Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3138362e3235312e3230302e302f32322d3234203d3e203238323031.roa
File:                     3138362e3235312e3230302e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          rQcXypo2KS9uGgneY6Suvwow1O1eGNGYCFRhDT6Mdik=
Subject key identifier:   4D:5B:92:7E:EB:5B:D2:99:A3:69:5D:5F:0C:A4:EE:50:88:12:D4:C9
Certificate issuer:       /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial:       130E07506DDCE3DA74261C8ECB052FD2BF6A1688
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3138362e3235312e3230302e302f32322d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:37:12 +0000
ROA not before:           Wed 10 Apr 2024 12:32:12 +0000
ROA not after:            Wed 09 Apr 2025 12:37:12 +0000
asID:                     28201
IP address blocks:        186.251.200.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:0e:07:50:6d:dc:e3:da:74:26:1c:8e:cb:05:2f:d2:bf:6a:16:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
        Validity
            Not Before: Apr 10 12:32:12 2024 GMT
            Not After : Apr  9 12:37:12 2025 GMT
        Subject: CN=4D5B927EEB5BD299A3695D5F0CA4EE508812D4C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1e:27:65:55:49:9e:e7:ba:37:9b:dd:64:3b:
                    b5:2f:74:78:57:41:55:85:a7:4c:43:c8:83:83:e6:
                    0c:da:60:ab:90:a5:ac:e0:79:de:bd:07:36:14:a2:
                    5a:7b:10:4c:8a:0a:c2:24:a5:f0:61:f2:90:d6:f8:
                    0f:2d:d4:58:b8:1b:f2:44:cf:5f:8b:dd:33:f5:6f:
                    f3:0a:5c:70:11:dc:56:35:4b:35:21:1f:29:0f:fc:
                    34:ac:6e:f9:d6:22:67:bb:6b:f6:a3:68:4b:a6:50:
                    91:d8:c4:2c:b3:a1:00:ba:7e:05:84:d4:fe:e4:21:
                    da:5f:e9:65:a9:cc:50:51:95:c6:d5:ea:c3:32:ef:
                    90:38:e6:f7:da:fe:8e:19:6b:f1:e1:c1:a7:fc:cc:
                    a9:5a:bd:85:1d:b8:60:06:86:d3:39:9c:48:c8:ee:
                    2c:86:73:63:7d:ff:34:15:9f:e3:66:f8:fc:22:5f:
                    27:79:78:9f:c2:a8:0f:dc:c7:39:51:db:06:d6:60:
                    8e:2a:dc:15:dc:c1:8c:49:4b:a5:d7:c6:1a:04:f3:
                    84:4c:81:b1:a9:75:38:50:c9:99:26:94:43:8a:5c:
                    57:5e:eb:4b:8e:ee:13:5b:47:4f:76:f9:19:85:66:
                    76:48:59:62:8c:cc:0d:5f:b6:70:8e:ce:6e:50:44:
                    f9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5B:92:7E:EB:5B:D2:99:A3:69:5D:5F:0C:A4:EE:50:88:12:D4:C9
            X509v3 Authority Key Identifier:
                keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3138362e3235312e3230302e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:c4:e9:4f:9b:5f:17:54:bf:8a:3b:d1:08:98:b8:6c:d0:34:
         cd:e9:97:f0:2b:b3:f8:9c:3b:62:10:f1:b5:00:9b:cc:7a:0a:
         cd:6c:1d:0e:fe:ae:13:e7:f1:1a:87:b9:a5:b2:4d:c1:fc:7e:
         d8:0a:cf:f3:45:6b:cf:ac:be:93:f9:94:37:e9:d0:e7:21:92:
         39:aa:c9:7e:25:bb:49:97:e1:9b:88:3d:76:93:70:30:64:3c:
         86:5c:81:36:c3:ea:ad:2c:7d:da:d7:5d:18:a8:8b:97:ef:6d:
         0d:00:c2:68:3e:e7:49:4a:c1:d8:1d:12:af:89:e1:3e:c6:6a:
         80:79:39:a4:18:2b:29:ff:3e:42:89:59:17:97:90:e3:5f:69:
         d9:24:82:b6:1a:02:54:0f:31:e8:ef:7d:39:23:2c:f0:d0:85:
         a0:60:5d:16:c9:e7:ca:ea:dd:a6:b0:db:e1:1f:ab:27:35:f4:
         3a:fd:07:b8:65:64:be:34:da:ec:ad:62:8a:bd:4f:4c:18:8b:
         b3:34:76:ed:67:1a:23:23:2f:18:af:28:9f:19:ff:74:39:3a:
         34:03:9f:5b:ae:60:31:5d:8d:1d:2b:fe:30:f3:b8:60:63:c0:
         4f:3f:b5:a0:e2:93:42:e0:45:78:5f:5c:a2:0c:c5:f0:d1:6f:
         b8:c5:3d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:53 2024 by rpki-client on console-fra.rpki-client.org