Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3137372e3135322e3136302e302f32302d3234203d3e203238323031.roa
File:                     3137372e3135322e3136302e302f32302d3234203d3e203238323031.roa (raw, json)
Hash identifier:          VRzCxA+xdBm/Fb0eGfC4Kl1wtBCOotUN6ws2nyH1KEg=
Subject key identifier:   40:79:6B:2F:45:80:85:18:38:2B:56:A3:EA:E1:44:FF:45:61:63:93
Certificate issuer:       /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial:       40F196EF98C6CC98706633EA9525D02E9FC9BA2E
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3137372e3135322e3136302e302f32302d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:31:44 +0000
ROA not before:           Wed 10 Apr 2024 12:26:44 +0000
ROA not after:            Wed 09 Apr 2025 12:31:44 +0000
asID:                     28201
IP address blocks:        177.152.160.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f1:96:ef:98:c6:cc:98:70:66:33:ea:95:25:d0:2e:9f:c9:ba:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
        Validity
            Not Before: Apr 10 12:26:44 2024 GMT
            Not After : Apr  9 12:31:44 2025 GMT
        Subject: CN=40796B2F45808518382B56A3EAE144FF45616393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9f:da:5c:a7:4e:1e:c5:de:30:3b:7b:0b:f8:
                    d4:b1:ca:eb:bc:d8:0a:4a:f2:47:fa:34:ad:d4:d1:
                    3d:cc:7f:13:62:3b:0a:d5:8d:cc:97:68:11:15:b3:
                    ea:2f:79:f9:23:07:cd:8e:1e:ab:85:56:0f:22:a7:
                    df:14:fc:6c:5f:eb:1e:0e:52:e6:2e:06:11:a1:77:
                    c7:e6:9a:63:d5:92:33:33:a9:a5:ac:61:9c:99:27:
                    b7:6e:e0:06:49:3f:15:a2:85:27:be:b5:42:4d:e6:
                    2d:45:2b:d4:57:fb:84:8b:54:b3:3d:07:c5:a1:08:
                    23:40:98:bc:73:88:fa:21:b9:2c:cd:c0:a7:15:90:
                    b5:af:c6:aa:14:a9:20:8f:87:c2:33:20:1f:18:bb:
                    0a:22:c4:cb:8a:71:10:af:4a:4d:df:46:9f:24:90:
                    c3:da:1a:b5:c9:0f:2b:71:99:16:97:6c:bd:e8:a5:
                    17:8e:86:3f:5b:2e:6a:3c:63:2e:63:03:21:62:2d:
                    61:03:c5:60:21:0b:65:13:b8:4c:6e:26:73:45:bf:
                    c5:cc:c4:ba:8b:43:55:41:0b:22:5e:40:3c:4f:27:
                    6f:70:b4:ba:f2:e9:3e:37:ba:7e:f3:48:c9:7b:5d:
                    92:f9:3a:0e:6a:17:45:97:fe:7e:57:8e:b5:5d:96:
                    2c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:79:6B:2F:45:80:85:18:38:2B:56:A3:EA:E1:44:FF:45:61:63:93
            X509v3 Authority Key Identifier:
                keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3137372e3135322e3136302e302f32302d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         99:e8:36:0e:f6:20:21:0d:16:36:9a:f3:76:5c:1a:af:97:e2:
         93:de:e4:28:f1:fe:65:d9:33:b2:fb:eb:46:4d:07:ae:a4:6c:
         32:23:2c:86:ac:1f:dc:90:e6:c2:c9:32:3b:c7:fe:7b:49:9f:
         2f:f0:bf:31:4b:38:e7:dd:e6:be:99:6d:ee:24:e3:31:58:47:
         28:b3:89:40:35:b8:23:34:04:2c:26:a5:c2:80:ea:84:6e:c3:
         bd:75:41:bb:42:59:83:23:30:a4:40:46:0d:54:5e:10:d1:22:
         cd:e1:4e:68:af:c2:be:e5:cc:2b:2d:dd:36:ad:6f:f3:2d:0f:
         65:fb:5d:c3:5b:20:a3:44:9f:37:e9:13:57:b0:b0:21:22:f6:
         d7:1d:eb:35:83:e2:da:ba:c8:15:0a:ef:87:c7:02:7f:85:8f:
         3b:42:6f:78:23:b7:81:b1:74:c6:52:8a:d1:97:c5:c7:98:8b:
         4b:19:5f:4c:0f:9e:a7:60:8b:82:b9:70:95:54:5e:45:86:35:
         2f:de:ef:10:11:ee:ec:e0:ca:69:0b:63:de:e3:4a:6a:4b:ec:
         bd:4a:2f:ab:28:e3:72:bb:35:e3:94:79:2f:aa:36:ea:bf:88:
         ce:ab:82:2b:9b:bd:ad:a8:85:8c:10:ab:93:66:7d:e3:4b:10:
         7a:cb:83:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:09 2024 by rpki-client on console-fra.rpki-client.org