Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/1/3137302e38342e342e302f32322d3234203d3e20323731303339.roa
File:                     3137302e38342e342e302f32322d3234203d3e20323731303339.roa (raw, json)
Hash identifier:          bwqkiIhMsL5bCb54+6ZowV/ZN9kQbUswveP6/Vsf5JQ=
Subject key identifier:   5B:A5:98:C6:62:78:9C:22:E8:C8:F0:BE:57:70:82:35:69:A9:D5:75
Certificate issuer:       /CN=5383BF99B2733CCC526E037139293C3DBCEA9DF5
Certificate serial:       2EFA4375A45A5D38D1F1611A895029F76E8A09C2
Authority key identifier: 53:83:BF:99:B2:73:3C:CC:52:6E:03:71:39:29:3C:3D:BC:EA:9D:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5383BF99B2733CCC526E037139293C3DBCEA9DF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/1/3137302e38342e342e302f32322d3234203d3e20323731303339.roa
Signing time:             Thu 04 Apr 2024 08:31:31 +0000
ROA not before:           Thu 04 Apr 2024 08:26:31 +0000
ROA not after:            Thu 03 Apr 2025 08:31:31 +0000
asID:                     271039
IP address blocks:        170.84.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:fa:43:75:a4:5a:5d:38:d1:f1:61:1a:89:50:29:f7:6e:8a:09:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5383BF99B2733CCC526E037139293C3DBCEA9DF5
        Validity
            Not Before: Apr  4 08:26:31 2024 GMT
            Not After : Apr  3 08:31:31 2025 GMT
        Subject: CN=5BA598C662789C22E8C8F0BE5770823569A9D575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4a:97:62:e2:4b:ae:6e:04:d4:56:a3:f6:16:
                    57:d7:04:19:ff:ab:3b:3e:56:e8:0b:e1:0b:ce:98:
                    78:23:4f:16:50:ce:bf:b3:42:2a:7b:e1:de:bc:c5:
                    7a:81:9f:b1:77:3d:c4:bf:0c:91:be:53:4a:41:95:
                    cf:d4:73:77:71:a8:18:a7:46:8d:c6:e5:9b:cc:df:
                    e1:fe:53:64:88:4b:43:c8:86:92:b0:63:8f:1f:d1:
                    cb:50:80:d6:23:ca:43:0f:c2:d9:cb:74:8e:e5:48:
                    71:99:b5:c2:2b:8c:11:96:74:96:fa:b4:3b:47:85:
                    31:d9:36:65:4f:4f:c8:ee:a8:d5:74:55:22:7c:3f:
                    ac:99:7c:fb:94:a9:a1:f7:89:f8:b2:b5:2b:c0:02:
                    bc:ae:99:0c:4f:b6:cb:5b:51:79:71:e4:8e:30:df:
                    74:23:06:4e:2e:49:64:29:02:a0:f7:3b:46:ed:dd:
                    2a:15:66:00:51:cf:a1:b0:b1:12:18:a7:56:27:d0:
                    09:bc:c2:25:c0:74:15:17:85:04:c8:39:4f:7f:61:
                    3c:14:49:b3:52:c9:1a:a2:1e:90:f0:6b:81:ad:71:
                    13:bd:62:ff:63:8e:53:4d:4f:fb:99:f2:bf:30:52:
                    67:08:6a:f2:09:cb:a7:c6:26:ec:79:9a:2b:be:e4:
                    55:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A5:98:C6:62:78:9C:22:E8:C8:F0:BE:57:70:82:35:69:A9:D5:75
            X509v3 Authority Key Identifier:
                keyid:53:83:BF:99:B2:73:3C:CC:52:6E:03:71:39:29:3C:3D:BC:EA:9D:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/1/5383BF99B2733CCC526E037139293C3DBCEA9DF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5383BF99B2733CCC526E037139293C3DBCEA9DF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/1/3137302e38342e342e302f32322d3234203d3e20323731303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:ba:39:aa:6e:48:8e:3b:c0:95:83:f7:9c:cb:c5:7e:c8:96:
         64:47:68:81:15:d0:29:7b:55:95:e7:d2:5d:f3:e2:db:1e:1b:
         bf:dd:ed:22:5b:ab:ee:f5:80:98:0f:6a:62:48:96:e8:67:fd:
         14:ab:4f:95:ab:02:41:ae:53:67:83:5c:b4:1a:95:0d:b4:6c:
         69:38:67:db:8d:33:06:21:11:b6:07:5a:f3:98:a8:5d:b9:13:
         40:2e:57:37:c3:d5:a2:8e:5f:c2:f1:b4:9e:95:9f:e9:85:d5:
         57:74:b3:c7:55:f6:c0:05:c9:e8:c4:3a:92:82:fa:8d:cb:0a:
         80:bd:32:09:3c:bd:d5:72:b1:31:76:bc:b4:dd:c5:fc:ce:98:
         54:af:80:ea:a3:a6:9d:da:62:67:90:ef:1f:41:c6:91:41:2c:
         83:63:e4:dd:71:16:5f:e0:30:08:7f:80:38:b6:b5:fa:47:44:
         a5:26:cf:ab:34:9a:60:5d:3a:d1:76:8d:0c:fb:3d:a8:6a:27:
         46:b5:db:11:88:2f:b1:b3:5a:3a:2f:54:b9:19:e9:81:23:33:
         08:f2:0b:7e:22:ff:45:b2:4c:94:7d:5f:1b:ca:78:c7:f4:65:
         a6:f9:d7:d9:84:b5:9b:ef:64:c5:cd:70:3a:0f:42:0e:d0:31:
         5d:0a:1f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 19:40:04 2024 by rpki-client on console-fra.rpki-client.org