Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/34352e3139312e3136382e302f32322d3234203d3e203238323031.roa
File:                     34352e3139312e3136382e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          5f01Wt7Sb2+EOV8BlDHk7QHjcXUcnHOjypc+TRTo+ZE=
Subject key identifier:   5B:46:92:D2:16:07:93:1D:EF:FB:82:79:54:42:3B:56:BE:B0:6F:37
Certificate issuer:       /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial:       1EC0B423900EDC07656937F8EF85A2EB1C1FB570
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/34352e3139312e3136382e302f32322d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:40:05 +0000
ROA not before:           Wed 10 Apr 2024 12:35:05 +0000
ROA not after:            Wed 09 Apr 2025 12:40:05 +0000
asID:                     28201
IP address blocks:        45.191.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c0:b4:23:90:0e:dc:07:65:69:37:f8:ef:85:a2:eb:1c:1f:b5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
        Validity
            Not Before: Apr 10 12:35:05 2024 GMT
            Not After : Apr  9 12:40:05 2025 GMT
        Subject: CN=5B4692D21607931DEFFB827954423B56BEB06F37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f8:69:1c:65:7a:4a:90:94:fe:29:56:77:d2:
                    17:a6:6f:b7:79:14:24:cb:dc:84:fb:6a:ec:cb:4e:
                    2a:48:93:04:e9:2f:23:66:80:4b:bb:65:72:69:4c:
                    1f:5e:96:e5:24:0f:b3:de:46:79:60:04:dc:b4:2f:
                    8f:69:81:1d:5b:00:63:40:16:67:45:3d:14:17:1c:
                    4f:e9:aa:c6:ce:97:0d:36:49:30:3b:7f:07:2e:7f:
                    b0:a4:a3:f8:f1:e8:d6:27:3a:31:41:98:b2:05:fd:
                    88:dc:3d:e2:c0:c5:6f:26:ac:6b:ee:48:e0:d0:43:
                    fc:f1:15:73:81:23:a4:73:85:3f:ac:94:47:aa:95:
                    84:e4:71:b3:06:1f:39:49:ae:34:e7:19:af:ff:3d:
                    b1:6e:47:2a:21:18:cc:df:cd:3e:9c:52:fb:aa:a7:
                    bc:91:b9:09:08:49:5d:49:6e:68:74:f3:dd:78:08:
                    f9:ce:bd:e2:c7:be:ea:d1:67:15:69:7e:91:f4:f8:
                    1f:ef:54:8b:f7:87:87:f1:f7:50:92:49:c7:ce:73:
                    f3:ad:86:c7:fb:4a:df:5c:e5:ac:88:07:01:66:4f:
                    2d:32:cb:96:76:bf:94:66:88:0e:a6:62:f8:21:a0:
                    81:90:7e:66:45:1f:5b:17:66:7c:5b:d3:f8:2d:b3:
                    fe:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:46:92:D2:16:07:93:1D:EF:FB:82:79:54:42:3B:56:BE:B0:6F:37
            X509v3 Authority Key Identifier:
                keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/34352e3139312e3136382e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:0f:37:b5:f9:1b:6e:1f:e8:6e:af:6f:3b:6b:55:72:e3:d7:
         b0:79:fc:76:1a:9f:63:4c:59:4f:01:94:ee:dc:ba:c4:88:72:
         36:40:e9:85:dd:cc:7f:d0:b1:41:f8:4d:12:e0:e6:1b:02:9b:
         b4:9b:c6:10:e3:b3:5b:0a:38:6d:d5:92:94:c1:c8:5a:a8:bd:
         64:48:4c:fd:bc:2a:c6:04:37:52:21:a5:ca:bb:82:aa:ef:a5:
         59:d6:8e:79:c7:52:d8:08:e2:87:70:0e:53:09:9a:90:a3:49:
         05:cf:be:b9:21:9f:a1:16:29:a8:d2:c4:40:03:5a:65:88:fd:
         04:95:6a:a9:cc:de:1e:a3:11:e3:a4:9f:7c:3a:c8:fc:31:01:
         c1:60:a4:ce:41:cf:79:df:25:f8:40:e7:4a:57:fd:75:40:91:
         8c:8b:a2:a8:77:64:b8:07:d1:a1:9e:45:21:be:2f:31:0f:9e:
         13:6d:75:8d:61:3e:cb:61:0c:e8:2c:7c:e8:ec:e0:be:13:75:
         12:ce:0c:89:1b:24:92:d9:d4:4b:23:2e:a8:f9:80:d3:3b:bf:
         31:26:96:e4:e1:88:65:33:49:74:57:34:3e:f5:ca:c9:99:cd:
         88:46:cf:4d:7b:21:4e:72:c2:dd:d8:64:64:3e:6d:ac:d8:a7:
         d9:ba:6e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:53 2024 by rpki-client on console-fra.rpki-client.org