Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/1/3137302e38342e372e302f32342d3234203d3e20323731303339.roa
File:                     3137302e38342e372e302f32342d3234203d3e20323731303339.roa (raw, json)
Hash identifier:          fO2TuDvDBBMl2ipEW2cpu64RggWO0dUJysUNWn2/ShA=
Subject key identifier:   D2:08:02:BC:B8:EA:BD:C1:AE:FE:A3:BB:7A:A6:C3:3C:5B:20:72:D0
Certificate issuer:       /CN=5383BF99B2733CCC526E037139293C3DBCEA9DF5
Certificate serial:       095C5C5F8345AC5433479EE878C73D8A80A66615
Authority key identifier: 53:83:BF:99:B2:73:3C:CC:52:6E:03:71:39:29:3C:3D:BC:EA:9D:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5383BF99B2733CCC526E037139293C3DBCEA9DF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/1/3137302e38342e372e302f32342d3234203d3e20323731303339.roa
Signing time:             Thu 04 Apr 2024 08:31:27 +0000
ROA not before:           Thu 04 Apr 2024 08:26:27 +0000
ROA not after:            Thu 03 Apr 2025 08:31:27 +0000
asID:                     271039
IP address blocks:        170.84.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5c:5c:5f:83:45:ac:54:33:47:9e:e8:78:c7:3d:8a:80:a6:66:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5383BF99B2733CCC526E037139293C3DBCEA9DF5
        Validity
            Not Before: Apr  4 08:26:27 2024 GMT
            Not After : Apr  3 08:31:27 2025 GMT
        Subject: CN=D20802BCB8EABDC1AEFEA3BB7AA6C33C5B2072D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:12:f6:8c:64:f4:2a:86:74:ef:08:43:ad:c3:
                    52:68:16:bb:45:c7:33:08:70:ac:00:2d:35:d2:3c:
                    1a:96:04:80:2e:2c:07:88:c3:4a:3c:3a:c0:34:3f:
                    3c:35:b6:ff:36:8f:85:1e:0b:e4:d3:96:0e:81:5a:
                    e6:fa:5f:eb:74:5d:89:08:f9:9a:7a:f2:52:ea:e8:
                    b8:9e:e6:78:36:47:23:ac:2d:fe:8b:e4:e8:62:af:
                    fd:c3:b9:65:30:fe:cd:f9:2e:25:3a:16:84:9d:46:
                    10:d9:d9:66:23:5d:0f:f4:56:f4:e8:0c:c0:52:9d:
                    ac:5a:46:2a:a4:ae:c4:c3:98:84:14:bc:d3:7d:84:
                    29:6b:19:64:24:09:37:ca:5e:c0:88:30:e2:4e:dd:
                    fa:69:f7:cc:e2:93:11:38:71:3a:85:a0:9b:c2:cf:
                    e1:89:54:30:41:3a:5a:8b:b2:a0:59:2f:c7:87:ea:
                    73:80:86:69:0a:8e:c9:17:fb:3e:42:fa:a9:87:c3:
                    cf:f9:39:c6:a5:89:3f:37:0c:30:ce:09:f4:d3:d4:
                    a7:26:38:36:0a:4b:75:6b:7b:3b:ca:51:a0:03:6e:
                    49:6e:aa:3d:ff:a6:a2:63:58:c4:e7:05:60:ad:cb:
                    93:82:f4:7d:b4:f4:3f:d9:44:07:0e:95:ce:be:01:
                    55:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:08:02:BC:B8:EA:BD:C1:AE:FE:A3:BB:7A:A6:C3:3C:5B:20:72:D0
            X509v3 Authority Key Identifier:
