Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3137372e3132352e38302e302f32312d3234203d3e203238323031.roa
File:                     3137372e3132352e38302e302f32312d3234203d3e203238323031.roa (raw, json)
Hash identifier:          kiINMcYV/k0YAHs7z7SuJQ4KggGFlrMlyzUPDTSFMus=
Subject key identifier:   3B:0D:87:B5:9B:1F:51:61:71:44:AA:9A:B6:89:EC:F6:A3:B0:25:4E
Certificate issuer:       /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial:       6EF4660497262EDCFBDA75CFF2BD42DEE4948BCB
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3137372e3132352e38302e302f32312d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:40:37 +0000
ROA not before:           Wed 10 Apr 2024 12:35:37 +0000
ROA not after:            Wed 09 Apr 2025 12:40:37 +0000
asID:                     28201
IP address blocks:        177.125.80.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f4:66:04:97:26:2e:dc:fb:da:75:cf:f2:bd:42:de:e4:94:8b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
        Validity
            Not Before: Apr 10 12:35:37 2024 GMT
            Not After : Apr  9 12:40:37 2025 GMT
        Subject: CN=3B0D87B59B1F51617144AA9AB689ECF6A3B0254E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:09:f9:f3:cd:a8:8a:55:26:2d:d0:2b:1a:bc:
                    af:2a:59:91:2e:04:73:10:1f:c4:d6:76:91:1c:de:
                    44:da:94:27:b6:a0:b8:e2:73:24:86:71:00:a8:7e:
                    b7:05:c0:1f:c9:2b:68:28:05:b8:5b:29:25:62:7d:
                    3a:12:f3:df:23:f2:e0:51:d8:1b:b6:69:62:6b:d4:
                    b5:11:69:c9:77:60:47:eb:07:f3:f8:f4:e0:30:9b:
                    f3:ed:d9:35:4e:19:f7:81:b0:38:df:df:34:98:8b:
                    3b:37:cd:81:68:e0:ff:7b:47:f1:d0:da:87:83:f7:
                    99:ab:47:d4:44:67:fa:58:b7:1b:a8:09:0b:0e:a8:
                    a3:43:08:66:4c:ba:be:b9:fa:33:ea:64:01:bb:7b:
                    16:93:dd:8a:66:10:3a:df:b9:fc:30:82:17:3b:a2:
                    7e:98:97:36:ac:a8:c6:c9:0e:19:6b:90:e2:dd:fc:
                    b2:6c:ca:1f:b1:7a:f0:2b:42:27:b1:49:87:99:b3:
                    a8:d9:97:54:11:d3:b8:09:d6:4c:93:4d:3b:f2:10:
                    c2:e9:41:e1:37:7f:59:3a:01:c3:ed:1b:e3:f6:88:
                    f5:96:fb:20:0d:c2:68:03:c6:a4:1e:b0:34:83:98:
                    70:88:88:dd:10:e1:e5:f5:7f:9a:f9:45:00:80:25:
                    7b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0D:87:B5:9B:1F:51:61:71:44:AA:9A:B6:89:EC:F6:A3:B0:25:4E
            X509v3 Authority Key Identifier:
                keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/3137372e3132352e38302e302f32312d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6a:1c:80:c8:3e:bf:e4:9a:2b:ff:57:a3:6a:d8:bc:81:9f:b0:
         c8:96:78:db:bb:4a:0a:7d:15:8b:5a:4b:46:7e:ce:6d:d7:98:
         4f:98:09:36:3e:95:1b:96:2e:ac:be:b3:24:d7:25:14:4f:fc:
         32:07:83:d8:97:6c:01:a5:de:b5:ad:7e:9b:d3:88:21:cc:55:
         00:53:35:dc:59:10:73:61:7a:de:59:0f:c6:4e:22:5a:a4:cc:
         c1:5e:af:3a:18:1d:2d:9e:02:6c:54:e9:28:99:51:09:5d:c3:
         43:5b:a3:df:80:10:9c:03:18:76:6e:3c:63:e3:5c:ef:3a:73:
         f1:a3:f9:33:99:6b:67:62:bb:2a:f1:fd:47:fb:39:0e:00:57:
         58:7a:c2:d4:47:f8:ab:28:c5:95:ec:ca:7b:b7:c5:b9:cd:af:
         df:c7:b0:a1:a9:16:5a:d5:ad:c3:bf:05:91:de:99:34:23:06:
         af:b8:93:33:3d:41:c4:70:51:f7:2b:31:3a:f5:94:41:18:25:
         de:4c:ab:4a:22:72:d2:98:7f:bd:3e:09:38:6c:54:60:cf:8b:
         b2:6b:2f:e4:20:2d:f1:2a:e2:80:52:de:48:91:bb:a5:ca:9e:
         c5:c1:77:7c:32:60:f5:19:d0:7b:62:64:f2:15:ad:e2:48:d8:
         60:80:09:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:08 2024 by rpki-client on console.sobornost.net