Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e372e302f32342d3234203d3e203238313234.roa
File:                     3138372e31392e372e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          wOoT9HctO0x9w8U6G4CMisOE/YEBM0XJy+j9Q8e46Jw=
Subject key identifier:   39:09:8D:9B:2C:29:70:9A:7F:5B:3F:C8:AB:FD:AF:03:14:7D:50:C7
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       1602BCCEF97D3C6F813490AE7A490FF622C2A7A3
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e372e302f32342d3234203d3e203238313234.roa
Signing time:             Thu 02 Feb 2023 20:00:00 +0000
ROA not before:           Thu 02 Feb 2023 19:55:00 +0000
ROA not after:            Thu 01 Feb 2024 20:00:00 +0000
asID:                     28124
IP address blocks:        187.19.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:02:bc:ce:f9:7d:3c:6f:81:34:90:ae:7a:49:0f:f6:22:c2:a7:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Feb  2 19:55:00 2023 GMT
            Not After : Feb  1 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f1:f9:1e:cd:a3:48:96:ea:88:5c:27:52:10:
                    fa:65:83:58:0b:c8:33:ce:e9:83:29:54:2b:80:6e:
                    d7:b6:6e:2f:29:50:85:1a:64:bc:2e:ea:86:97:f5:
                    7c:48:40:8f:51:14:2b:84:d8:5d:46:0d:7f:2b:51:
                    23:dd:bc:ab:1e:c8:d4:f4:dd:57:f8:0b:42:6f:aa:
                    1c:25:23:73:f5:58:68:da:3d:de:24:25:60:28:15:
                    ff:a0:fc:79:ac:5d:f0:b7:e0:9d:33:ba:5e:3a:7e:
                    96:23:d1:a7:ca:46:e4:d2:c8:be:19:a9:2a:de:ba:
                    25:1c:28:ce:fb:a5:a3:8b:64:7e:f8:02:4b:47:38:
                    7f:ee:8b:bf:57:4f:fd:82:5c:4e:af:b8:f6:75:3a:
                    8f:86:43:57:66:63:72:c8:d9:89:8e:1d:29:78:1c:
                    4e:f8:68:24:3e:c1:93:e5:eb:e4:ca:67:6a:b5:5e:
                    75:dc:00:82:a3:09:f5:b3:ec:11:5f:e1:e8:79:92:
                    00:e8:91:81:08:c7:70:df:73:3c:94:d0:c6:3e:1d:
                    73:a8:95:0f:44:dd:b0:2c:ee:ea:7f:8d:54:9f:15:
                    e8:06:77:55:dc:2b:0d:1e:b7:b8:44:17:02:ea:c4:
                    3d:24:60:7a:cc:de:08:2f:77:bb:3d:72:82:0d:ae:
                    9e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:09:8D:9B:2C:29:70:9A:7F:5B:3F:C8:AB:FD:AF:03:14:7D:50:C7
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e372e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:86:9a:f7:2f:4e:a6:c5:fe:c3:7e:dd:56:9e:23:25:84:b1:
         56:d9:4d:6a:88:81:51:7a:53:36:c6:8c:41:25:17:e7:35:dd:
         06:6a:ad:2b:4d:07:bc:66:8b:ae:a9:d8:02:f9:20:6f:15:24:
         95:10:2d:bc:0a:d7:8f:68:20:bb:77:a4:ab:96:5b:a5:78:26:
         de:57:27:9d:23:19:15:7f:b5:e3:07:3a:ca:8f:37:db:f6:8e:
         d2:16:dd:d3:6e:f6:f7:a4:b8:08:a9:80:da:cc:6d:26:f1:2b:
         34:2f:20:17:62:fa:c8:95:9f:b4:70:9a:fe:7e:6a:0e:be:19:
         5e:ed:0b:d9:e8:27:1c:fb:00:f3:92:f3:7d:2a:97:0e:22:6b:
         1b:76:a6:99:cb:64:bd:ec:e7:4e:a2:5e:ee:57:8b:6f:94:fa:
         93:49:f7:01:32:61:9a:bd:b0:5e:f9:39:c1:5f:4f:e4:1b:df:
         2b:aa:b7:0f:0b:a1:b6:21:e2:98:15:13:8b:89:50:ab:72:e6:
         e7:f6:b7:8f:07:d6:fc:63:4f:7b:37:26:49:67:cf:28:6e:a0:
         a7:e9:15:35:37:b1:5b:34:a1:bc:5c:0b:e8:4e:97:f6:80:0a:
         47:4a:64:eb:42:ac:cb:9a:92:32:25:49:77:71:3e:9b:0c:b2:
         c7:ca:17:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:09 2024 by rpki-client on console-ams.rpki-client.org