Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3138372e37332e302e302f32302d3234203d3e203238323031.roa
File:                     3138372e37332e302e302f32302d3234203d3e203238323031.roa (raw, json)
Hash identifier:          t3F2BX+Nw0I/delz6oHuohvqDxQIsSlseTJ8/lUG+qI=
Subject key identifier:   78:37:BE:69:A8:42:F7:EA:34:0B:7B:07:9F:F0:92:B6:E2:76:55:E2
Certificate issuer:       /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial:       2322240BEAB0B2325439632068BD42BBB6C3D20B
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3138372e37332e302e302f32302d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:29:48 +0000
ROA not before:           Wed 10 Apr 2024 12:24:48 +0000
ROA not after:            Wed 09 Apr 2025 12:29:48 +0000
asID:                     28201
IP address blocks:        187.73.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:22:24:0b:ea:b0:b2:32:54:39:63:20:68:bd:42:bb:b6:c3:d2:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
        Validity
            Not Before: Apr 10 12:24:48 2024 GMT
            Not After : Apr  9 12:29:48 2025 GMT
        Subject: CN=7837BE69A842F7EA340B7B079FF092B6E27655E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:73:01:7a:d8:9f:b5:56:70:15:e7:f6:6b:bb:
                    31:b6:3a:73:53:1a:eb:6d:19:4d:7f:b3:ea:46:9b:
                    1f:8b:bc:5e:28:38:9f:46:e8:27:b4:5b:73:fa:a7:
                    70:9c:50:4f:6a:d2:f2:e5:78:04:1d:a3:13:60:6f:
                    28:a5:50:02:f4:ba:3e:02:68:fd:67:a4:a1:61:17:
                    dc:f6:fe:65:6b:f4:5a:e7:7b:03:a2:d8:fe:6f:8d:
                    93:1b:14:e5:f6:21:73:43:d6:28:b7:27:b1:e4:e8:
                    5a:f5:e0:56:a4:65:02:05:77:f8:d0:29:b5:3f:32:
                    69:ac:9d:13:55:c4:42:ba:96:5f:87:66:93:5e:47:
                    e0:fe:f7:f7:a7:1c:d3:5e:0c:84:2f:bf:64:50:08:
                    1f:84:92:45:86:80:50:8e:99:9e:87:75:b6:03:8a:
                    fd:f8:81:77:29:90:ca:13:14:37:4d:a2:ee:4d:c7:
                    f0:97:4d:38:f8:1f:64:bc:01:6a:b3:31:9f:69:b3:
                    d9:35:0c:11:f1:f0:ac:1e:a1:4b:4b:62:d1:42:92:
                    43:3e:01:d8:50:a8:eb:3c:ca:52:34:f6:85:65:8d:
                    22:1c:46:32:69:fa:8e:41:2e:85:ab:2c:3f:a1:a2:
                    fa:3e:f5:3a:2d:39:ad:7f:bc:54:16:27:a1:77:34:
                    15:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:37:BE:69:A8:42:F7:EA:34:0B:7B:07:9F:F0:92:B6:E2:76:55:E2
            X509v3 Authority Key Identifier:
                keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3138372e37332e302e302f32302d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a4:76:89:ef:b6:ff:ad:c6:bb:6f:52:9d:b3:31:5e:a3:fe:67:
         07:ee:d6:20:3f:ce:eb:72:35:22:f8:a0:a5:c0:05:b7:5d:40:
         e4:be:a2:6c:c4:1c:5d:27:7f:4d:60:22:67:30:90:07:d8:41:
         a2:f2:3a:16:1a:87:cf:5b:ca:37:71:03:7e:85:df:ad:af:1a:
         39:64:42:2c:f4:f7:f5:b6:2b:6e:96:42:35:7a:7c:c9:a8:8c:
         2e:62:c3:62:81:d6:fe:5a:f9:ca:37:27:54:25:bf:eb:c6:6b:
         70:1b:0d:3c:df:82:93:04:ab:50:22:7c:7a:a4:f6:4d:7d:ef:
         d7:f8:89:d3:fc:c8:aa:81:72:6e:3e:0b:5a:b7:17:53:2b:2a:
         90:4c:3c:57:cc:24:36:f8:19:8b:9b:0b:56:e2:fc:eb:58:37:
         55:c2:62:3d:e9:9f:d9:db:9c:6d:a2:9a:fd:45:00:32:88:64:
         39:85:ce:e1:ae:67:ad:ab:7a:a4:99:c3:92:92:f4:ac:1c:ee:
         d2:0c:bd:71:9c:d6:b0:a4:88:4c:7d:65:66:e9:e0:a8:86:68:
         d8:4a:91:77:69:e8:41:3f:76:b8:d9:d0:21:c0:77:dd:90:81:
         42:de:c2:11:00:87:9a:5f:5d:2a:fa:fb:08:0c:cf:6e:e8:19:
         ca:c3:51:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:53 2024 by rpki-client on console-fra.rpki-client.org