Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3138392e39302e3234302e302f32302d3234203d3e203238323031.roa
File:                     3138392e39302e3234302e302f32302d3234203d3e203238323031.roa (raw, json)
Hash identifier:          D//DQw42szS0aZVYYJOBZxy82dG0v2TFUqkzU/mTRT4=
Subject key identifier:   EE:1E:9D:A3:92:5F:97:54:57:D2:54:E2:4B:44:9A:43:16:2B:9F:C0
Certificate issuer:       /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial:       589569AE12219ED9296DFEDA81522A6E6C5186E0
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3138392e39302e3234302e302f32302d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:29:09 +0000
ROA not before:           Wed 10 Apr 2024 12:24:09 +0000
ROA not after:            Wed 09 Apr 2025 12:29:09 +0000
asID:                     28201
IP address blocks:        189.90.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:95:69:ae:12:21:9e:d9:29:6d:fe:da:81:52:2a:6e:6c:51:86:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
        Validity
            Not Before: Apr 10 12:24:09 2024 GMT
            Not After : Apr  9 12:29:09 2025 GMT
        Subject: CN=EE1E9DA3925F975457D254E24B449A43162B9FC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ed:c2:e9:7e:25:3a:1f:11:d9:c6:3b:86:7b:
                    92:94:74:ca:23:3b:5a:8a:d8:63:24:09:3c:8a:69:
                    19:5e:c4:ec:37:17:d4:85:75:fd:dd:69:73:ce:05:
                    95:65:a4:44:29:92:73:f4:5b:94:5e:45:dd:58:ca:
                    62:47:e7:11:7f:a3:4d:1d:cd:c4:ae:52:69:62:98:
                    db:ae:85:9c:13:ec:a6:bf:6c:a4:dc:e2:22:de:07:
                    f5:bc:16:cf:74:dc:f0:ef:7b:b4:88:a1:6b:7b:09:
                    e0:bb:8b:2e:e6:c6:5f:48:5b:65:8e:7e:f0:07:2c:
                    28:04:06:91:5b:c0:96:f3:53:8d:dd:85:29:1b:90:
                    87:68:bf:a7:fe:a6:38:c3:01:5b:f3:50:4b:74:ef:
                    0c:1b:c4:25:d6:57:79:d3:83:af:23:9d:60:19:39:
                    1f:d1:6c:a8:0d:d1:fd:10:76:b2:eb:6c:6a:80:10:
                    b2:a8:63:8e:83:c9:00:c4:b3:15:43:e9:07:32:d0:
                    35:91:c3:18:02:3a:fa:7b:45:ee:b8:9b:de:2c:22:
                    56:24:5e:e5:fa:87:30:bc:0e:3c:c9:ae:45:40:b0:
                    99:86:71:4f:e5:25:93:07:1e:17:c6:dc:76:56:ae:
                    b0:4e:2e:be:4a:29:d8:08:ca:19:b6:04:d8:3c:0b:
                    87:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1E:9D:A3:92:5F:97:54:57:D2:54:E2:4B:44:9A:43:16:2B:9F:C0
            X509v3 Authority Key Identifier:
                keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3138392e39302e3234302e302f32302d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:d8:b0:79:1e:4a:aa:5e:e4:c2:b5:aa:f9:42:58:30:28:24:
         a0:4a:62:63:c2:71:ac:21:af:e5:0f:11:e1:b6:fe:3f:03:8d:
         3c:aa:3a:dd:0c:4b:7f:40:a6:18:09:54:8b:33:2e:4e:f1:a8:
         66:52:5e:5f:30:bb:f2:50:b8:ee:c5:a7:47:29:4b:56:83:a2:
         97:94:13:2e:66:38:0d:36:aa:eb:99:f7:de:5f:00:6a:ba:75:
         62:b2:6b:2f:6f:46:a0:a6:74:43:5a:af:f8:f8:5b:7c:6f:44:
         6c:d7:6f:d8:d9:d8:14:ad:e1:81:b0:65:4f:54:13:9e:3a:1e:
         09:6a:48:9d:a3:16:7d:66:67:3e:c4:1f:75:5f:75:ba:a3:d7:
         c2:ab:15:1e:f2:dc:5f:1f:6c:b7:e0:c2:31:3e:d5:3b:a5:8a:
         3e:a4:d3:79:d7:9d:b0:a7:2f:4f:f6:48:58:b1:07:ff:47:b4:
         69:c9:f5:93:9d:b1:e2:3e:98:2d:cc:34:30:ae:d6:df:5f:b3:
         7c:3d:7a:54:68:25:3a:72:82:94:64:03:cd:e8:d6:5e:8e:b5:
         0f:6d:8d:ca:97:df:e3:ec:8e:af:61:cc:7a:0b:71:75:d8:ce:
         54:cb:41:3b:45:93:e7:81:21:90:0f:0f:27:5e:fc:49:7f:2c:
         d0:57:c7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:09 2024 by rpki-client on console-fra.rpki-client.org