Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e382e302f32322d3232203d3e203238313234.roa
File:                     3138372e31392e382e302f32322d3232203d3e203238313234.roa (raw, json)
Hash identifier:          g8UaLzu8MjLjwT36e5lS1DtCt5QgUG4ZbWY6AEdE97o=
Subject key identifier:   C9:BA:D0:FF:AF:9A:C1:4A:52:2C:EF:D7:BD:52:18:2F:62:C0:7A:29
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       6115D75B1B9A52E694273E0637CF74B26436F870
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e382e302f32322d3232203d3e203238313234.roa
Signing time:             Thu 02 Feb 2023 20:00:00 +0000
ROA not before:           Thu 02 Feb 2023 19:55:00 +0000
ROA not after:            Thu 01 Feb 2024 20:00:00 +0000
asID:                     28124
IP address blocks:        187.19.8.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:15:d7:5b:1b:9a:52:e6:94:27:3e:06:37:cf:74:b2:64:36:f8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Feb  2 19:55:00 2023 GMT
            Not After : Feb  1 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f8:ba:05:53:b3:c7:71:60:a9:7e:46:06:b0:
                    9e:c9:8a:eb:b8:58:f3:f2:96:50:6d:58:79:a5:6a:
                    a7:1d:8d:e2:ce:de:af:9b:7e:40:3f:6e:c9:80:3a:
                    70:61:f1:9e:cc:c5:07:94:91:79:54:04:3a:d5:aa:
                    b1:81:c1:b0:60:c0:8e:cc:63:a9:98:a1:b5:83:77:
                    d9:0c:5f:7b:c0:d8:dc:56:69:00:1d:1a:ec:ce:b1:
                    53:04:7e:d6:c1:fd:14:77:a4:39:91:4b:24:28:e0:
                    ee:07:a7:a2:a2:ba:81:00:6e:a0:a3:9a:52:6c:bd:
                    55:db:32:89:8f:99:33:61:ab:cd:56:0a:4d:00:5d:
                    99:69:49:44:fc:39:cb:cb:35:20:69:ab:34:2d:4b:
                    d4:37:39:7f:f8:bf:a4:58:55:1f:47:a0:5f:6b:db:
                    46:03:76:af:8d:e9:32:9f:7e:ca:4d:d4:a1:9f:f5:
                    c9:61:da:d7:63:28:fa:70:0d:86:59:ea:28:a8:50:
                    3c:72:8f:ea:5b:b3:10:8b:6b:5e:e9:a5:e4:29:e4:
                    36:c1:c4:60:ae:6c:80:00:92:53:c3:70:60:20:89:
                    0f:57:36:8b:2b:2d:46:b7:db:c8:f9:21:3b:47:a0:
                    7d:35:37:bc:1e:e4:fa:31:a0:d1:fe:1b:7b:90:2a:
                    f7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BA:D0:FF:AF:9A:C1:4A:52:2C:EF:D7:BD:52:18:2F:62:C0:7A:29
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e382e302f32322d3232203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:7d:d3:f9:29:e9:fa:e5:95:dc:21:43:d9:be:b6:3e:86:63:
         0c:66:ca:91:6c:fb:84:da:bb:6b:4c:b8:64:0e:48:84:e7:77:
         b0:a2:61:99:59:c5:39:fe:4e:37:99:c6:40:25:95:a7:c4:f3:
         cb:15:33:ac:fc:39:dd:7d:85:30:82:ee:cf:cd:2f:e4:16:50:
         88:1c:4b:91:59:38:15:fc:77:9c:d1:fe:a0:1c:47:77:54:61:
         f6:65:ea:86:dd:eb:c5:d2:af:e2:e9:20:58:9a:03:5a:65:55:
         d8:aa:69:ce:bb:32:01:78:69:29:f5:70:7d:4c:21:52:0e:ce:
         1b:9c:75:d1:ee:c1:ab:39:1a:db:c9:97:f6:22:23:96:a4:c6:
         35:4f:89:02:b3:35:49:ea:11:91:b9:fb:c6:39:ff:05:c9:2b:
         6e:a3:58:51:f8:b5:3d:33:d6:7c:f0:9b:f9:00:ee:ec:8a:e8:
         53:e6:a4:21:29:0f:bc:14:b1:7a:de:46:b9:97:a3:a8:b5:6b:
         8c:8f:81:4e:9f:a0:65:90:74:36:1e:76:68:81:b2:db:b4:5a:
         c1:7f:6a:33:b9:2f:24:75:f6:1c:e1:93:9a:3a:78:69:a8:0f:
         e0:83:cd:27:4d:64:ed:21:19:0e:69:56:03:29:89:69:7d:a1:
         56:99:db:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:09 2024 by rpki-client on console-ams.rpki-client.org