Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3133382e3132312e36342e302f32322d3234203d3e203238323031.roa
File:                     3133382e3132312e36342e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          2MXhfZxGKMyUDqm4rZewlR8kLi7YXpkEs+b0jrYKYos=
Subject key identifier:   73:71:37:B7:C3:14:35:18:C2:1F:D3:C1:9F:4E:3F:CF:5D:25:B4:37
Certificate issuer:       /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial:       1D43A10DC6AA634D653D6B4DFADDA49196D0711F
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3133382e3132312e36342e302f32322d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:33:40 +0000
ROA not before:           Wed 10 Apr 2024 12:28:40 +0000
ROA not after:            Wed 09 Apr 2025 12:33:40 +0000
asID:                     28201
IP address blocks:        138.121.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:43:a1:0d:c6:aa:63:4d:65:3d:6b:4d:fa:dd:a4:91:96:d0:71:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
        Validity
            Not Before: Apr 10 12:28:40 2024 GMT
            Not After : Apr  9 12:33:40 2025 GMT
        Subject: CN=737137B7C3143518C21FD3C19F4E3FCF5D25B437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a0:18:3d:24:96:46:9c:e5:48:fb:ea:68:00:
                    f2:01:51:62:e3:59:c4:7a:34:e2:9d:09:cc:07:94:
                    20:6b:1f:e8:8a:9a:fc:06:83:88:61:c5:85:56:76:
                    79:10:58:7a:48:e0:10:d2:e6:ff:67:cb:d6:3a:19:
                    e7:7f:f8:7d:93:38:43:c3:ad:cc:d0:14:95:77:0a:
                    d1:37:9b:10:5d:13:d9:4d:26:8c:38:17:4e:bf:39:
                    ba:4f:a8:46:b7:31:ed:f8:6b:ba:a1:cb:78:62:d2:
                    05:26:f7:c7:72:a1:32:9b:da:00:ef:18:06:c3:93:
                    99:90:31:61:34:47:5a:80:95:fe:ea:1e:2f:ee:02:
                    22:a1:e4:0f:9f:d2:35:22:01:b2:c4:47:48:65:4f:
                    68:69:04:21:77:cc:2a:1f:a2:73:4c:5b:20:7c:4a:
                    b1:49:cc:38:bf:1d:cb:16:33:a0:7e:f1:3e:7e:ac:
                    c1:aa:86:70:5c:53:bf:81:8f:d8:d1:39:e0:fe:8e:
                    fa:24:43:05:82:77:da:46:1c:1c:7f:16:bb:eb:27:
                    66:37:59:2b:a1:f0:c2:1d:cc:45:06:f7:e4:3c:89:
                    12:ca:1a:53:da:ef:13:13:53:ee:56:fa:83:00:c4:
                    9b:af:b0:32:68:c8:3f:ae:d3:8a:f2:8b:89:46:9c:
                    e3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:71:37:B7:C3:14:35:18:C2:1F:D3:C1:9F:4E:3F:CF:5D:25:B4:37
            X509v3 Authority Key Identifier:
                keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3133382e3132312e36342e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:9a:c6:58:26:a3:6c:16:d1:f4:6f:28:ae:d7:19:1d:f9:35:
