Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/1/3137302e38342e352e302f32342d3234203d3e20323731303339.roa
File:                     3137302e38342e352e302f32342d3234203d3e20323731303339.roa (raw, json)
Hash identifier:          G4E6TCqwZwhQ6pC9mlVEjz2GAKRTVtWWBJkD5+yk4n4=
Subject key identifier:   AC:62:7D:82:C8:0F:3E:04:60:B7:E1:FD:12:F9:04:16:81:32:33:3B
Certificate issuer:       /CN=5383BF99B2733CCC526E037139293C3DBCEA9DF5
Certificate serial:       75382774216A89E470E556F01C629DDF7BDAC63E
Authority key identifier: 53:83:BF:99:B2:73:3C:CC:52:6E:03:71:39:29:3C:3D:BC:EA:9D:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5383BF99B2733CCC526E037139293C3DBCEA9DF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/1/3137302e38342e352e302f32342d3234203d3e20323731303339.roa
Signing time:             Thu 04 Apr 2024 08:31:31 +0000
ROA not before:           Thu 04 Apr 2024 08:26:31 +0000
ROA not after:            Thu 03 Apr 2025 08:31:31 +0000
asID:                     271039
IP address blocks:        170.84.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:38:27:74:21:6a:89:e4:70:e5:56:f0:1c:62:9d:df:7b:da:c6:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5383BF99B2733CCC526E037139293C3DBCEA9DF5
        Validity
            Not Before: Apr  4 08:26:31 2024 GMT
            Not After : Apr  3 08:31:31 2025 GMT
        Subject: CN=AC627D82C80F3E0460B7E1FD12F904168132333B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:26:c2:39:10:92:ad:1e:a1:be:6c:5e:40:b9:
                    fa:71:93:6d:19:44:a5:6f:e5:16:1b:fa:b8:54:35:
                    7e:16:33:24:b4:51:e8:3e:6d:c9:1d:77:d7:23:7e:
                    95:d0:67:9b:56:e0:09:10:ce:63:83:f5:5b:74:a7:
                    25:d0:e8:3f:fb:f8:b9:d0:30:06:b0:6c:64:ed:0e:
                    22:14:c1:46:d5:0e:87:ba:44:28:e7:08:b8:80:33:
                    4a:9f:19:fa:cc:2f:45:e2:2c:f2:ce:c2:f8:2f:82:
                    92:8c:c7:44:e7:d7:33:d0:52:07:c7:be:56:87:83:
                    53:33:cd:72:cf:e4:02:2d:ed:a7:e3:f1:d4:4b:8c:
                    4c:7c:4e:0c:7e:7b:98:dd:2c:b7:7b:da:03:49:74:
                    d0:3f:1b:46:3b:e3:22:01:28:a6:34:d1:12:a1:8a:
                    3e:49:40:e8:e2:52:6d:16:2e:36:55:81:cc:a3:a7:
                    3e:0b:fd:f6:35:76:97:9e:1b:de:69:f8:8d:4d:06:
                    e4:2b:d6:24:17:08:17:f7:e7:5a:3c:0f:b4:1d:9a:
                    45:df:93:2f:f9:ab:25:d9:2f:c8:dd:bc:be:1c:43:
                    54:88:b6:2b:d6:02:55:0d:bc:c1:19:99:19:ca:8c:
                    d6:b8:f5:2a:f2:db:f8:91:19:1d:1f:63:bc:21:aa:
                    95:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:62:7D:82:C8:0F:3E:04:60:B7:E1:FD:12:F9:04:16:81:32:33:3B
            X509v3 Authority Key Identifier:
                keyid:53:83:BF:99:B2:73:3C:CC:52:6E:03:71:39:29:3C:3D:BC:EA:9D:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/1/5383BF99B2733CCC526E037139293C3DBCEA9DF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5383BF99B2733CCC526E037139293C3DBCEA9DF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/1/3137302e38342e352e302f32342d3234203d3e20323731303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:c4:1e:b2:83:12:95:97:9d:97:61:89:5b:43:dc:16:ee:4e:
         06:b6:c7:9e:de:d4:89:0e:82:4a:95:be:48:03:43:fe:40:75:
         ae:05:bd:6b:06:e6:36:de:a2:07:be:ca:54:b0:e1:a5:81:44:
         7c:fb:9a:3b:06:ab:ce:df:d1:d4:41:c5:9f:7a:26:93:ac:fd:
         8d:8b:3b:a7:bc:28:25:d2:50:21:41:c7:bf:4d:6c:24:e3:98:
         e4:bb:a0:05:9d:29:54:ef:de:10:12:31:3b:c8:45:37:0e:4d:
         fd:d1:c1:0f:d6:28:89:27:07:53:10:a3:56:d5:5e:1a:ff:39:
         71:d5:c0:3b:10:1e:6a:01:bc:13:c0:57:2f:a8:04:a5:32:c0:
         c3:c4:54:59:2a:46:01:8f:2b:d6:bf:35:03:be:33:39:10:87:
         0d:b1:fb:19:06:30:06:0b:49:69:e4:ef:f0:23:9a:18:63:2e:
         eb:4a:67:b4:28:3c:80:c5:1f:bc:9b:9f:76:e7:ee:78:b4:7a:
         ec:d7:bd:4d:fb:52:d2:cb:4f:09:3b:86:3c:c6:b0:71:b5:8c:
         ed:34:2b:37:82:6a:27:cb:5b:be:0a:64:ff:75:70:46:54:9a:
         6a:58:cf:90:5d:cb:dd:5d:34:02:d5:ce:28:cb:ed:00:e6:2b:
         4e:d9:7b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 19:40:04 2024 by rpki-client on console-fra.rpki-client.org