Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/1/3137302e38342e362e302f32342d3234203d3e20323731303339.roa
File:                     3137302e38342e362e302f32342d3234203d3e20323731303339.roa (raw, json)
Hash identifier:          mX+fetlK/dAsE3P4uF/egf8qw0QGHBtpEdL5Fy5lVKU=
Subject key identifier:   F8:1B:C9:8E:B2:BF:0E:68:FC:59:E9:72:CF:56:59:D2:31:8C:BA:9E
Certificate issuer:       /CN=5383BF99B2733CCC526E037139293C3DBCEA9DF5
Certificate serial:       723502EBB2590EF5B6ED43CA173DAA256CF752C5
Authority key identifier: 53:83:BF:99:B2:73:3C:CC:52:6E:03:71:39:29:3C:3D:BC:EA:9D:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5383BF99B2733CCC526E037139293C3DBCEA9DF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/1/3137302e38342e362e302f32342d3234203d3e20323731303339.roa
Signing time:             Thu 04 Apr 2024 08:31:28 +0000
ROA not before:           Thu 04 Apr 2024 08:26:28 +0000
ROA not after:            Thu 03 Apr 2025 08:31:28 +0000
asID:                     271039
IP address blocks:        170.84.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:35:02:eb:b2:59:0e:f5:b6:ed:43:ca:17:3d:aa:25:6c:f7:52:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5383BF99B2733CCC526E037139293C3DBCEA9DF5
        Validity
            Not Before: Apr  4 08:26:28 2024 GMT
            Not After : Apr  3 08:31:28 2025 GMT
        Subject: CN=F81BC98EB2BF0E68FC59E972CF5659D2318CBA9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:56:a6:ea:07:7f:36:eb:6a:af:40:24:c7:de:
                    6e:90:d2:57:d8:d4:85:a2:ff:7e:42:0b:e1:1a:81:
                    7a:f0:d0:e7:e2:4c:31:75:57:fb:dd:14:f7:9e:66:
                    13:88:af:12:00:8c:ac:a6:3a:7a:bb:23:e9:42:73:
                    19:9b:4d:da:f2:28:57:fe:43:62:49:f0:6d:88:f7:
                    61:b1:08:44:8e:f0:2b:2a:4f:8d:18:6e:16:0d:64:
                    36:f4:9e:15:be:70:47:d3:61:1e:c1:5a:1d:b3:82:
                    4d:93:15:ba:c3:68:0a:14:b6:f0:69:a1:3f:85:1e:
                    19:23:28:19:43:4e:d5:12:b3:c0:2f:c2:ee:e5:dd:
                    df:fa:c5:41:46:c4:40:c1:df:25:1f:7d:65:52:8d:
                    70:2c:b2:c8:a4:e6:2d:06:46:4c:43:ab:b1:42:09:
                    e1:1b:bd:b3:ef:aa:03:26:6f:42:a6:a7:d4:59:4d:
                    7a:dc:1c:7c:a2:01:f5:fa:f0:f5:56:be:12:36:1b:
                    02:49:d4:e8:ef:f9:a7:68:04:c6:a1:5a:6a:87:71:
                    85:fa:ad:c3:b9:dc:6d:2b:b1:af:54:cb:a0:d3:d4:
                    4d:30:a8:7c:81:03:d2:9b:12:a6:ac:cc:ad:83:6d:
                    b6:0d:e9:fd:6f:19:39:54:72:8d:e6:e0:24:01:d6:
                    b8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1B:C9:8E:B2:BF:0E:68:FC:59:E9:72:CF:56:59:D2:31:8C:BA:9E
            X509v3 Authority Key Identifier:
