Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e392e302f32342d3234203d3e203238313234.roa
File:                     3138372e31392e392e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          lxoeD8KdxJAtQW/kQ/4CL63zHp5iRLO9xjqvnZik2ic=
Subject key identifier:   F9:85:C9:90:C2:3A:89:79:72:FB:4D:52:9E:67:27:53:CD:C8:48:5E
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       72AEF10DBB6FAF0E606C1C7B24D552646510907F
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e392e302f32342d3234203d3e203238313234.roa
Signing time:             Thu 02 Feb 2023 20:00:06 +0000
ROA not before:           Thu 02 Feb 2023 19:55:06 +0000
ROA not after:            Thu 01 Feb 2024 20:00:06 +0000
asID:                     28124
IP address blocks:        187.19.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ae:f1:0d:bb:6f:af:0e:60:6c:1c:7b:24:d5:52:64:65:10:90:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Feb  2 19:55:06 2023 GMT
            Not After : Feb  1 20:00:06 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f0:6d:c2:7e:6a:c2:46:21:6c:e4:57:25:13:
                    66:49:11:63:4d:4f:59:f2:0d:ef:93:77:1b:86:56:
                    f8:b4:94:04:b9:bf:e4:97:a7:e1:9f:33:e3:e3:e8:
                    e6:5a:04:09:b8:87:63:18:76:a4:5e:23:fa:f6:23:
                    16:1b:f5:b9:30:00:94:a9:02:d1:a4:1e:b2:e9:57:
                    fc:48:25:21:b0:09:67:05:f1:ae:40:ef:e0:1b:c5:
                    ee:08:6e:8a:33:89:cc:a7:69:cf:5e:ed:88:5b:5b:
                    fa:dc:79:8e:73:2e:a7:44:16:01:40:42:da:63:45:
                    0c:bc:52:07:fc:1b:d4:ba:52:bd:6d:4f:89:19:79:
                    80:10:3a:78:8f:8d:69:52:94:59:a9:07:04:bc:ba:
                    0c:59:a4:c3:b0:57:b5:43:c2:c2:3e:d6:f1:4e:d1:
                    c2:0d:dc:46:98:a4:22:27:94:47:fd:6a:bc:a9:1c:
                    1a:69:bf:d4:33:f1:1b:24:70:a6:c4:aa:67:e1:2b:
                    41:01:50:89:f5:59:16:f1:87:44:f7:a9:f1:1f:2b:
                    02:14:d6:c7:4e:79:d8:0d:8f:44:c9:c7:17:af:b1:
                    6a:c5:18:5d:3c:65:13:7d:5b:f2:ee:01:dc:0b:4b:
                    1d:73:ff:9d:07:ea:a8:5f:8d:0f:ca:d8:56:9a:88:
                    3b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:85:C9:90:C2:3A:89:79:72:FB:4D:52:9E:67:27:53:CD:C8:48:5E
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3138372e31392e392e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:cc:1b:b1:93:1c:41:45:05:76:3f:5b:6c:11:37:78:a0:91:
         1d:c9:82:a5:4c:e4:4f:1d:ca:5c:fc:7c:d0:17:65:57:7c:e0:
         a2:e3:1b:81:ab:b9:1b:75:ae:19:fd:cd:8b:eb:2e:f5:38:3c:
         42:3d:8d:6f:5b:6f:e0:70:34:32:24:ce:a0:eb:c0:c6:2b:50:
         4f:83:8d:01:23:b8:dd:75:32:5c:95:5a:23:9a:8b:69:a3:6c:
         15:e8:00:9c:56:b8:91:e3:56:d4:ae:6d:5d:ce:fd:99:26:0b:
         a6:60:49:e2:91:49:c3:f5:36:c4:d0:c6:e9:21:1c:e7:39:ab:
         fa:a9:f6:7f:09:f4:26:ee:76:84:54:0c:91:42:56:30:b4:bc:
         37:a8:36:ec:ec:f2:eb:16:d8:b5:b0:de:8c:af:45:e1:6b:17:
         9a:93:03:a9:63:59:53:f2:55:bd:17:23:4a:43:7f:1d:80:07:
         85:2a:5a:ba:c2:e0:8a:ca:cc:30:2e:4e:09:40:23:10:74:cb:
         4e:bb:a9:2c:98:b3:12:cd:af:3b:95:b3:13:00:77:bd:96:c1:
         f8:d9:3c:dc:52:f4:3a:96:e9:f6:e7:02:7a:02:63:3c:ff:17:
         4d:16:05:19:f3:ec:25:b1:a6:a7:88:cb:e8:46:50:8d:7b:89:
         15:84:be:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:09 2024 by rpki-client on console-ams.rpki-client.org