Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3137302e3233392e3139322e302f32322d3234203d3e203238323031.roa
File:                     3137302e3233392e3139322e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          kAzOsRppCapns2EBPBgu9MPEpbnL91cLM0F0xsIZr3Y=
Subject key identifier:   2B:46:80:92:C4:93:E5:BC:81:FE:1B:A1:0D:34:E8:AA:F3:0D:36:E3
Certificate issuer:       /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial:       578C41834DD67145308A9853F1738807FFACC16A
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3137302e3233392e3139322e302f32322d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:33:23 +0000
ROA not before:           Wed 10 Apr 2024 12:28:23 +0000
ROA not after:            Wed 09 Apr 2025 12:33:23 +0000
asID:                     28201
IP address blocks:        170.239.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:8c:41:83:4d:d6:71:45:30:8a:98:53:f1:73:88:07:ff:ac:c1:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
        Validity
            Not Before: Apr 10 12:28:23 2024 GMT
            Not After : Apr  9 12:33:23 2025 GMT
        Subject: CN=2B468092C493E5BC81FE1BA10D34E8AAF30D36E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:8b:98:2a:e6:d0:44:0b:aa:14:84:a7:2a:
                    4b:c9:3f:df:ef:b0:62:c2:17:01:0b:7b:ed:20:c0:
                    a2:3e:36:b2:1c:bc:bf:48:ad:85:6a:67:4a:2c:50:
                    5f:b5:25:b3:68:9d:a2:fc:d4:cd:e3:54:5e:49:4e:
                    d5:41:9f:a6:b5:d2:f2:4e:03:a4:c0:e2:b2:03:99:
                    41:a6:07:7a:7f:7d:2a:fb:34:81:84:48:35:1b:7a:
                    00:67:c3:29:be:3f:5b:40:96:ce:c5:77:0d:32:53:
                    21:d5:30:b9:df:68:df:f6:15:cf:76:d8:ab:ad:91:
                    99:9c:8b:4f:34:bb:fc:2e:a5:bb:00:13:f9:5b:5d:
                    56:b5:42:b2:e9:ec:73:ba:42:f3:e1:9a:03:2a:75:
                    76:68:ef:b7:4b:07:04:2a:35:8c:cc:90:71:73:66:
                    cb:61:09:45:74:ff:c1:b2:f3:78:ad:f6:5d:b0:c3:
                    52:b1:01:65:2c:b1:9c:e8:11:5b:85:8f:a3:a2:81:
                    a2:1f:b8:40:50:56:85:d0:d4:8d:68:58:b9:38:aa:
                    ca:6f:1e:01:3e:6b:b9:5f:40:e4:00:bd:0d:9d:f0:
                    c8:ff:64:02:49:c6:6a:59:63:22:fb:be:a9:43:34:
                    6a:64:20:7d:de:18:af:b7:59:75:e3:be:f5:cf:5e:
                    00:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:46:80:92:C4:93:E5:BC:81:FE:1B:A1:0D:34:E8:AA:F3:0D:36:E3
            X509v3 Authority Key Identifier:
                keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3137302e3233392e3139322e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:63:c0:96:65:c9:16:32:5e:4c:2f:75:25:a5:dd:3f:68:43:
         26:2d:b6:67:84:87:11:42:d3:26:17:b7:1d:86:e7:65:46:2c:
         21:eb:12:e3:dc:74:09:d4:fa:cd:2d:21:6e:20:02:bc:e8:ea:
         5e:58:7c:1d:3e:84:77:f0:8e:06:78:8f:a3:e5:9a:27:39:04:
         bd:21:ec:60:32:f9:9a:8a:79:24:20:a0:af:c4:8d:58:a3:1b:
         2a:28:ba:27:e5:38:95:32:22:43:74:99:68:35:d1:76:fc:96:
         b8:00:c4:48:a3:99:e9:64:0d:9c:1b:29:d8:32:ee:a6:3c:a8:
         14:61:f1:aa:bb:30:ec:72:cb:ea:2b:1a:b5:f1:e5:0d:f3:87:
         38:cf:30:fc:a1:11:1d:62:76:96:3a:ff:0a:58:b8:b9:58:27:
         dc:e0:61:41:63:61:d0:c7:01:18:ce:eb:10:3f:7e:22:7d:06:
         c5:29:37:a6:74:eb:c1:a3:05:70:08:15:3c:15:1a:d3:73:88:
         84:b1:08:2f:ba:74:f6:4c:00:0c:fc:62:fa:65:4f:3f:20:8f:
         7a:e1:a5:78:ce:af:11:e1:c4:ed:78:c8:ce:62:e2:39:34:82:
         31:34:9a:16:fc:04:d9:4d:e3:21:23:80:6a:9f:95:2f:ba:25:
         38:cd:d0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org