Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a323030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a323030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          pIUVFTn90o4R++tHk11mjiIU+2aJXtINjh3+wUaC1wI=
Subject key identifier:   ED:FB:F5:C2:DF:3E:7D:9D:1C:97:C3:D8:6C:D5:0E:4E:2E:FB:D1:AC
Certificate issuer:       /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial:       4833E06207BB572174004B9EE40DE0909D1356D5
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a323030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Fri 23 Feb 2024 20:36:53 +0000
ROA not before:           Fri 23 Feb 2024 20:31:53 +0000
ROA not after:            Fri 21 Feb 2025 20:36:53 +0000
asID:                     61637
IP address blocks:        2804:1c18:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:33:e0:62:07:bb:57:21:74:00:4b:9e:e4:0d:e0:90:9d:13:56:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Validity
            Not Before: Feb 23 20:31:53 2024 GMT
            Not After : Feb 21 20:36:53 2025 GMT
        Subject: CN=EDFBF5C2DF3E7D9D1C97C3D86CD50E4E2EFBD1AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8e:d7:5a:5c:27:05:f5:a8:47:19:69:7e:b5:
                    36:59:6d:da:44:52:8e:58:d4:0e:f9:ca:00:18:9f:
                    c8:c4:6d:a4:cf:7d:78:c7:ca:e2:3e:d3:3f:e5:67:
                    12:d7:f6:4a:22:03:13:26:51:39:06:4b:aa:2c:2f:
                    40:c8:c7:1b:5b:8e:1a:0a:58:91:ab:08:57:52:24:
                    9c:6b:f9:fe:1c:46:c6:0a:5b:d4:96:eb:a9:46:20:
                    c1:82:75:bd:76:ef:f6:cf:c1:71:26:8b:41:44:55:
                    59:5a:c0:c6:5b:0e:a7:d1:a0:5a:a9:71:15:59:eb:
                    47:3b:91:2d:f6:51:bd:2f:ff:dd:ac:c4:31:29:2f:
                    c0:de:20:a7:cd:34:85:e3:c2:8d:2f:4d:72:29:6d:
                    f1:f8:7f:4b:62:22:a4:82:78:4c:28:41:61:24:86:
                    0a:da:6b:c5:ec:c2:3d:70:6f:53:f5:da:fb:2d:91:
                    60:88:35:e8:56:57:ce:51:fa:f1:93:74:bd:8f:fe:
                    6e:c8:56:e2:a7:8e:30:21:3c:69:87:47:07:81:90:
                    cb:a0:76:70:9f:33:b9:45:36:5c:0b:07:2f:73:6c:
                    c8:1c:d7:1b:40:04:ae:b1:17:5d:77:fb:e6:9f:9b:
                    e5:1b:0b:59:49:8b:7a:37:4c:e5:ba:a3:99:ac:7d:
                    0b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FB:F5:C2:DF:3E:7D:9D:1C:97:C3:D8:6C:D5:0E:4E:2E:FB:D1:AC
            X509v3 Authority Key Identifier:
                keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a323030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3e:f7:aa:f4:2b:ca:04:32:43:60:53:b4:05:7e:e3:7b:63:d6:
         ca:53:91:15:6d:9d:8b:e3:c5:14:64:03:48:a7:17:46:4a:2c:
         71:8d:0d:c5:c8:fd:0f:86:f8:7e:a9:6d:27:29:be:ec:b9:c2:
         7d:a9:60:df:ba:30:d5:97:b4:a0:04:6c:a5:35:cf:2b:07:9b:
         68:2b:37:66:de:b4:32:c0:b5:db:fb:c7:91:8d:4e:d2:99:1a:
         bc:e8:f1:6e:42:42:2d:97:57:12:48:31:08:19:6f:ab:28:90:
         48:f8:9d:c2:b2:49:b5:a9:fa:f1:15:4a:48:e6:88:d7:7a:37:
         5f:da:3c:5d:a9:86:7d:63:c3:86:65:8e:da:71:bc:8e:41:05:
         55:67:1f:85:6f:0f:29:24:35:92:3a:18:c1:53:66:d5:33:cf:
         9a:39:76:bc:90:0d:db:4b:e4:95:6b:5f:9f:74:4a:60:88:57:
         20:7a:d9:8a:c1:e1:d0:c7:81:03:47:fb:4b:fc:7b:83:d3:5a:
         30:90:16:c4:56:a9:00:83:38:87:56:ea:72:5e:0c:b8:ba:89:
         4b:f2:48:5f:65:9e:6c:68:28:bb:5d:0f:08:f3:23:cf:b2:59:
         0d:52:60:e3:d3:09:fc:25:1c:0b:bb:53:3c:c2:3d:69:f6:a6:
         81:0b:18:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org