Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3133382e3131372e3230342e302f32322d3234203d3e203238323031.roa
File:                     3133382e3131372e3230342e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          s0PTr/tQqzw5ERWW4ZbP+LWHRpvwq7NFFHIXN9aka1c=
Subject key identifier:   1B:B1:E0:6B:33:E9:E8:71:38:0B:4C:FD:BC:CF:19:26:77:AA:A6:62
Certificate issuer:       /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial:       5B1728BBDDBBE36108AEA94E1A5A5F442CA0286A
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3133382e3131372e3230342e302f32322d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:41:41 +0000
ROA not before:           Wed 10 Apr 2024 12:36:41 +0000
ROA not after:            Wed 09 Apr 2025 12:41:41 +0000
asID:                     28201
IP address blocks:        138.117.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:17:28:bb:dd:bb:e3:61:08:ae:a9:4e:1a:5a:5f:44:2c:a0:28:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
        Validity
            Not Before: Apr 10 12:36:41 2024 GMT
            Not After : Apr  9 12:41:41 2025 GMT
        Subject: CN=1BB1E06B33E9E871380B4CFDBCCF192677AAA662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:10:98:a7:10:33:44:c8:d2:05:9e:68:91:b4:
                    e1:39:65:a9:f0:12:4a:64:d2:3c:a1:24:72:a7:39:
                    aa:99:14:ed:57:b3:81:d8:d3:d5:20:8c:a2:42:4a:
                    48:4e:3e:f3:42:43:09:99:1e:15:60:de:2c:f1:2f:
                    47:45:36:71:c8:b0:76:59:e2:6b:d9:37:93:2d:2c:
                    b1:92:b8:70:a9:14:f0:99:4c:f2:9c:fa:0e:3a:90:
                    03:c3:dd:91:cb:56:4c:2f:9e:3e:02:65:eb:83:98:
                    44:46:7a:f8:a8:4e:d7:29:86:cc:79:8c:64:78:41:
                    db:a7:ae:98:04:62:94:f6:46:d4:ca:1f:28:40:3b:
                    ff:94:10:35:33:ba:26:c1:1c:b1:cb:da:bf:a9:f0:
                    6a:8d:b8:a9:07:50:79:bd:ca:2d:21:40:57:8b:d5:
                    4a:2a:1f:67:ef:e9:1e:6a:1d:79:c3:20:03:90:42:
                    2b:bb:0c:fe:b2:fd:49:12:fa:9d:af:28:ed:de:62:
                    40:42:54:6f:0e:29:a0:89:57:8e:0a:eb:d3:e2:3c:
                    c9:f8:56:0b:26:d0:88:24:a2:ab:e6:ee:5c:1a:4f:
                    de:d1:e8:3c:b1:ec:6e:53:5a:7d:9b:f4:21:74:a2:
                    5c:c7:25:60:8e:51:b2:ed:4e:eb:14:31:b3:64:16:
                    78:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B1:E0:6B:33:E9:E8:71:38:0B:4C:FD:BC:CF:19:26:77:AA:A6:62
            X509v3 Authority Key Identifier:
                keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3133382e3131372e3230342e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:eb:7c:d5:e0:6d:e1:95:20:f3:ca:70:87:68:c1:5d:bf:a3:
         1f:63:82:b8:57:4b:6f:85:4c:59:c5:35:8e:4f:4d:0f:9e:bb:
         71:74:c4:98:2d:f8:a0:f2:9c:4c:26:df:cc:07:c7:64:ac:06:
         f4:00:6c:8b:10:b7:a5:bf:7d:3a:ae:27:49:67:f8:dd:59:36:
         b2:90:b2:3f:99:58:4f:84:e0:25:98:5f:61:d3:3d:a6:aa:6a:
         21:e8:54:b3:5f:f9:51:c4:ee:69:a3:18:85:95:c1:db:db:aa:
         7f:c1:28:5c:9b:70:6d:89:72:54:04:5e:32:62:02:7b:b8:2d:
         d5:a1:6e:da:be:d3:86:7f:48:9c:48:ae:d0:e1:7a:3d:f8:40:
         d3:9f:e8:c9:04:b3:76:ae:e1:c6:85:4c:d5:d3:5d:73:b1:75:
         61:1d:58:20:60:ab:b0:70:21:c0:97:71:87:63:72:e1:8a:0c:
         6a:a9:c1:b6:99:59:ba:8a:9f:a5:48:53:d3:4a:c1:ac:67:5e:
         f3:3c:1c:5e:d0:65:2b:37:51:11:68:19:56:54:2f:82:ec:aa:
         65:bc:d6:66:f6:80:15:5e:88:e6:55:ea:22:cb:75:b1:7e:03:
         44:ab:a2:4a:e8:c4:8f:80:82:ba:d6:2f:d4:c8:66:cd:9a:52:
         12:52:25:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:09 2024 by rpki-client on console-fra.rpki-client.org