Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3136382e3232372e382e302f32322d3234203d3e203238323031.roa
File:                     3136382e3232372e382e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          bERXy6mNKQ04auXl4mQZb3cdaLdcy/gAuPpFLbazgi0=
Subject key identifier:   9C:F2:39:0D:5B:BC:FD:2E:3C:86:7E:EA:E1:30:B9:DB:4A:24:67:FF
Certificate issuer:       /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial:       5A38FC51790A4698CF90757043F10AA75C444170
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3136382e3232372e382e302f32322d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:33:03 +0000
ROA not before:           Wed 10 Apr 2024 12:28:03 +0000
ROA not after:            Wed 09 Apr 2025 12:33:03 +0000
asID:                     28201
IP address blocks:        168.227.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:38:fc:51:79:0a:46:98:cf:90:75:70:43:f1:0a:a7:5c:44:41:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
        Validity
            Not Before: Apr 10 12:28:03 2024 GMT
            Not After : Apr  9 12:33:03 2025 GMT
        Subject: CN=9CF2390D5BBCFD2E3C867EEAE130B9DB4A2467FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:37:93:ef:35:0b:fe:36:74:cb:e9:c4:1f:14:
                    b8:89:e0:2f:ed:a0:1c:46:20:84:49:60:a5:d4:91:
                    61:cb:ca:7e:76:27:d6:74:02:ed:c3:2b:b3:95:c5:
                    6a:10:0c:23:ad:2e:c0:0c:d5:5f:f4:be:f5:99:01:
                    db:eb:f4:81:19:ac:79:41:57:c9:6c:6b:ac:4f:14:
                    7d:5c:b3:70:5b:5b:f4:05:7c:8a:1b:a3:a9:ec:be:
                    3f:f3:df:f9:22:58:a7:bd:e1:f1:84:ce:40:1c:16:
                    c5:f8:35:86:dd:6d:01:ce:b5:0c:86:fd:23:02:d6:
                    0f:51:2b:fe:bb:ea:3d:a4:bb:a3:40:c7:67:8a:db:
                    3a:24:98:03:37:93:c8:92:88:0f:34:d1:bb:62:0e:
                    51:e3:82:4e:ce:37:90:a3:16:51:3d:2f:64:39:2d:
                    9d:5b:f1:12:bf:c8:e2:99:75:02:0c:2b:7d:58:10:
                    c5:0e:61:fc:83:3a:83:e4:a3:9b:18:34:49:34:d3:
                    93:80:14:82:3a:8b:ed:d4:8a:93:5a:50:45:67:76:
                    2b:08:af:6f:3a:59:f1:09:9a:dd:a1:dc:fc:b7:b0:
                    05:11:90:c1:69:47:dd:ee:73:9e:29:32:dc:5e:71:
                    e6:c4:9b:b7:35:65:c3:bc:45:a5:82:f0:0a:35:d1:
                    bf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F2:39:0D:5B:BC:FD:2E:3C:86:7E:EA:E1:30:B9:DB:4A:24:67:FF
            X509v3 Authority Key Identifier:
                keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3136382e3232372e382e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:2b:de:a2:4c:d0:b5:27:96:84:1d:b2:5d:dd:82:12:08:31:
