Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e342e302f32342d3234203d3e203238313234.roa
File:                     3138372e31392e342e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          NqGug0w8j8rXQx78m/omucxbFba23JHzbDn9fdQHOGE=
Subject key identifier:   5F:F5:CE:43:C9:2A:94:A8:A3:67:28:58:55:8A:10:E0:4A:47:55:AA
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       7D99E843345D5CE626D5A3D8AE7210EF6336C0BC
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e342e302f32342d3234203d3e203238313234.roa
Signing time:             Thu 02 Feb 2023 20:00:05 +0000
ROA not before:           Thu 02 Feb 2023 19:55:05 +0000
ROA not after:            Thu 01 Feb 2024 20:00:05 +0000
asID:                     28124
IP address blocks:        187.19.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:99:e8:43:34:5d:5c:e6:26:d5:a3:d8:ae:72:10:ef:63:36:c0:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Feb  2 19:55:05 2023 GMT
            Not After : Feb  1 20:00:05 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9b:6e:17:d7:09:81:15:07:65:ee:24:8b:90:
                    81:a4:62:27:14:58:39:af:87:75:03:0b:f5:db:02:
                    03:ae:db:43:1f:28:5a:5f:40:4e:1a:9a:f4:ab:67:
                    73:f5:2f:e4:ee:2b:5b:eb:9f:d4:60:b2:92:18:22:
                    44:47:8b:0f:5d:b4:f2:54:26:60:f8:5b:b6:2f:3b:
                    0d:88:89:99:83:9e:42:91:f5:fb:a6:c3:ee:17:5b:
                    59:d6:03:ab:a9:1d:b3:e5:33:c9:1b:fe:03:0d:fc:
                    7c:73:28:40:58:61:34:d4:e9:3f:71:c7:5b:a7:9c:
                    b2:37:e8:5f:91:71:65:0a:ca:f9:a1:56:c4:a3:d8:
                    40:00:9e:af:99:42:08:fb:d6:06:b8:33:ae:f0:fc:
                    d8:ac:51:db:0c:a3:c9:a7:08:54:b2:2c:98:09:87:
                    71:ac:6a:26:58:ed:7c:63:43:d2:9a:ef:56:23:ae:
                    59:dc:a0:dc:25:88:0d:80:48:d3:f1:9b:8c:91:4a:
                    54:84:62:05:7a:71:39:ab:ef:b4:c4:4d:a7:33:e0:
                    81:9b:79:cb:d2:ff:7c:61:da:3c:1d:7f:b0:34:9f:
                    3c:61:e4:14:81:25:fd:b7:89:3d:d5:7c:f8:f7:f9:
                    1d:1e:38:ed:37:5e:9a:db:f0:e0:d8:c3:30:52:a1:
                    c8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F5:CE:43:C9:2A:94:A8:A3:67:28:58:55:8A:10:E0:4A:47:55:AA
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e342e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:04:4a:69:52:da:0c:7b:dd:a0:b5:68:03:8e:3b:2b:c7:99:
         78:da:97:49:68:b9:76:6e:0d:f3:10:4c:3c:0f:20:62:7f:b0:
         6d:86:3c:83:20:0b:a2:59:08:39:d2:86:d5:e8:77:6b:33:67:
         8c:40:b1:52:d5:bf:44:3a:8f:7f:91:20:59:94:f6:3e:92:b5:
         56:84:b2:96:35:01:b3:a0:02:1d:75:f1:4a:d7:1c:8d:9f:ef:
         08:67:a3:b5:85:bf:67:72:e5:6e:ac:15:64:a7:36:69:f1:33:
         d6:76:65:2e:64:07:93:b6:a1:67:77:ff:bc:b4:b8:06:61:da:
         25:b0:a2:b8:cd:97:20:ab:97:b3:94:43:f5:9e:6c:b2:57:76:
         48:68:69:ce:45:92:be:65:a2:9f:e2:88:4b:96:59:82:f0:e2:
         09:64:f2:2c:6c:4c:63:68:5d:b2:93:88:0b:d2:df:63:1b:5c:
         0a:67:3f:6a:1a:4c:03:17:26:43:55:fe:b8:02:22:35:a9:2c:
         b9:cf:7f:13:b1:da:21:c9:a4:29:47:0d:f1:30:84:b4:eb:1b:
         ee:2e:ac:97:a4:f7:88:26:53:f9:57:54:51:d5:42:6f:b9:6b:
         65:cf:cc:23:aa:45:69:03:d7:1d:6d:f2:1e:57:e7:58:06:91:
         09:5d:ac:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org