Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3138372e3130382e34382e302f32302d3234203d3e203238323031.roa
File:                     3138372e3130382e34382e302f32302d3234203d3e203238323031.roa (raw, json)
Hash identifier:          SfA9x9K1P8qFBGkPik2/ylQCR62roQ6WXZ8cHYajg0g=
Subject key identifier:   B0:11:8A:03:CA:A8:C9:32:89:00:6A:35:DE:00:10:16:C8:B3:E9:50
Certificate issuer:       /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial:       2CB26C73BC499D572B9DC11DF861D927FB58F442
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3138372e3130382e34382e302f32302d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:31:06 +0000
ROA not before:           Wed 10 Apr 2024 12:26:06 +0000
ROA not after:            Wed 09 Apr 2025 12:31:06 +0000
asID:                     28201
IP address blocks:        187.108.48.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b2:6c:73:bc:49:9d:57:2b:9d:c1:1d:f8:61:d9:27:fb:58:f4:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
        Validity
            Not Before: Apr 10 12:26:06 2024 GMT
            Not After : Apr  9 12:31:06 2025 GMT
        Subject: CN=B0118A03CAA8C93289006A35DE001016C8B3E950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:eb:f4:1f:45:7b:b5:53:10:ac:ce:34:01:51:
                    a6:91:c7:e7:80:d3:a6:c9:11:df:24:7e:74:98:e5:
                    8a:14:d7:e6:8d:89:06:82:b5:13:c5:34:47:61:93:
                    44:26:4f:ac:12:89:5d:db:87:42:d3:43:2e:9c:f2:
                    94:c5:cc:f7:e8:2c:c1:9e:de:b4:db:0d:b4:85:b5:
                    b7:0e:6c:c9:dc:c3:1a:9b:7e:4b:95:4a:fa:9c:21:
                    c3:11:63:6e:4f:5f:a6:02:d3:bf:fe:8d:e2:db:c9:
                    0f:cc:1c:6c:94:05:24:84:a9:ca:70:a9:70:ee:f3:
                    b8:49:12:3d:a7:25:d5:ca:b1:88:1d:96:f2:37:38:
                    32:61:97:b3:7c:56:59:b3:0d:89:75:c7:50:06:5c:
                    ad:8b:7d:3e:31:70:95:7e:f2:17:76:7a:37:cd:64:
                    a5:1b:f8:fd:0c:16:37:ea:f6:58:ac:c8:bd:0a:1d:
                    06:7a:c1:92:bc:31:86:60:e4:95:f0:2d:ce:ef:45:
                    10:34:b8:a0:98:3f:8b:08:23:66:9b:f5:83:9d:3b:
                    39:dc:ff:30:a0:bb:7b:26:c2:a6:2e:ff:56:32:73:
                    39:95:11:65:77:c9:82:03:af:a8:3d:b9:bd:bc:09:
                    fb:26:ff:32:8c:8b:d8:ff:20:c6:a9:c6:0b:35:d6:
                    1a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:11:8A:03:CA:A8:C9:32:89:00:6A:35:DE:00:10:16:C8:B3:E9:50
            X509v3 Authority Key Identifier:
                keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3138372e3130382e34382e302f32302d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:60:45:68:2d:c9:c8:b9:49:9d:c0:a4:3b:2d:f3:30:b8:51:
         9e:f7:4a:37:02:fc:e3:6e:bb:f8:f4:25:c9:e4:f1:0d:79:07:
         11:6f:9c:4b:d4:d6:43:8f:bd:ed:b7:03:7b:4b:63:c7:2c:89:
         85:a8:f5:11:d6:00:77:bd:77:f7:50:42:f1:0f:d6:35:db:59:
         b6:6a:55:ec:0a:04:61:79:ed:1d:d7:88:e4:9f:c0:ba:30:ac:
         50:ea:76:3f:10:e8:ce:ba:fd:40:f1:3f:cf:94:32:d0:52:6c:
         62:65:4c:cd:a8:6d:5b:cf:78:dd:09:de:4f:34:cc:a1:9d:fc:
         5a:d7:09:d2:a4:6a:b5:d5:d0:74:ea:d3:de:cf:0d:ee:ee:e5:
         bd:7a:5b:b3:cc:3f:db:2d:e1:f4:cc:b4:9d:0f:4f:59:47:76:
         f6:0b:9e:37:77:14:36:64:43:a0:b2:45:d5:ce:cb:af:5d:fd:
         3c:86:f8:22:95:9d:fc:7b:50:95:cf:5e:7b:1b:fa:3d:07:5b:
         d7:53:fd:1c:83:79:cb:cc:e0:a2:f2:03:d1:be:8b:a5:1d:88:
         15:ff:75:25:40:7e:74:19:84:96:79:0d:a3:ee:72:20:3b:13:
         73:df:0a:f5:93:ec:be:87:ae:21:71:66:1b:b5:17:32:d5:49:
         3b:a8:64:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org