         bf:3f:e8:65:6e:8b:06:c7:88:dc:bc:01:8c:d3:58:89:0a:d6:
         bb:86:47:ac:2c:0c:17:b7:1a:32:1b:ba:58:b0:74:8b:da:f9:
         ec:c6:37:4b:2c:26:e5:a5:9f:a9:57:6d:2a:ed:f9:bf:92:53:
         51:f7:06:1e:f8:d4:c7:bb:f6:48:57:86:e9:d4:5b:34:8e:61:
         f2:72:04:fd:86:cc:96:2c:ec:96:c1:9e:64:f7:e2:c1:e5:97:
         d0:7d:cf:b9:08:a7:da:a3:65:56:68:b9:85:5d:6e:de:a6:35:
         89:e9:36:36:40:65:91:7e:39:25:41:27:e8:47:8a:af:04:a7:
         a7:a7:72:63:e4:e9:7f:f2:ed:24:18:51:2b:ea:c3:e5:4a:42:
         e3:eb:eb:15:50:61:3e:e4:c3:40:2b:fb:13:ea:bf:7c:c5:80:
         57:36:e9:4e:9f:87:5e:8e:c2:33:c8:0d:ab:b2:13:c6:fa:ad:
         cd:18:fe:21:81:44:a4:58:1e:5e:fc:4d:27:e3:56:5c:22:b7:
         0c:70:53:b8:3a:10:c0:ce:11:4a:ca:70:dd:01:ed:bc:76:49:
         4b:f5:90:a5:27:4c:eb:e7:74:86:e2:ef:36:ce:49:3f:d8:c9:
         d3:5d:dc:ea
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUWjj8UXkKRpjPkHVwQ/EKp1xEQXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjcyMDlDNkRGMTU3Mzg4MTlEOTE5RDkwOEUzN0FDMTU3
RTM5MTUwNTAeFw0yNDA0MTAxMjI4MDNaFw0yNTA0MDkxMjMzMDNaMDMxMTAvBgNV
BAMTKDlDRjIzOTBENUJCQ0ZEMkUzQzg2N0VFQUUxMzBCOURCNEEyNDY3RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAN5PvNQv+NnTL6cQfFLiJ4C/t
oBxGIIRJYKXUkWHLyn52J9Z0Au3DK7OVxWoQDCOtLsAM1V/0vvWZAdvr9IEZrHlB
V8lsa6xPFH1cs3BbW/QFfIobo6nsvj/z3/kiWKe94fGEzkAcFsX4NYbdbQHOtQyG
/SMC1g9RK/676j2ku6NAx2eK2zokmAM3k8iSiA800btiDlHjgk7ON5CjFlE9L2Q5
LZ1b8RK/yOKZdQIMK31YEMUOYfyDOoPko5sYNEk005OAFII6i+3UipNaUEVndisI
r286WfEJmt2h3Py3sAURkMFpR93uc54pMtxecebEm7c1ZcO8RaWC8Ao10b+XAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUnPI5DVu8/S48hn7q4TC520okZ/8wHwYDVR0j
BBgwFoAUJyCcbfFXOIGdkZ2QjjesFX45FQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXRnSEZyWXFvdGtucnpHTkhBMjJxUFhBcmJUMjJVc3BUR2NacmlETjZm
Z1UvMS8yNzIwOUM2REYxNTczODgxOUQ5MTlEOTA4RTM3QUMxNTdFMzkxNTA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI3MjA5QzZERjE1NzM4ODE5
RDkxOUQ5MDhFMzdBQzE1N0UzOTE1MDUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl0Z0hGcllxb3RrbnJ6R05IQTIycVBYQXJiVDIyVXNwVEdjWnJpRE42ZmdVLzEv
MzEzNjM4MmUzMjMyMzcyZTM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMy
MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqjjCDANBgkqhkiG9w0BAQsFAAOCAQEAISveokzQtSeW
hB2yXd2CEggxvz/oZW6LBseI3LwBjNNYiQrWu4ZHrCwMF7caMhu6WLB0i9r57MY3
Sywm5aWfqVdtKu35v5JTUfcGHvjUx7v2SFeG6dRbNI5h8nIE/YbMlizslsGeZPfi
weWX0H3PuQin2qNlVmi5hV1u3qY1iek2NkBlkX45JUEn6EeKrwSnp6dyY+Tpf/Lt
JBhRK+rD5UpC4+vrFVBhPuTDQCv7E+q/fMWAVzbpTp+HXo7CM8gNq7ITxvqtzRj+
IYFEpFgeXvxNJ+NWXCK3DHBTuDoQwM4RSspw3QHtvHZJS/WQpSdM6+d0huLvNs5J
P9jJ013c6g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org