Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3137302e3235342e3136302e302f32322d3234203d3e203238323031.roa
File:                     3137302e3235342e3136302e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          h4LDM0fpiduWhJyypSBy+ihbE9SLJxFhTSifkROwPYs=
Subject key identifier:   C6:3F:98:4E:18:5A:DC:00:A8:0C:F8:8A:21:BD:98:CA:50:DF:3E:CB
Certificate issuer:       /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial:       19564E05CFFA77E478BB3EFBF3C8F438B3814DE4
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3137302e3235342e3136302e302f32322d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:34:03 +0000
ROA not before:           Wed 10 Apr 2024 12:29:03 +0000
ROA not after:            Wed 09 Apr 2025 12:34:03 +0000
asID:                     28201
IP address blocks:        170.254.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:56:4e:05:cf:fa:77:e4:78:bb:3e:fb:f3:c8:f4:38:b3:81:4d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
        Validity
            Not Before: Apr 10 12:29:03 2024 GMT
            Not After : Apr  9 12:34:03 2025 GMT
        Subject: CN=C63F984E185ADC00A80CF88A21BD98CA50DF3ECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:47:68:21:8f:fa:8e:21:ab:5b:77:12:54:24:
                    e3:77:5a:98:5e:c8:7f:14:f5:88:60:5b:d9:9c:b8:
                    2f:8a:bb:ab:2b:f0:5b:a3:10:80:ce:92:c9:e9:e5:
                    d3:ed:e8:fc:14:14:70:80:f0:ab:30:ed:47:75:4b:
                    59:9c:12:b7:a9:10:c5:4e:39:e3:59:c1:70:3d:ba:
                    5b:67:8d:c9:15:73:b0:3e:06:6f:2a:f6:c2:e0:4b:
                    04:cb:6b:8e:91:ba:0d:7f:47:f4:19:44:f3:2f:b9:
                    5b:7d:02:22:37:da:fc:3f:14:f8:10:73:a9:44:d7:
                    37:3a:53:94:69:d3:7b:f4:7d:03:28:11:73:01:03:
                    ec:46:47:cc:fd:ab:6d:c4:b5:b4:e9:8e:36:19:92:
                    da:f3:e3:c7:c6:c7:75:6c:87:99:84:de:71:ff:94:
                    eb:57:70:22:43:d6:e1:90:c6:8d:fc:30:46:04:10:
                    28:01:b1:bb:c8:47:64:70:9d:0b:64:76:6e:d6:92:
                    ee:0a:d1:37:09:d1:50:1b:fe:2f:83:a6:5e:85:99:
                    c3:69:81:3f:80:e8:09:76:18:ba:4e:84:4e:43:16:
                    5f:da:3c:9f:32:fb:16:48:3d:c9:f4:33:7d:8d:d2:
                    95:0d:30:48:4b:63:96:6f:d7:86:8c:30:ca:31:e1:
                    19:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3F:98:4E:18:5A:DC:00:A8:0C:F8:8A:21:BD:98:CA:50:DF:3E:CB
            X509v3 Authority Key Identifier:
                keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3137302e3235342e3136302e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:93:24:7e:61:f3:b5:77:d3:16:79:cb:4b:77:d3:2e:c2:27:
         50:b6:1b:a5:cc:e7:d1:db:9d:6b:83:5f:89:08:5a:fc:d8:ca:
         45:99:63:85:66:cb:cd:d3:fc:b7:3a:b7:7a:33:75:aa:59:8d:
         65:ef:c3:16:ab:68:11:a1:f3:15:ae:e2:44:36:af:28:98:41:
         ff:7f:e9:f2:f3:b3:4f:64:6f:52:cb:c3:ab:79:5f:47:19:0d:
         90:79:2d:3b:51:46:13:f9:fb:99:3e:a9:d4:e3:96:c9:9b:05:
         34:7b:ca:72:f6:c0:63:5d:af:0a:79:7c:eb:b7:c4:94:e8:3d:
         96:0b:c5:a7:63:ee:74:9f:18:81:7c:f0:a5:5f:91:2e:7e:56:
         14:56:16:3d:39:c5:98:44:2d:cd:b5:17:2e:78:0e:8b:0f:e4:
         11:37:16:7a:23:1b:ec:58:a8:f5:d3:c6:42:ca:ab:51:f4:b4:
         b5:16:b6:c6:7a:10:14:2e:db:94:63:5b:ab:6c:01:42:fb:a2:
         d0:ac:60:34:67:8f:c6:55:32:a7:a6:c4:f2:17:d9:3c:75:41:
         05:71:bb:21:3b:5c:df:57:ae:6a:3f:d3:83:dc:78:ad:77:b0:
         b7:fc:d4:61:56:69:7d:70:7f:46:0d:ae:f7:1a:3f:a4:e2:00:
         15:6b:2b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:53 2024 by rpki-client on console-fra.rpki-client.org