Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3133382e35392e32302e302f32322d3234203d3e203238323031.roa
File:                     3133382e35392e32302e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          JiHQclm/n9WlH0b970EnEDV6IJFQjALh7O++Sac28aA=
Subject key identifier:   0E:7D:25:59:07:09:6D:D7:9E:4A:F4:C8:B8:E9:52:E6:9E:5B:E6:0A
Certificate issuer:       /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial:       3FE13A106F6F9FD22D11FFA27BEC26923306CFA3
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3133382e35392e32302e302f32322d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:33:52 +0000
ROA not before:           Wed 10 Apr 2024 12:28:52 +0000
ROA not after:            Wed 09 Apr 2025 12:33:52 +0000
asID:                     28201
IP address blocks:        138.59.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e1:3a:10:6f:6f:9f:d2:2d:11:ff:a2:7b:ec:26:92:33:06:cf:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
        Validity
            Not Before: Apr 10 12:28:52 2024 GMT
            Not After : Apr  9 12:33:52 2025 GMT
        Subject: CN=0E7D255907096DD79E4AF4C8B8E952E69E5BE60A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ed:b8:94:08:8f:9d:d9:4b:5c:d0:ba:f2:c1:
                    5f:27:ba:ce:5b:ee:1a:14:91:68:d2:f1:dc:85:ca:
                    5d:9f:72:38:35:0b:e1:51:59:69:d6:9b:4d:09:03:
                    c9:95:67:71:bc:a7:80:f5:1d:28:09:2d:49:cc:33:
                    fb:ae:58:af:6e:82:33:0f:57:2a:8e:67:73:14:99:
                    fd:68:27:ca:f2:08:32:77:68:7e:b6:e0:6f:c4:cb:
                    f4:01:23:a2:1a:62:64:ed:24:48:6e:7a:2c:38:b9:
                    5a:52:8e:38:68:05:29:f0:93:c5:3f:61:c7:e6:f1:
                    84:26:6d:dd:b5:5e:ea:86:23:3c:2b:51:b9:78:27:
                    6e:1f:ef:40:5e:32:cf:82:7e:53:7f:86:7d:6f:e5:
                    35:99:52:4b:c6:77:64:e3:85:86:db:3c:ba:3a:45:
                    75:57:9a:4f:36:ed:8e:03:6a:a2:95:b4:85:23:c4:
                    cc:e9:72:23:20:d8:c9:88:64:19:30:78:eb:f7:c3:
                    3a:cf:3b:95:9c:53:4a:e7:8e:4e:d4:6c:c0:49:3d:
                    75:8c:45:1d:2c:1b:fb:ea:98:48:06:a5:ff:39:3c:
                    e3:5c:24:c8:be:41:b3:6c:af:bc:95:84:6a:6e:15:
                    28:39:18:e3:86:26:04:25:be:50:64:cf:52:8c:db:
                    54:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7D:25:59:07:09:6D:D7:9E:4A:F4:C8:B8:E9:52:E6:9E:5B:E6:0A
            X509v3 Authority Key Identifier:
                keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3133382e35392e32302e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:ef:c8:f3:b9:0b:d6:75:c8:9b:cb:90:13:e3:f7:40:e4:3b:
         f6:6c:b7:54:88:95:6c:1e:5b:3d:1a:fc:2f:a9:dd:09:d6:39:
         2d:f0:87:7c:1a:55:7d:26:7f:89:48:60:62:68:44:45:bf:c7:
         b9:6d:c6:ee:04:54:c7:56:87:d9:04:9c:19:55:f0:09:f2:98:
         de:b2:e7:f5:06:34:6e:de:71:5d:2b:11:e4:2f:56:33:64:c8:
         cf:d5:91:eb:41:da:d2:24:23:99:e5:3c:2d:2d:77:05:49:60:
         96:1d:9b:64:c2:0d:60:da:7c:97:d2:47:13:e0:b9:86:2a:f6:
         f7:da:93:26:34:84:74:67:17:ab:e5:02:21:f8:91:b3:5b:5d:
         74:27:2b:2f:44:05:d0:96:25:4e:db:17:4e:ae:65:a6:5c:ca:
         bf:64:a6:85:01:46:35:7c:f8:37:3a:66:61:8f:4c:71:da:97:
         f3:74:0c:1b:61:6a:90:57:a0:6a:85:34:88:8d:58:e8:45:54:
         7b:6a:c3:8b:68:3d:b9:c9:b1:fd:a0:85:92:5c:01:7b:d4:5a:
         83:42:05:8d:c4:3a:2d:36:ec:f5:f8:c7:f3:73:cd:89:6c:1d:
         b1:0a:76:6f:05:ed:00:e1:ab:0d:c7:ea:75:8f:48:7a:bc:39:
         d2:88:2a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org