                keyid:53:83:BF:99:B2:73:3C:CC:52:6E:03:71:39:29:3C:3D:BC:EA:9D:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/1/5383BF99B2733CCC526E037139293C3DBCEA9DF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5383BF99B2733CCC526E037139293C3DBCEA9DF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqCiZyTFjrnhyuYEfcEzU8SSdg5pkMxChK4KLtQQsbB2/1/3137302e38342e372e302f32342d3234203d3e20323731303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:f0:43:2e:d5:d7:c8:2f:6e:88:99:29:42:ac:e0:32:85:71:
         06:74:71:d9:95:61:de:88:af:bf:71:13:ce:56:71:99:63:c0:
         2f:1f:2a:46:c7:44:f9:09:27:97:7b:aa:13:21:06:4e:61:8a:
         2e:4c:e3:25:bf:41:bb:66:13:d1:e3:92:5f:46:95:e8:03:de:
         9e:55:71:0d:0f:1e:56:bd:22:a6:25:14:ec:bb:e3:69:ce:53:
         69:b7:73:4a:cb:ee:8e:f0:41:99:d1:b8:87:ba:f7:a9:cc:5d:
         e4:90:02:75:e3:a9:b5:9c:0f:4a:56:2a:f6:2b:16:c6:db:e6:
         2e:a0:2e:95:21:bf:c5:9c:42:75:80:40:b0:99:83:f5:75:b7:
         36:1c:73:10:70:44:5e:3b:d3:be:cb:9d:e0:3c:3c:99:57:7f:
         b8:33:8e:39:ed:c1:cc:2b:14:e3:30:80:b3:59:db:da:85:a8:
         1b:35:96:62:56:53:b9:31:7a:48:d4:81:7f:38:05:e0:de:c0:
         f7:8e:37:ee:f6:74:40:2e:79:d4:e1:a0:b6:aa:b1:5b:22:fb:
         c2:34:f7:91:39:3a:80:28:f0:c0:a1:ae:85:8b:bf:8d:88:ee:
         0b:3e:67:dc:29:03:fd:1f:ce:f0:83:01:16:da:71:91:2e:1d:
         00:64:e3:2c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUCVxcX4NFrFQzR57oeMc9ioCmZhUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTM4M0JGOTlCMjczM0NDQzUyNkUwMzcxMzkyOTNDM0RC
Q0VBOURGNTAeFw0yNDA0MDQwODI2MjdaFw0yNTA0MDMwODMxMjdaMDMxMTAvBgNV
BAMTKEQyMDgwMkJDQjhFQUJEQzFBRUZFQTNCQjdBQTZDMzNDNUIyMDcyRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDREvaMZPQqhnTvCEOtw1JoFrtF
xzMIcKwALTXSPBqWBIAuLAeIw0o8OsA0Pzw1tv82j4UeC+TTlg6BWub6X+t0XYkI
+Zp68lLq6Lie5ng2RyOsLf6L5Ohir/3DuWUw/s35LiU6FoSdRhDZ2WYjXQ/0VvTo
DMBSnaxaRiqkrsTDmIQUvNN9hClrGWQkCTfKXsCIMOJO3fpp98zikxE4cTqFoJvC
z+GJVDBBOlqLsqBZL8eH6nOAhmkKjskX+z5C+qmHw8/5OcaliT83DDDOCfTT1Kcm
ODYKS3VrezvKUaADbkluqj3/pqJjWMTnBWCty5OC9H209D/ZRAcOlc6+AVVHAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU0ggCvLjqvcGu/qO7eqbDPFsgctAwHwYDVR0j
BBgwFoAUU4O/mbJzPMxSbgNxOSk8PbzqnfUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3FDaVp5VEZqcm5oeXVZRWZjRXpVOFNTZGc1cGtNeENoSzRLTHRRUXNi
QjIvMS81MzgzQkY5OUIyNzMzQ0NDNTI2RTAzNzEzOTI5M0MzREJDRUE5REY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzODNCRjk5QjI3MzNDQ0M1
MjZFMDM3MTM5MjkzQzNEQkNFQTlERjUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dxQ2laeVRGanJuaHl1WUVmY0V6VThTU2RnNXBrTXhDaEs0S0x0UVFzYkIyLzEv
MzEzNzMwMmUzODM0MmUzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMTMw
MzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAKpUBzANBgkqhkiG9w0BAQsFAAOCAQEAcfBDLtXXyC9u
iJkpQqzgMoVxBnRx2ZVh3oivv3ETzlZxmWPALx8qRsdE+Qknl3uqEyEGTmGKLkzj
Jb9Bu2YT0eOSX0aV6APenlVxDQ8eVr0ipiUU7Lvjac5TabdzSsvujvBBmdG4h7r3
qcxd5JACdeOptZwPSlYq9isWxtvmLqAulSG/xZxCdYBAsJmD9XW3NhxzEHBEXjvT
vsud4Dw8mVd/uDOOOe3BzCsU4zCAs1nb2oWoGzWWYlZTuTF6SNSBfzgF4N7A9443
7vZ0QC551OGgtqqxWyL7wjT3kTk6gCjwwKGuhYu/jYjuCz5n3CkD/R/O8IMBFtpx
kS4dAGTjLA==
-----END CERTIFICATE-----
Generated at Mon Jul 29 19:29:06 2024 by rpki-client on console-ams.rpki-client.org