Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/0/3137302e38342e362e302f32342d3234203d3e20323731303339.roa
File:                     3137302e38342e362e302f32342d3234203d3e20323731303339.roa (raw, json)
Hash identifier:          2ofsV1b35L7fC4S3YTgXY4asKYQwl+ID/wMpGsWtbic=
Subject key identifier:   5D:CB:60:7E:77:CB:06:06:AA:4B:13:3B:FE:B7:AC:6A:85:6C:4C:30
Certificate issuer:       /CN=49560F264813C444A114A1BFF4704926CAAD3807
Certificate serial:       3A82BBA4E1271BB0D1ACFFAA2CB4BBB01BF3703F
Authority key identifier: 49:56:0F:26:48:13:C4:44:A1:14:A1:BF:F4:70:49:26:CA:AD:38:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49560F264813C444A114A1BFF4704926CAAD3807.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/0/3137302e38342e362e302f32342d3234203d3e20323731303339.roa
Signing time:             Mon 07 Aug 2023 17:17:57 +0000
ROA not before:           Mon 07 Aug 2023 17:12:57 +0000
ROA not after:            Mon 05 Aug 2024 17:17:57 +0000
asID:                     271039
IP address blocks:        170.84.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:82:bb:a4:e1:27:1b:b0:d1:ac:ff:aa:2c:b4:bb:b0:1b:f3:70:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49560F264813C444A114A1BFF4704926CAAD3807
        Validity
            Not Before: Aug  7 17:12:57 2023 GMT
            Not After : Aug  5 17:17:57 2024 GMT
        Subject: CN=5DCB607E77CB0606AA4B133BFEB7AC6A856C4C30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:96:1d:10:44:51:cc:df:1e:98:aa:f8:79:3d:
                    27:c1:42:4c:94:10:2b:22:b8:c9:0f:36:a1:83:3d:
                    02:9a:13:aa:13:b1:a0:b8:0b:5f:3e:9b:9f:0f:04:
                    9e:d8:d5:7a:3a:1d:d1:da:58:06:31:e3:7f:9d:b4:
                    30:36:3f:78:6c:11:8a:3c:95:0c:05:34:d6:d6:c0:
                    97:6a:39:61:00:fd:72:55:27:d1:90:66:0e:08:b1:
                    5a:a2:5e:37:24:16:61:ac:0d:17:22:37:1c:fe:14:
                    19:34:cc:61:e8:39:85:74:7f:ef:f8:d5:28:f0:5c:
                    0f:84:24:73:3d:ed:a9:32:9d:27:2e:22:ef:0b:15:
                    f0:94:83:9f:a8:8c:3a:df:9c:1f:8c:36:04:db:20:
                    0b:a2:bc:cd:88:51:ee:5b:c1:db:a8:b3:11:20:a7:
                    1a:61:8f:c3:1a:3f:84:56:e0:ab:a7:d7:19:bd:cf:
                    79:12:10:54:d9:40:eb:10:0f:3e:8b:b0:ec:a0:f4:
                    91:43:94:64:fb:8b:6c:5c:3a:6d:7a:d4:6f:8b:47:
                    aa:6d:58:a6:2d:3d:7c:e7:2e:33:7e:95:88:76:85:
                    33:cd:59:ad:c3:05:ec:11:46:9a:cd:2e:59:5d:66:
                    24:f4:bd:48:00:88:bc:d8:d9:c9:d1:a5:36:df:06:
                    bd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CB:60:7E:77:CB:06:06:AA:4B:13:3B:FE:B7:AC:6A:85:6C:4C:30
            X509v3 Authority Key Identifier:
                keyid:49:56:0F:26:48:13:C4:44:A1:14:A1:BF:F4:70:49:26:CA:AD:38:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/0/49560F264813C444A114A1BFF4704926CAAD3807.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49560F264813C444A114A1BFF4704926CAAD3807.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/0/3137302e38342e362e302f32342d3234203d3e20323731303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:58:ea:e3:e1:e0:d8:8b:8b:85:3d:5d:0d:7d:72:87:59:15:
         1c:e6:f6:d1:31:65:ec:99:10:71:47:a8:a2:4e:96:03:74:f4:
         c7:2d:7e:56:d9:38:27:26:6e:66:f0:69:71:45:af:ae:82:05:
         67:d0:ba:3e:f1:0b:dd:24:14:9e:88:ed:0b:dc:3c:cc:16:c3:
         03:da:3e:39:5e:e3:7a:5a:d1:5c:92:cd:4c:f9:27:83:a6:59:
         ec:a6:8d:4b:d6:f7:aa:ac:3e:d8:7b:01:fe:cc:af:31:21:57:
         c0:54:68:73:76:4f:da:90:46:d2:02:50:67:00:0d:83:78:10:
         5e:13:63:1e:56:4c:ad:f8:9e:9c:30:8b:3a:8c:af:a9:51:be:
         44:e2:b6:03:91:b2:3c:07:02:42:d6:be:a8:f3:eb:a4:07:17:
         aa:87:a3:42:ef:6d:c2:58:78:f3:cd:7b:02:61:42:bd:d5:fe:
         05:ab:2b:05:14:0e:a5:6a:a6:67:d8:7b:9d:2b:87:58:c7:4b:
         aa:4c:17:5a:f8:54:c3:08:3f:b3:cf:42:6c:e1:b9:50:99:3c:
         0c:10:6b:8e:3e:7a:55:e0:4a:a4:18:1a:10:27:77:ac:20:3b:
         db:9c:96:e1:27:f9:56:50:50:cd:a1:2f:92:d5:14:b3:19:a1:
         ca:9d:e3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org