Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3136382e3232372e3133342e302f32342d3234203d3e20323634303039.roa
File:                     3136382e3232372e3133342e302f32342d3234203d3e20323634303039.roa (raw, json)
Hash identifier:          gE9numXqbmTqaTmWMJpa1tmgWpdyfSbToWSbjg7cPGc=
Subject key identifier:   DD:9B:35:12:09:6A:14:90:DC:56:E5:DA:F9:6E:AB:69:4F:1A:9D:D3
Certificate issuer:       /CN=273A8E626DF2CB38BF17E437441A4BFFC2540F09
Certificate serial:       38AC7148A9C7A658E10D71E279A707398B4B1449
Authority key identifier: 27:3A:8E:62:6D:F2:CB:38:BF:17:E4:37:44:1A:4B:FF:C2:54:0F:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/273A8E626DF2CB38BF17E437441A4BFFC2540F09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3136382e3232372e3133342e302f32342d3234203d3e20323634303039.roa
Signing time:             Tue 12 Mar 2024 12:49:34 +0000
ROA not before:           Tue 12 Mar 2024 12:44:34 +0000
ROA not after:            Tue 11 Mar 2025 12:49:34 +0000
asID:                     264009
IP address blocks:        168.227.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ac:71:48:a9:c7:a6:58:e1:0d:71:e2:79:a7:07:39:8b:4b:14:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273A8E626DF2CB38BF17E437441A4BFFC2540F09
        Validity
            Not Before: Mar 12 12:44:34 2024 GMT
            Not After : Mar 11 12:49:34 2025 GMT
        Subject: CN=DD9B3512096A1490DC56E5DAF96EAB694F1A9DD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:25:bb:59:6d:2d:ee:6b:02:04:9e:38:ad:40:
                    76:cd:dd:62:02:41:08:54:70:e3:a9:c9:77:23:46:
                    42:50:1c:1d:ef:ca:35:8e:10:2f:b3:78:1f:ee:39:
                    b6:7c:de:76:5e:f6:10:4b:c0:e5:2a:e6:31:4b:db:
                    ce:92:d2:ca:48:ae:c7:e5:46:30:e4:45:bd:9d:85:
                    0e:57:69:13:50:39:3f:56:6d:fa:96:68:18:92:d9:
                    4a:e9:ac:f0:bb:1e:f8:1a:2b:9d:2e:2f:a8:9a:2c:
                    13:2e:a8:0c:e5:3d:02:37:c8:aa:d9:b9:17:27:2c:
                    41:f2:c7:08:7d:70:ba:52:9b:09:ed:c4:b5:a4:40:
                    0e:e6:e6:da:25:c0:0c:cc:ad:c3:1b:b4:7d:cb:9b:
                    2b:cd:02:95:6e:c4:02:5f:de:11:e9:68:43:ff:68:
                    51:8a:75:b2:8b:94:a2:a9:d7:f8:ad:48:45:e6:0e:
                    ef:a1:82:e2:c6:d8:f8:d2:1d:55:4e:e4:54:3f:9c:
                    a8:05:d7:c4:b5:1b:02:75:a5:83:17:b2:87:5c:f6:
                    37:20:a2:14:8a:dc:03:58:9f:06:b1:e1:07:37:60:
                    c7:8d:83:5e:7a:43:d3:fa:9a:dc:7c:8c:db:ab:7b:
                    b6:5a:77:d0:d7:6f:e2:40:46:38:fb:48:9b:f9:31:
                    95:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9B:35:12:09:6A:14:90:DC:56:E5:DA:F9:6E:AB:69:4F:1A:9D:D3
            X509v3 Authority Key Identifier:
                keyid:27:3A:8E:62:6D:F2:CB:38:BF:17:E4:37:44:1A:4B:FF:C2:54:0F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/273A8E626DF2CB38BF17E437441A4BFFC2540F09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/273A8E626DF2CB38BF17E437441A4BFFC2540F09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3136382e3232372e3133342e302f32342d3234203d3e20323634303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:43:5c:4d:13:4a:19:05:5c:32:f7:3a:28:53:ce:b5:f0:dd:
         22:de:33:fb:73:44:4b:07:2a:9f:80:b6:6b:2a:e6:d7:3d:5a:
         1f:50:4b:71:f6:ba:b8:6e:5f:58:5f:cf:db:0b:62:77:1a:26:
         bd:60:d2:ec:22:9d:b7:e4:0d:79:74:2d:7c:bf:dc:12:b5:ad:
         3e:70:a8:8e:44:e7:90:99:b8:af:6a:2a:1a:a4:4c:f9:20:b5:
         c3:fd:76:a1:91:0f:6e:b1:83:d4:ee:74:9c:a4:c3:9a:89:87:
         53:20:4f:d6:d7:6e:bb:55:5a:45:6c:9b:6c:53:20:cd:a9:10:
         46:b7:89:6c:14:ee:44:09:47:da:df:78:d0:de:95:27:73:90:
         8d:e9:d0:e2:f7:fb:48:0f:e0:dd:38:0b:bb:93:4c:70:f5:2b:
         1a:f6:b9:58:af:28:cd:1c:45:90:b1:7d:6c:dc:03:89:5d:fc:
         03:32:1e:8d:f8:0e:44:67:36:fd:c3:79:2d:8a:c3:95:58:4b:
         8a:41:39:02:af:f3:a7:b6:29:28:f1:02:f3:72:b0:50:e1:f3:
         09:08:c5:b8:98:69:10:08:5b:72:79:91:cb:9d:92:60:5d:0b:
         87:1c:b1:2f:81:a4:41:50:35:f5:79:dc:e5:94:e7:13:77:a7:
         f8:84:34:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org