b2:04:8e:f3:e4:e9:fe:67:
         ed:c0:9b:c9:e7:05:5c:86:b2:fa:71:3a:05:37:d3:02:97:80:
         2c:c9:7d:cc:0f:21:b8:7c:96:32:8b:d2:a9:18:5f:1e:b9:da:
         15:a4:0d:80:b0:95:0a:ef:88:86:be:19:91:2a:5c:85:64:ca:
         4c:99:58:00:f6:c1:6f:2e:34:e0:b8:e3:a5:4b:bc:5f:11:bf:
         75:24:cc:78:1d:17:17:d1:f4:3d:64:97:9a:84:3a:73:b0:f0:
         10:31:aa:92:9f:c8:ff:f2:a7:c4:f7:63:52:ca:16:53:c2:3d:
         c8:71:47:3b:93:2f:38:82:d6:a7:12:33:15:2d:f9:d5:98:44:
         3b:0b:73:17:ca:71:5a:8a:f1:4a:7f:5a:49:0b:79:90:fd:51:
         c8:c1:a8:00:07:d9:15:02:0f:75:c6:83:a5:5c:bc:9b:59:62:
         c5:60:40:fd:a6:12:31:55:16:ae:a4:25:ab:af:d1:8f:d4:72:
         ff:ca:8c:51:b2:28:ae:fe:d0:c0:a2:55:ed:67:90:c7:84:45:
         fc:91:dc:c2:9e:8b:fb:a1:37:0d:ba:49:d9:7d:07:da:51:95:
         69:3b:ea:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org