                keyid:53:83:BF:99:B2:73:3C:CC:52:6E:03:71:39:29:3C:3D:BC:EA:9D:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/1/5383BF99B2733CCC526E037139293C3DBCEA9DF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5383BF99B2733CCC526E037139293C3DBCEA9DF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/1/3137302e38342e362e302f32342d3234203d3e20323731303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:9a:3c:a6:91:69:85:ed:3f:4e:b8:79:ac:5c:a2:68:c5:30:
         80:af:e4:92:35:9c:f2:30:41:b9:be:90:23:fb:24:28:ab:55:
         30:a1:41:bf:27:94:32:d4:59:3d:22:52:01:38:5c:1e:7b:68:
         41:c7:6f:02:61:7c:9f:2f:69:c6:89:1a:60:38:eb:ec:e2:85:
         ed:a0:9f:d3:5a:0f:15:cb:7f:c7:6f:62:bf:21:f6:83:f5:db:
         fb:08:3b:bf:1b:d1:85:53:8e:de:73:05:8a:4d:f3:61:3e:d8:
         08:83:3f:78:4c:4f:1e:5e:f2:09:e7:66:25:45:74:63:9d:52:
         ee:37:77:e3:ba:ae:6e:9a:24:c6:a3:b3:e4:cf:67:dc:ca:c5:
         c4:33:fc:d1:f6:5f:e4:17:f7:93:6e:9c:8a:b7:42:82:c5:8f:
         eb:61:df:5b:92:9d:44:02:76:03:c3:47:47:b1:a5:4e:b0:c5:
         e3:82:04:93:ed:f8:40:09:96:fc:a7:ac:eb:f8:36:ec:00:79:
         56:97:3e:66:4b:ef:92:61:54:35:7a:e9:9d:a1:6d:ab:6d:a2:
         b5:f6:59:8f:d3:94:a0:1f:3b:dc:8c:56:87:d0:8b:55:f3:19:
         c5:cc:1b:c5:30:d9:1b:6f:b5:3e:28:90:21:7f:a7:6f:38:1c:
         27:df:44:f9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUcjUC67JZDvW27UPKFz2qJWz3UsUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTM4M0JGOTlCMjczM0NDQzUyNkUwMzcxMzkyOTNDM0RC
Q0VBOURGNTAeFw0yNDA0MDQwODI2MjhaFw0yNTA0MDMwODMxMjhaMDMxMTAvBgNV
BAMTKEY4MUJDOThFQjJCRjBFNjhGQzU5RTk3MkNGNTY1OUQyMzE4Q0JBOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsVqbqB38262qvQCTH3m6Q0lfY
1IWi/35CC+EagXrw0OfiTDF1V/vdFPeeZhOIrxIAjKymOnq7I+lCcxmbTdryKFf+
Q2JJ8G2I92GxCESO8CsqT40YbhYNZDb0nhW+cEfTYR7BWh2zgk2TFbrDaAoUtvBp
oT+FHhkjKBlDTtUSs8Avwu7l3d/6xUFGxEDB3yUffWVSjXAsssik5i0GRkxDq7FC
CeEbvbPvqgMmb0Kmp9RZTXrcHHyiAfX68PVWvhI2GwJJ1Ojv+adoBMahWmqHcYX6
rcO53G0rsa9Uy6DT1E0wqHyBA9KbEqaszK2DbbYN6f1vGTlUco3m4CQB1rhlAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU+BvJjrK/Dmj8Welyz1ZZ0jGMup4wHwYDVR0j
BBgwFoAUU4O/mbJzPMxSbgNxOSk8PbzqnfUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3FDaVp5VEZqcm5oeXVZRWZjRXpVOFNTZGc1cGtNeENoSzRLTHRRUXNi
QjIvMS81MzgzQkY5OUIyNzMzQ0NDNTI2RTAzNzEzOTI5M0MzREJDRUE5REY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzODNCRjk5QjI3MzNDQ0M1
MjZFMDM3MTM5MjkzQzNEQkNFQTlERjUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dxQ2laeVRGanJuaHl1WUVmY0V6VThTU2RnNXBrTXhDaEs0S0x0UVFzYkIyLzEv
MzEzNzMwMmUzODM0MmUzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMTMw
MzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAKpUBjANBgkqhkiG9w0BAQsFAAOCAQEAkpo8ppFphe0/
Trh5rFyiaMUwgK/kkjWc8jBBub6QI/skKKtVMKFBvyeUMtRZPSJSAThcHntoQcdv
AmF8ny9pxokaYDjr7OKF7aCf01oPFct/x29ivyH2g/Xb+wg7vxvRhVOO3nMFik3z
YT7YCIM/eExPHl7yCedmJUV0Y51S7jd347qubpokxqOz5M9n3MrFxDP80fZf5Bf3
k26cirdCgsWP62HfW5KdRAJ2A8NHR7GlTrDF44IEk+34QAmW/Kes6/g27AB5Vpc+
ZkvvkmFUNXrpnaFtq22itfZZj9OUoB873IxWh9CLVfMZxcwbxTDZG2+1PiiQIX+n
bzgcJ99E+Q==
-----END CERTIFICATE-----
Generated at Mon Jul 29 19:40:04 2024 by rpki-client on console-fra.rpki-client.org