Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e382e302f32342d3234203d3e203238313234.roa
File:                     3138372e31392e382e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          UGqYfHVQPsPc3Wi4wFd+oRkksp8FSI5VWb9DDO+m4pY=
Subject key identifier:   93:54:6D:C0:08:26:CD:5E:5C:8D:4A:E4:F1:06:39:48:F1:3A:B3:C5
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       147CECF3391C386B9AAA4C376B4D2C2B53ADD5C5
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e382e302f32342d3234203d3e203238313234.roa
Signing time:             Thu 02 Feb 2023 20:00:01 +0000
ROA not before:           Thu 02 Feb 2023 19:55:01 +0000
ROA not after:            Thu 01 Feb 2024 20:00:01 +0000
asID:                     28124
IP address blocks:        187.19.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7c:ec:f3:39:1c:38:6b:9a:aa:4c:37:6b:4d:2c:2b:53:ad:d5:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Feb  2 19:55:01 2023 GMT
            Not After : Feb  1 20:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:90:65:27:2c:db:9c:9c:5b:b9:d1:1f:b9:86:
                    62:63:64:d3:7a:8b:65:93:88:e3:07:87:b2:45:27:
                    a1:5f:7b:a7:47:32:69:a1:2e:33:03:d0:e8:2a:b3:
                    dc:c6:ae:48:f0:9c:cc:f9:2e:88:09:ee:23:23:e7:
                    53:50:e6:d6:b3:f7:fc:81:ca:36:f5:1e:08:68:e6:
                    75:90:b7:9a:b9:c3:06:2e:b8:f7:cd:cf:63:4f:a7:
                    2f:47:77:c4:6b:a0:43:b2:2a:0e:78:c1:57:66:0a:
                    fb:77:56:41:e2:5d:a4:92:ef:df:d2:2f:63:3a:1b:
                    72:23:0f:45:7a:f9:8e:d2:39:82:8f:d9:80:c8:76:
                    85:af:63:cf:1b:6f:7a:0f:58:be:bb:5e:c6:34:11:
                    4a:94:5f:2d:8b:fc:54:cc:a4:4b:2a:57:de:72:5e:
                    46:23:40:d7:fb:c8:47:af:9c:87:04:12:d9:9c:64:
                    73:2c:2b:2f:d2:3e:9b:a2:df:bc:bc:0b:fd:52:71:
                    e9:2f:d6:64:3f:01:2f:a6:b2:d8:36:72:24:ef:11:
                    78:87:06:a7:2c:c7:8e:ce:2c:4c:44:1c:8f:c1:93:
                    84:d8:56:db:a0:66:8e:4f:cb:a7:aa:7e:26:ec:c9:
                    03:d9:41:84:49:a2:d0:67:f3:fc:d6:79:15:d6:4b:
                    b0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:54:6D:C0:08:26:CD:5E:5C:8D:4A:E4:F1:06:39:48:F1:3A:B3:C5
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e382e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:e8:4a:ec:b8:05:f0:e3:b4:ce:16:5b:cc:2a:81:d4:ce:77:
         44:d3:ab:81:b3:31:cf:53:3a:7e:6d:2f:24:5b:6f:74:f9:33:
         2d:66:89:33:72:25:fb:5c:7b:96:07:b1:cf:43:eb:1e:84:09:
         0d:08:d5:fb:bd:96:17:d2:8f:ed:9d:08:e4:d6:e8:ab:06:03:
         32:e9:6e:53:34:73:0d:ee:ac:5a:49:87:ce:73:85:87:f6:39:
         9f:05:a1:0c:f3:ef:17:fd:9a:c3:22:70:19:c5:db:77:b3:51:
         43:05:c3:ae:97:b6:28:02:49:50:c9:74:98:ae:34:cf:cb:bf:
         bb:1b:bc:01:7c:c5:73:ef:6c:56:eb:a7:07:2c:9d:be:39:c9:
         52:62:8f:f2:69:87:17:00:99:7e:1f:b7:64:8d:f9:88:fa:ee:
         53:47:b4:fd:44:6d:51:ab:45:e9:ad:b8:e6:27:a9:72:d8:9a:
         74:0c:38:2d:b0:7e:a2:3e:5d:11:03:db:e0:20:75:80:79:af:
         9e:18:ca:f4:ab:a2:34:de:aa:48:ba:53:c7:06:dc:f8:40:32:
         aa:fb:4a:76:ef:58:8e:c9:9b:4a:ca:0e:96:f7:e4:51:00:16:
         bf:e6:e4:c7:d8:a2:d3:95:ac:a0:7c:13:a7:2b:83:ce:a9:80:
         82:60:da:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:09 2024 by rpki-client on console-ams.rpki-client.org