Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/34352e3233312e382e302f32322d3234203d3e203238323031.roa
File:                     34352e3233312e382e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          fQGx1aOwLG2GxsnTAQJGkpSuS/8RWdk7gmS9Z6DK+PQ=
Subject key identifier:   F3:A4:22:38:43:52:66:A4:68:BA:C5:36:0E:15:36:0C:E7:7A:1A:41
Certificate issuer:       /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial:       6600E0349376866FCC1BE34DB552B17CF32D7EF6
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/34352e3233312e382e302f32322d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:42:13 +0000
ROA not before:           Wed 10 Apr 2024 12:37:13 +0000
ROA not after:            Wed 09 Apr 2025 12:42:13 +0000
asID:                     28201
IP address blocks:        45.231.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:00:e0:34:93:76:86:6f:cc:1b:e3:4d:b5:52:b1:7c:f3:2d:7e:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
        Validity
            Not Before: Apr 10 12:37:13 2024 GMT
            Not After : Apr  9 12:42:13 2025 GMT
        Subject: CN=F3A42238435266A468BAC5360E15360CE77A1A41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4f:ba:e1:59:a5:9f:51:36:89:b9:45:21:e9:
                    74:96:e1:37:26:5a:b3:31:77:5a:3c:3c:70:56:44:
                    a3:30:1e:4c:4e:dc:94:5a:d3:2a:97:0c:04:96:66:
                    42:df:3d:50:83:61:d9:73:9b:01:1e:98:29:c4:a8:
                    96:5e:3d:38:77:fe:20:7c:ff:67:b0:7c:af:66:f0:
                    3c:d9:53:8e:da:19:ba:2c:7d:60:a8:6d:39:bd:2d:
                    46:8a:9c:f7:5f:78:19:36:fa:9e:0d:7c:0a:06:53:
                    db:df:2e:5a:2a:c4:96:e8:8d:b7:6b:20:41:77:9d:
                    e2:88:70:97:4b:76:af:4a:a6:a4:1d:91:fe:32:90:
                    43:4f:5c:28:18:9d:34:2c:fe:4d:f4:89:84:59:cb:
                    5a:ba:b1:69:10:d3:37:03:48:2c:54:a6:98:67:c9:
                    82:54:6d:d3:33:7b:30:5e:f1:1b:07:1d:6c:fb:7f:
                    6f:5b:15:2b:6c:62:d2:e3:8d:50:16:00:2a:68:e4:
                    1f:24:b4:52:36:79:dd:5a:c4:73:18:a8:74:f9:55:
                    7e:14:24:1c:e1:f6:64:a1:b4:c7:9c:fb:9a:8c:2f:
                    76:8f:14:bf:fe:26:a0:2f:1d:78:4e:63:0f:7a:3c:
                    4b:02:9f:ec:f5:bc:d3:81:59:a6:7c:79:5a:f6:b1:
                    c6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A4:22:38:43:52:66:A4:68:BA:C5:36:0E:15:36:0C:E7:7A:1A:41
            X509v3 Authority Key Identifier:
                keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/34352e3233312e382e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:01:1f:06:e8:f6:11:19:71:b5:a5:75:3b:0c:3e:e4:17:8e:
         db:bb:a3:b6:b1:31:bc:1f:a5:c4:9b:d7:f8:d0:d2:76:22:9b:
         1c:cc:41:13:f0:d8:81:0e:d7:38:0a:7e:39:ea:2e:b6:05:16:
         76:b4:5a:b2:99:e6:e5:b6:cd:f6:3d:66:7e:c4:11:a8:a9:a9:
         2f:ad:48:6e:14:35:5b:c2:e1:db:8d:d8:46:a8:56:ae:44:25:
         fe:5d:71:e9:d7:e1:73:6b:79:2d:50:86:4c:24:89:c3:4b:21:
         74:39:9b:e4:b5:ae:01:be:48:12:e2:af:6d:bc:e1:f8:ad:03:
         28:f6:61:2e:10:ba:9f:d4:63:f2:4a:d5:1d:a6:3b:53:9c:3f:
         84:c3:fb:4a:40:85:3c:28:d7:15:e3:1d:0d:6c:b7:79:c6:ee:
         45:14:cf:be:63:6c:ea:56:0a:1f:aa:bd:2c:3c:f0:80:d9:6d:
         af:e5:a0:4d:15:85:98:cf:fc:d8:46:8d:ac:2a:8f:2c:f4:bc:
         2a:f5:cd:bd:31:84:95:5b:8a:ac:a7:27:e8:ca:f5:8f:92:c2:
         1a:01:24:e6:61:f7:7f:b0:08:01:ab:8b:b0:0b:35:d3:35:67:
         fe:fc:21:7a:ed:10:a4:23:64:eb:f9:2b:7d:0e:f7:0e:a4:8d:
         5e:a1:c1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:53 2024 by rpki-client on console-fra.rpki-client.org