Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e362e302f32342d3234203d3e203238313234.roa
File:                     3138372e31392e362e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          jdwXEWs8q/gHoWl289RKjDdTwd2BWAVjFk5ojV92NBw=
Subject key identifier:   18:A8:FA:FF:BD:6D:89:2D:4C:35:BC:9F:1E:F5:20:5E:E7:F3:63:7F
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       3BB8ACB471AC766AB89A720A6E64CEB0E597BD87
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e362e302f32342d3234203d3e203238313234.roa
Signing time:             Thu 02 Feb 2023 20:00:01 +0000
ROA not before:           Thu 02 Feb 2023 19:55:01 +0000
ROA not after:            Thu 01 Feb 2024 20:00:01 +0000
asID:                     28124
IP address blocks:        187.19.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b8:ac:b4:71:ac:76:6a:b8:9a:72:0a:6e:64:ce:b0:e5:97:bd:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Feb  2 19:55:01 2023 GMT
            Not After : Feb  1 20:00:01 2024 GMT
        Subject: CN=3082010A0282010100C59574BBBF496DEBF5CB6F16AA4575DAB7BA903CBEB015849BBF50030EA122FDC344817F7DCB8C45EE0B6FB616F219153945DB51ADD24F371C0D1617D240A55F2F069C86A2D17EBEE7B1BF0573EA6BB3A7ED90CABC1D5F9EEE2BF63712596F3D59978C07B8C6B695580E70EF149DB445005F6CAE9523E8E3B7F4CCBBB45A8B4C388FD2A902A08B3C34EA044FB08A028CBB97BD45F38F072D5F1E1769B846F66CF54935B98F2A4A2C03C8BDB64AFE7C18305C83A431D424F77FE673CDF4704BB0E4B7E2E5FABCAEB2F1DCF632AD5C74067E061ED5DF5C6D45F1E4082AB6BA02FD349C7F9FE2F033DDCF4CBFC4699E5B89CE81BD69F2771AE3CC3FD49DC8458A210203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:95:74:bb:bf:49:6d:eb:f5:cb:6f:16:aa:45:
                    75:da:b7:ba:90:3c:be:b0:15:84:9b:bf:50:03:0e:
                    a1:22:fd:c3:44:81:7f:7d:cb:8c:45:ee:0b:6f:b6:
                    16:f2:19:15:39:45:db:51:ad:d2:4f:37:1c:0d:16:
                    17:d2:40:a5:5f:2f:06:9c:86:a2:d1:7e:be:e7:b1:
                    bf:05:73:ea:6b:b3:a7:ed:90:ca:bc:1d:5f:9e:ee:
                    2b:f6:37:12:59:6f:3d:59:97:8c:07:b8:c6:b6:95:
                    58:0e:70:ef:14:9d:b4:45:00:5f:6c:ae:95:23:e8:
                    e3:b7:f4:cc:bb:b4:5a:8b:4c:38:8f:d2:a9:02:a0:
                    8b:3c:34:ea:04:4f:b0:8a:02:8c:bb:97:bd:45:f3:
                    8f:07:2d:5f:1e:17:69:b8:46:f6:6c:f5:49:35:b9:
                    8f:2a:4a:2c:03:c8:bd:b6:4a:fe:7c:18:30:5c:83:
                    a4:31:d4:24:f7:7f:e6:73:cd:f4:70:4b:b0:e4:b7:
                    e2:e5:fa:bc:ae:b2:f1:dc:f6:32:ad:5c:74:06:7e:
                    06:1e:d5:df:5c:6d:45:f1:e4:08:2a:b6:ba:02:fd:
                    34:9c:7f:9f:e2:f0:33:dd:cf:4c:bf:c4:69:9e:5b:
                    89:ce:81:bd:69:f2:77:1a:e3:cc:3f:d4:9d:c8:45:
                    8a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A8:FA:FF:BD:6D:89:2D:4C:35:BC:9F:1E:F5:20:5E:E7:F3:63:7F
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e362e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:b1:46:f5:13:e7:71:34:c4:54:63:ff:3e:0c:98:5e:e6:62:
         f7:2f:76:3b:bb:17:d8:e9:f6:e4:f4:b5:b2:ac:78:8c:50:89:
         30:e1:a7:dc:70:51:85:19:08:e0:52:88:16:a7:53:96:a2:e1:
         a4:23:b9:4c:34:20:04:0d:0b:5d:e9:f3:29:c9:3c:43:0b:17:
         6d:cd:85:da:eb:d0:cd:ac:d6:6f:b8:a8:c4:2c:89:1e:c1:9f:
         40:e8:4e:f8:5c:35:3f:5c:61:c8:cb:88:a9:0f:fe:05:c1:72:
         21:59:ba:3d:62:91:7b:dc:a0:13:d4:1b:2c:73:10:b9:85:bf:
         3a:47:d1:e8:5a:1c:13:8d:e9:bc:6a:8c:24:8b:25:80:c9:74:
         b3:2f:b4:b5:9a:84:79:3c:21:79:21:ff:60:6d:47:4f:43:3b:
         7d:e1:40:eb:7e:65:dd:e0:1d:0c:34:d9:79:8e:bf:e1:b0:85:
         b3:5a:2c:2b:a1:c0:65:1f:cc:7c:66:55:68:86:33:60:c2:b7:
         bb:9b:df:bd:bb:45:7d:69:01:2d:63:13:f0:4d:c3:a7:36:21:
         37:a2:be:d1:69:d7:eb:3e:5f:9b:7f:71:9a:c6:a2:10:85:fe:
         ed:f5:6d:37:0a:56:7f:66:06:a5:1f:da:5b:09:fe:80:e6:c7:
         6b:40:ba:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:09 2024 by rpki-client on console-ams.rpki-client.org