Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a313030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a313030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          X2G7GkOSpCjvAsTVhNTsofxrZtfTEeQrtKEIjidMlYA=
Subject key identifier:   D9:A7:23:76:84:1A:5E:A9:FA:6F:6A:2A:11:7C:A0:98:96:D9:7D:19
Certificate issuer:       /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial:       7F8DBCCA3F7F0A2741D3248BDE0E7C48340E9884
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a313030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Fri 23 Feb 2024 20:36:55 +0000
ROA not before:           Fri 23 Feb 2024 20:31:55 +0000
ROA not after:            Fri 21 Feb 2025 20:36:55 +0000
asID:                     61637
IP address blocks:        2804:1c18:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:8d:bc:ca:3f:7f:0a:27:41:d3:24:8b:de:0e:7c:48:34:0e:98:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Validity
            Not Before: Feb 23 20:31:55 2024 GMT
            Not After : Feb 21 20:36:55 2025 GMT
        Subject: CN=D9A72376841A5EA9FA6F6A2A117CA09896D97D19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8d:a5:6a:24:ff:e0:1a:06:4a:d1:e2:0d:a7:
                    d8:60:95:33:b0:f9:8f:73:94:40:4e:56:6f:b3:ba:
                    6c:49:71:d4:4e:1d:f8:eb:57:3f:0b:66:4f:6d:68:
                    5e:3e:80:5f:50:57:20:02:b3:74:53:7d:10:e5:e0:
                    3c:67:6f:98:40:1f:1e:9a:13:84:de:60:81:98:55:
                    8c:b6:08:f2:4f:0e:d1:a5:0a:2f:90:8f:db:1a:fa:
                    e3:b4:c7:51:7d:15:4f:d3:91:cc:86:98:40:8d:57:
                    c3:c5:0e:ef:22:19:72:35:64:f6:ca:20:42:8b:3c:
                    48:83:04:17:cd:90:7e:3b:35:78:90:ed:45:82:55:
                    72:2e:a4:11:29:24:47:23:a3:4b:72:7e:25:0b:d6:
                    6f:25:8f:65:be:58:71:60:a4:9a:2e:2e:af:76:9d:
                    ef:22:58:b6:1e:0b:a9:65:f5:3c:2e:ed:b2:d9:4a:
                    11:56:12:4c:ee:36:55:f8:76:0e:61:6a:d0:72:62:
                    f4:b3:34:54:9c:0b:a9:2a:08:72:c4:72:47:2c:45:
                    28:18:fb:3d:7d:36:a5:f8:3e:60:12:52:b2:eb:c4:
                    2b:24:d1:c5:23:e0:f2:9c:b8:76:c9:68:9d:5d:ae:
                    05:18:a9:ef:d3:ed:6f:61:3a:96:e1:83:da:5d:07:
                    8e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A7:23:76:84:1A:5E:A9:FA:6F:6A:2A:11:7C:A0:98:96:D9:7D:19
            X509v3 Authority Key Identifier:
                keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a313030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         73:78:33:af:4b:6f:d6:ff:f7:39:6b:84:e1:84:47:13:ff:94:
         27:e5:45:57:47:da:20:77:38:79:44:dd:3e:29:6b:ec:e4:14:
         c5:ee:65:f2:43:e9:01:c7:19:c3:fb:7a:4b:f6:3b:39:00:ae:
         5b:02:82:93:83:0e:d8:1e:db:84:88:2b:1f:16:5f:57:77:41:
         fa:68:3c:12:f5:25:43:af:a6:83:6e:4c:49:af:7d:a3:6b:12:
         4b:99:7a:c1:2a:8f:7a:4a:17:8e:ab:20:0b:b3:53:29:ca:2e:
         b0:6d:31:47:ee:9f:7f:6a:9e:b1:46:dc:46:6e:2e:c9:26:17:
         a5:5f:5a:06:99:ab:0a:b9:19:f4:78:48:68:c9:d1:04:0d:4b:
         7c:b7:7e:9e:22:9c:48:d8:64:88:17:67:a7:da:08:cd:d0:0a:
         f3:81:cb:3e:0d:7f:88:09:18:dc:63:1b:fe:15:0b:10:c1:70:
         ba:5c:fd:2d:db:55:ff:d2:f4:c7:65:01:0b:4f:08:cd:47:4c:
         62:d0:65:d8:fb:10:57:fd:7d:23:d5:06:53:68:45:ab:cc:85:
         ce:ea:e8:17:29:9e:dd:48:ea:14:62:6f:4a:a9:0d:71:35:52:
         21:5f:e3:db:80:51:a3:0d:ce:55:dd:76:e5:4e:04:d5:50:d6:
         25:ae:12:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org