Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/0/3137302e38342e352e302f32342d3234203d3e20323731303339.roa
File:                     3137302e38342e352e302f32342d3234203d3e20323731303339.roa (raw, json)
Hash identifier:          sBPZWOBHfB6+pyex3tiDTyasNr0YsfGJlu+6a2uoC28=
Subject key identifier:   78:0B:4C:58:4F:15:90:34:5F:4C:CC:A3:E3:06:8C:4B:14:5F:13:4E
Certificate issuer:       /CN=49560F264813C444A114A1BFF4704926CAAD3807
Certificate serial:       2F74AA6E3BB36A47F6C9A60B95B63528D69511D2
Authority key identifier: 49:56:0F:26:48:13:C4:44:A1:14:A1:BF:F4:70:49:26:CA:AD:38:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49560F264813C444A114A1BFF4704926CAAD3807.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/0/3137302e38342e352e302f32342d3234203d3e20323731303339.roa
Signing time:             Mon 07 Aug 2023 17:17:05 +0000
ROA not before:           Mon 07 Aug 2023 17:12:05 +0000
ROA not after:            Mon 05 Aug 2024 17:17:05 +0000
asID:                     271039
IP address blocks:        170.84.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:74:aa:6e:3b:b3:6a:47:f6:c9:a6:0b:95:b6:35:28:d6:95:11:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49560F264813C444A114A1BFF4704926CAAD3807
        Validity
            Not Before: Aug  7 17:12:05 2023 GMT
            Not After : Aug  5 17:17:05 2024 GMT
        Subject: CN=780B4C584F1590345F4CCCA3E3068C4B145F134E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ac:d1:7f:f2:2f:0b:38:ce:de:15:e3:3d:2f:
                    ee:29:f1:39:26:bb:28:ca:b6:f5:7f:29:50:4c:37:
                    90:9e:a7:86:a0:1b:96:b2:8b:43:fa:b6:cc:b2:92:
                    da:9f:5c:f4:a6:5c:2a:9b:41:7b:5e:31:d1:26:cb:
                    9f:d8:db:f0:7e:18:58:26:35:66:85:8d:41:bc:c6:
                    4e:75:94:46:1f:0b:a2:78:5e:a4:21:f3:1f:26:b4:
                    73:a2:f8:ce:29:0f:43:99:98:a9:68:5b:36:f4:5e:
                    3b:ee:76:fa:17:b6:30:92:34:f0:d3:d8:17:82:bd:
                    a1:77:7c:c4:ca:47:82:97:86:f2:74:a9:ae:6a:dc:
                    87:d8:c0:85:e5:9d:8c:54:3e:13:bc:13:07:31:28:
                    91:b2:0d:b9:28:65:30:62:42:3e:09:8b:a1:e7:a6:
                    a6:a1:c2:82:70:80:4a:be:22:f0:9c:c9:3b:77:f8:
                    a6:6a:48:98:b4:7c:ca:56:4d:36:0f:9c:f3:0b:45:
                    92:07:d0:56:e0:e1:95:c1:c0:79:86:5e:bc:a6:9f:
                    c7:e9:52:b8:eb:4e:4a:7b:1b:5c:85:72:c6:06:4a:
                    a5:67:65:75:2e:ec:30:ad:fa:51:47:da:a8:4f:01:
                    7e:a8:5e:92:e1:77:b6:ad:79:76:38:f4:c1:40:73:
                    2d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0B:4C:58:4F:15:90:34:5F:4C:CC:A3:E3:06:8C:4B:14:5F:13:4E
            X509v3 Authority Key Identifier:
                keyid:49:56:0F:26:48:13:C4:44:A1:14:A1:BF:F4:70:49:26:CA:AD:38:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/0/49560F264813C444A114A1BFF4704926CAAD3807.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49560F264813C444A114A1BFF4704926CAAD3807.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/0/3137302e38342e352e302f32342d3234203d3e20323731303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:13:fc:8a:fa:e1:ec:0e:b9:25:7f:a9:24:40:58:4f:a1:44:
         fb:5f:b3:c7:8c:e0:70:40:eb:19:da:cd:6b:6e:b7:48:69:e0:
         82:a4:cc:33:78:d7:b0:6e:da:73:dc:93:f5:7c:93:89:b6:2f:
         18:30:f2:6a:24:c5:8a:f7:dc:a9:e5:84:36:32:04:f6:ba:27:
         31:29:f0:7b:ab:c8:c3:0c:5a:81:69:be:9e:92:d9:e8:71:6a:
         51:56:03:8e:7b:f6:da:4e:d7:e9:1d:76:fb:9b:ea:f7:eb:5c:
         81:bb:dc:a1:36:17:31:c3:54:f8:66:53:ba:4c:0b:e4:89:15:
         19:d5:56:41:f9:fe:a9:23:a6:b6:23:ad:f1:e7:17:07:44:06:
         ba:4a:57:a5:c5:92:39:46:2f:b2:b6:b5:07:e5:5e:2b:9f:9d:
         d8:43:76:e1:13:b8:04:94:14:ef:7d:e8:ff:ae:54:60:b2:46:
         e5:dc:b0:45:0b:e1:80:9f:ad:0e:98:07:8e:08:58:cd:92:f9:
         b9:6c:84:cb:03:d9:24:de:2d:36:a9:02:26:5e:73:42:33:5f:
         a3:75:74:b8:a6:dc:65:8c:32:59:3b:1e:55:8d:d6:66:79:b5:
         36:cd:df:fa:4b:cb:b2:3b:c8:dc:06:29:98:03:e9:82:ad:c8:
         c2:48:8b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org