Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3138372e31372e3234302e302f32302d3234203d3e203238323031.roa
File:                     3138372e31372e3234302e302f32302d3234203d3e203238323031.roa (raw, json)
Hash identifier:          EAyHXxzcjiX3NMWUYyRR3lpp+fPC5YDhwaRNwl+1MP4=
Subject key identifier:   C5:F6:35:3D:E9:05:04:AE:E6:AE:8F:D7:CC:72:A5:A4:7B:5F:21:EA
Certificate issuer:       /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial:       710E75E11638B9E581EAE62DE3C8CE7DB3FFD1BB
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3138372e31372e3234302e302f32302d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:29:27 +0000
ROA not before:           Wed 10 Apr 2024 12:24:27 +0000
ROA not after:            Wed 09 Apr 2025 12:29:27 +0000
asID:                     28201
IP address blocks:        187.17.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0e:75:e1:16:38:b9:e5:81:ea:e6:2d:e3:c8:ce:7d:b3:ff:d1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
        Validity
            Not Before: Apr 10 12:24:27 2024 GMT
            Not After : Apr  9 12:29:27 2025 GMT
        Subject: CN=C5F6353DE90504AEE6AE8FD7CC72A5A47B5F21EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:87:f8:81:51:a2:4a:aa:88:f0:91:3d:1a:4f:
                    b0:0b:e2:67:8e:b1:fa:61:af:e9:49:3c:62:7e:59:
                    d6:21:5f:08:b2:14:9c:d2:72:d9:a4:65:87:61:49:
                    1e:21:a6:f3:c9:4f:41:02:60:25:e8:3f:52:3a:f3:
                    e2:f1:95:83:79:17:3b:8d:3c:26:4e:46:74:91:9c:
                    73:a7:4a:06:24:92:07:e4:9b:01:95:c6:7b:7d:b3:
                    7e:a8:20:69:e4:72:e4:b5:d4:eb:f2:20:b5:35:b4:
                    6f:a2:98:64:d9:96:c1:b9:f1:39:dc:41:e2:90:cc:
                    96:92:b6:79:8f:56:a1:81:d8:b6:99:f3:ad:0d:a6:
                    81:de:4f:ef:62:d6:09:c0:9b:82:55:1b:c8:d1:ec:
                    7d:d0:d6:ec:7e:9b:01:7f:bd:55:b9:9b:9c:ce:0e:
                    a1:06:82:9e:dc:bf:ec:d0:48:7a:f0:a6:be:af:ac:
                    56:71:3d:42:38:a0:09:14:8b:a3:84:f3:ab:21:fd:
                    a0:01:90:f7:cb:41:f1:da:4d:24:2f:2a:aa:98:3e:
                    71:d1:9e:2f:2e:4f:66:fd:24:f1:c9:5d:fe:ea:a3:
                    6c:d8:e7:f6:02:6a:ea:2c:e8:11:a6:b8:1d:38:7c:
                    fb:c4:9c:a5:3d:8e:0a:bd:3f:81:2d:ae:e1:d5:60:
                    30:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F6:35:3D:E9:05:04:AE:E6:AE:8F:D7:CC:72:A5:A4:7B:5F:21:EA
            X509v3 Authority Key Identifier:
                keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3138372e31372e3234302e302f32302d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         23:73:c9:cb:d5:60:ea:66:6b:32:79:7e:6e:da:24:2f:a3:48:
         19:97:6d:b4:a4:7c:18:c9:11:cb:18:29:04:23:6d:5b:2a:26:
         82:e6:2e:15:ac:5f:d1:44:9c:87:76:86:fa:bf:58:9a:eb:67:
         51:2a:cf:13:f5:38:7a:d2:71:c2:37:83:36:7f:97:3f:c3:31:
         7c:2e:b0:ac:25:af:e8:8d:ad:d3:89:1c:48:db:be:92:50:9e:
         e8:f9:07:78:e8:6e:4f:19:4c:60:8f:11:32:e0:17:d8:66:89:
         87:f4:d3:28:2e:a7:5f:7a:8e:18:e6:fc:7e:55:84:03:49:fc:
         6c:11:74:fd:fe:23:9b:3e:4a:c4:e6:a4:b7:48:85:0b:99:6e:
         3b:c3:3e:8a:d7:5a:89:ef:69:9b:a3:13:c4:5c:a0:46:7e:1b:
         d2:64:66:45:b3:56:e0:b8:42:a8:b8:b6:e2:aa:9d:8a:f3:69:
         0a:92:87:41:18:9c:56:52:a8:f3:04:6a:18:8c:7a:34:cc:2b:
         4e:06:c2:4f:10:73:4f:03:19:ec:b6:76:57:36:bd:01:09:9a:
         87:f5:12:6f:80:26:f4:46:02:14:1b:76:af:e3:3f:20:0a:d0:
         df:f8:8e:72:b3:09:a0:97:fe:95:e7:a0:36:be:dc:b7:cc:ef:
         d1:85:ea:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org