Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/34352e3233352e3131362e302f32322d3234203d3e203238323031.roa
File:                     34352e3233352e3131362e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          UDL/RO8s656yJXtHfDG+K0Y8Mx2BaDKI6hY8CpmwyF4=
Subject key identifier:   8D:33:8B:4B:5B:0E:EC:94:7B:C7:1B:E9:A2:B6:AF:8A:3A:EF:FE:28
Certificate issuer:       /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial:       379B573F8ECEDE1B2CB7CA2F4D2123082C2A3CC2
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/34352e3233352e3131362e302f32322d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:37:50 +0000
ROA not before:           Wed 10 Apr 2024 12:32:50 +0000
ROA not after:            Wed 09 Apr 2025 12:37:50 +0000
asID:                     28201
IP address blocks:        45.235.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:9b:57:3f:8e:ce:de:1b:2c:b7:ca:2f:4d:21:23:08:2c:2a:3c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
        Validity
            Not Before: Apr 10 12:32:50 2024 GMT
            Not After : Apr  9 12:37:50 2025 GMT
        Subject: CN=8D338B4B5B0EEC947BC71BE9A2B6AF8A3AEFFE28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d5:8c:94:91:6d:e9:90:67:e3:1b:d2:ba:2b:
                    3e:31:16:30:66:75:26:d7:fc:a8:6b:4c:3f:01:7c:
                    1c:7b:5c:48:76:10:17:bb:e5:f9:87:2d:a9:09:df:
                    f8:ff:8b:c8:69:e8:8a:e3:2f:72:17:cc:67:2b:5f:
                    dd:8a:25:35:b5:8d:fe:03:2a:fd:4f:fc:00:8d:b5:
                    f9:8c:0e:6f:eb:3a:75:9c:cd:3a:90:5c:da:ff:b2:
                    f3:b1:79:9e:cd:68:2f:28:8a:72:3e:3e:e6:2c:30:
                    54:a8:e8:d2:41:c3:ea:9f:06:10:6e:7f:3b:d7:af:
                    f4:65:30:81:aa:44:ea:6c:69:cd:83:93:f3:d9:03:
                    ae:e5:08:e8:32:fa:12:85:eb:74:73:34:7a:aa:62:
                    8a:3c:f8:f4:e0:28:48:7c:a2:07:50:81:c4:21:17:
                    ec:af:38:d6:3d:d3:d2:f1:a5:73:a2:53:50:89:ce:
                    90:74:18:da:0c:7e:13:f2:4c:62:01:44:44:a6:2e:
                    63:d7:58:0e:fe:d1:19:fd:3a:06:8d:d0:b1:76:e2:
                    2d:bc:e1:dc:a9:00:c8:6b:68:d2:72:51:2d:35:07:
                    10:ba:59:12:11:e3:1f:03:14:48:d8:c5:6e:41:a3:
                    1e:37:20:79:f0:a7:37:39:0b:8f:e4:75:87:90:ec:
                    35:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:33:8B:4B:5B:0E:EC:94:7B:C7:1B:E9:A2:B6:AF:8A:3A:EF:FE:28
            X509v3 Authority Key Identifier:
                keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/34352e3233352e3131362e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:db:e6:8d:b2:f9:07:56:80:30:f1:80:c4:06:57:81:d3:f7:
         c9:5c:26:cb:3d:4d:a2:0d:09:a5:47:e4:04:88:e9:1d:7e:b7:
         2b:86:ec:cf:fe:da:4e:4d:b7:1c:f1:f0:f5:ed:d8:20:fb:68:
         96:32:b7:61:ef:a3:34:fb:3d:b0:11:53:75:d0:c8:f3:29:79:
         e0:68:35:14:8a:78:aa:9d:d4:2b:02:4a:4c:04:64:1c:2d:de:
         c9:cc:82:5a:fa:b5:9c:c1:05:6c:38:ea:a4:eb:08:be:34:c1:
         dd:fd:12:51:73:60:d3:e8:42:ac:1a:fd:43:d2:e2:d7:77:60:
         b6:eb:df:8b:da:7a:ab:2d:79:09:dd:7d:53:55:bb:5d:f6:e0:
         37:25:7e:6b:44:1e:86:1a:28:0e:f7:ce:39:42:65:36:05:f9:
         9a:88:29:b9:b4:41:fb:25:83:8f:3e:a9:78:7a:31:32:ce:e8:
         64:a2:19:c7:1f:8d:ed:2f:df:1f:17:dc:f7:09:16:8d:a6:ef:
         b8:8d:6a:a4:c5:b0:b9:75:1e:ac:a6:9c:3a:b8:35:76:28:73:
         fc:15:c5:10:88:09:f5:47:0f:b7:84:84:d1:47:7e:03:44:05:
         e8:dd:cc:98:35:bb:0f:23:f0:5a:e3:59:e3:bc:07:20:f4:1c:
         01:53:e5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:09 2024 by rpki-client on console-fra.rpki-client.org