Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3136382e3138312e38302e302f32322d3234203d3e203238323031.roa
File:                     3136382e3138312e38302e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          OsQ9KljW7gkfj2xaSi1tYDUCqS+tfU09R6KOvwIKPAU=
Subject key identifier:   0D:E9:BD:58:DC:54:B4:02:B0:C7:96:AA:99:5E:82:2C:BB:37:A6:8A
Certificate issuer:       /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial:       6BE5902CBB5975B8DE8D8F9B69219B4817A8E05A
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3136382e3138312e38302e302f32322d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:41:59 +0000
ROA not before:           Wed 10 Apr 2024 12:36:59 +0000
ROA not after:            Wed 09 Apr 2025 12:41:59 +0000
asID:                     28201
IP address blocks:        168.181.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e5:90:2c:bb:59:75:b8:de:8d:8f:9b:69:21:9b:48:17:a8:e0:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
        Validity
            Not Before: Apr 10 12:36:59 2024 GMT
            Not After : Apr  9 12:41:59 2025 GMT
        Subject: CN=0DE9BD58DC54B402B0C796AA995E822CBB37A68A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:61:64:19:af:88:f4:5d:7f:9a:3b:49:d2:89:
                    d4:8b:18:34:69:76:ff:76:dc:47:9c:d3:4e:d0:f9:
                    c2:21:4a:bf:0e:f3:32:5e:76:fc:58:ef:45:9d:a9:
                    34:60:3b:87:3e:fc:d3:36:13:be:e9:13:14:b5:ad:
                    2b:99:3e:31:14:22:ca:76:97:6f:09:00:2f:bc:b2:
                    c5:ee:27:9a:9a:87:43:b1:ee:4a:53:65:d8:e8:09:
                    6f:0a:89:a5:a4:bb:33:38:80:ad:24:f1:04:2b:10:
                    1c:f3:a9:e3:bf:73:27:93:06:83:7f:50:e0:6e:e8:
                    d8:2e:9d:33:0a:c0:72:88:57:e2:25:0a:29:05:03:
                    8d:ae:3c:33:ae:12:03:62:d3:00:43:64:66:5f:59:
                    9e:d1:7b:34:30:47:37:c8:ee:e4:ea:68:60:13:8d:
                    f2:49:6c:cc:2d:c4:9c:e9:e4:eb:11:06:d9:32:b2:
                    9b:fd:90:dc:2b:71:5e:44:5f:d6:6d:41:da:b4:37:
                    30:ac:f1:95:31:95:0f:78:00:31:49:12:09:cc:d0:
                    d0:81:ec:75:7d:c7:60:23:02:07:ba:2f:0f:82:b1:
                    f9:5b:8f:9e:11:af:83:8e:06:06:66:b6:24:f9:dd:
                    0e:7e:90:f6:87:c4:f9:26:ab:20:1a:84:1f:42:99:
                    16:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E9:BD:58:DC:54:B4:02:B0:C7:96:AA:99:5E:82:2C:BB:37:A6:8A
            X509v3 Authority Key Identifier:
                keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3136382e3138312e38302e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:c3:40:97:94:fc:aa:7b:19:7f:f9:2c:25:56:a6:6c:77:33:
         d9:28:b2:65:f9:6e:b2:17:23:dd:25:84:1d:c6:fc:5c:49:1a:
         83:15:a1:20:66:f5:30:3a:f7:41:08:0d:a7:d9:53:e3:63:2c:
         b4:0a:54:f0:ad:a5:01:c2:17:12:f3:eb:7b:1e:67:e4:11:9c:
         27:3b:d8:4c:0b:2c:2d:3a:98:c0:9d:66:86:c2:ae:f3:d0:db:
         47:a1:1d:0f:6d:54:46:42:0a:68:82:68:50:73:16:c6:16:fd:
         84:0e:79:3c:c4:48:61:69:0c:0b:9d:17:49:75:53:2b:e2:65:
         c5:d1:db:a7:a4:91:7c:bc:8c:de:fe:28:98:ae:d5:f7:29:c9:
         5f:90:4d:da:92:17:d0:41:34:94:93:3c:6a:86:5f:7e:17:b5:
         1a:3d:4b:08:a8:63:3c:2e:28:ad:1d:a0:9b:a7:75:ba:65:98:
         e6:f9:11:24:45:b5:be:a6:c6:c5:0b:f1:ad:17:8c:e2:f8:da:
         c9:58:c3:23:36:56:12:9a:a0:18:5b:58:ef:4c:f4:75:4e:b3:
         62:27:11:82:e7:bb:18:fe:c6:f3:c6:b0:e7:c9:90:a7:b6:d6:
         7a:4f:84:ff:88:e0:a2:a5:b1:24:0c:b0:81:71:ac:2a:7f:27:
         06:b0:f8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org