         d8:a3:ba:d1:99:ec:25:17:c2:04:41:3b:79:e1:07:ca:13:e3:
         fa:d5:f5:bd:e7:28:50:eb:6c:ab:04:9c:72:48:b5:d6:16:15:
         41:99:20:30:01:d2:81:4e:79:e3:5b:1c:13:f8:bc:cc:13:f8:
         95:3a:16:c5:bc:2f:43:a4:19:1c:88:f4:eb:b4:e8:3a:a1:61:
         b1:8e:c1:ec:c8:fb:7e:ed:8b:e7:a2:c8:db:c6:04:e1:cf:95:
         0d:c3:30:b3:94:41:94:f3:df:9b:3d:bb:a5:79:ac:20:a5:4f:
         cf:c5:5c:d3:72:bf:f1:5e:66:e8:65:94:a7:0b:6f:ba:b7:9f:
         8b:76:00:c2:98:80:18:29:02:02:dd:aa:df:c3:7c:f5:e0:b2:
         58:02:29:db:c1:cc:55:47:c5:6e:53:82:c2:9a:fa:85:53:b0:
         21:20:3c:f0:ae:84:39:e4:2c:23:d1:65:0b:4e:5d:bc:24:02:
         94:7b:3e:6d:6b:00:64:15:4f:63:69:10:ee:78:20:ec:31:d2:
         e0:2f:0e:9a:95:c1:df:1f:ae:f0:45:5a:90:1a:54:fe:88:71:
         92:26:22:5b:79:12:0d:47:81:bf:0c:f7:7a:e4:b4:d1:e6:4c:
         44:b9:23:43
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHUOhDcaqY01lPWtN+t2kkZbQcR8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjcyMDlDNkRGMTU3Mzg4MTlEOTE5RDkwOEUzN0FDMTU3
RTM5MTUwNTAeFw0yNDA0MTAxMjI4NDBaFw0yNTA0MDkxMjMzNDBaMDMxMTAvBgNV
BAMTKDczNzEzN0I3QzMxNDM1MThDMjFGRDNDMTlGNEUzRkNGNUQyNUI0MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHoBg9JJZGnOVI++poAPIBUWLj
WcR6NOKdCcwHlCBrH+iKmvwGg4hhxYVWdnkQWHpI4BDS5v9ny9Y6Ged/+H2TOEPD
rczQFJV3CtE3mxBdE9lNJow4F06/ObpPqEa3Me34a7qhy3hi0gUm98dyoTKb2gDv
GAbDk5mQMWE0R1qAlf7qHi/uAiKh5A+f0jUiAbLER0hlT2hpBCF3zCofonNMWyB8
SrFJzDi/HcsWM6B+8T5+rMGqhnBcU7+Bj9jROeD+jvokQwWCd9pGHBx/FrvrJ2Y3
WSuh8MIdzEUG9+Q8iRLKGlPa7xMTU+5W+oMAxJuvsDJoyD+u04ryi4lGnOOxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUc3E3t8MUNRjCH9PBn04/z10ltDcwHwYDVR0j
BBgwFoAUJyCcbfFXOIGdkZ2QjjesFX45FQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXRnSEZyWXFvdGtucnpHTkhBMjJxUFhBcmJUMjJVc3BUR2NacmlETjZm
Z1UvMS8yNzIwOUM2REYxNTczODgxOUQ5MTlEOTA4RTM3QUMxNTdFMzkxNTA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI3MjA5QzZERjE1NzM4ODE5
RDkxOUQ5MDhFMzdBQzE1N0UzOTE1MDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl0Z0hGcllxb3RrbnJ6R05IQTIycVBYQXJiVDIyVXNwVEdjWnJpRE42ZmdVLzEv
MzEzMzM4MmUzMTMyMzEyZTM2MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4
MzIzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCinlAMA0GCSqGSIb3DQEBCwUAA4IBAQBimsZYJqNs
FtH0byiu1xkd+TXYo7rRmewlF8IEQTt54QfKE+P61fW95yhQ62yrBJxySLXWFhVB
mSAwAdKBTnnjWxwT+LzME/iVOhbFvC9DpBkciPTrtOg6oWGxjsHsyPt+7Yvnosjb
xgThz5UNwzCzlEGU89+bPbuleawgpU/PxVzTcr/xXmboZZSnC2+6t5+LdgDCmIAY
KQIC3arfw3z14LJYAinbwcxVR8VuU4LCmvqFU7AhIDzwroQ55Cwj0WULTl28JAKU
ez5tawBkFU9jaRDueCDsMdLgLw6alcHfH67wRVqQGlT+iHGSJiJbeRINR4G/DPd6
5LTR5kxEuSND
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:09 2024 by rpki-client on console-fra.rpki-client.org