Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a333030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a333030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          Hzh//vhSh6cgvAvj7r+QOAV6i9QXx9OU62vroKkToGI=
Subject key identifier:   A5:71:E8:76:0C:ED:1A:87:DF:FD:D7:41:13:56:28:F5:BD:1D:81:2A
Certificate issuer:       /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial:       7615D02A07353E68E9C14D2358DC325BB557C7B2
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a333030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Fri 23 Feb 2024 20:36:53 +0000
ROA not before:           Fri 23 Feb 2024 20:31:53 +0000
ROA not after:            Fri 21 Feb 2025 20:36:53 +0000
asID:                     61637
IP address blocks:        2804:1c18:3000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:15:d0:2a:07:35:3e:68:e9:c1:4d:23:58:dc:32:5b:b5:57:c7:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Validity
            Not Before: Feb 23 20:31:53 2024 GMT
            Not After : Feb 21 20:36:53 2025 GMT
        Subject: CN=A571E8760CED1A87DFFDD741135628F5BD1D812A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6a:67:ee:d6:53:09:0d:bb:dd:2a:27:ef:e0:
                    a8:81:63:12:14:e1:b9:5e:a7:5f:f7:2f:44:ca:3c:
                    e8:63:11:42:e3:2d:65:02:95:a4:5c:e7:03:db:90:
                    6e:72:50:1d:fe:11:d5:c8:a8:09:0c:61:f5:e4:10:
                    e0:30:38:9a:81:c1:9e:92:70:85:de:91:cf:30:a6:
                    60:63:4a:94:79:61:ec:3c:3f:8a:6d:e9:31:b3:b8:
                    17:9a:5c:df:39:a6:dd:ac:95:fa:0d:b5:3d:af:2f:
                    22:a1:8f:81:73:8a:d8:d3:d2:78:c4:03:82:a0:57:
                    4a:d1:d7:e1:fc:d7:e0:13:dc:e5:18:a5:f4:41:f9:
                    69:63:c4:86:e6:fb:ac:95:42:5d:29:e2:a4:2a:23:
                    8b:e7:05:eb:8b:35:0f:c9:07:bc:78:38:4b:8e:91:
                    06:12:ef:25:ab:8c:00:a9:52:b1:b3:5c:39:cc:69:
                    5e:11:1c:e1:a7:d6:5d:d0:ed:f9:d5:0e:f1:0a:0e:
                    ca:cf:0d:d2:e5:f9:78:db:32:99:be:c1:be:3b:3e:
                    1c:3d:b9:64:b7:9f:cc:82:58:93:d0:85:bc:d4:2e:
                    52:26:b6:b1:e5:fc:7f:12:b9:ff:fb:cf:0f:d6:57:
                    43:16:b1:3c:fc:27:a5:89:f6:53:01:78:12:a9:3a:
                    77:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:71:E8:76:0C:ED:1A:87:DF:FD:D7:41:13:56:28:F5:BD:1D:81:2A
            X509v3 Authority Key Identifier:
                keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a333030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         05:fe:35:b6:d9:32:2e:1f:c9:38:0e:e5:8b:1a:f7:a9:4a:65:
         16:cd:05:67:18:07:0f:bf:cd:94:d9:51:c0:e0:30:69:0c:ae:
         8b:f0:1f:b3:c9:0c:6b:f5:a9:4f:05:d8:c6:4a:4b:91:fa:a2:
         40:8b:e8:9b:36:75:4b:a9:37:dc:17:10:cb:bf:38:3f:6a:17:
         95:63:3f:9d:5a:ec:96:c9:d2:f3:29:31:18:9c:98:89:61:0d:
         6f:82:9a:1c:fc:52:f7:57:cd:f3:80:da:79:60:2a:76:b5:11:
         d4:58:43:f1:f9:c0:88:32:d2:1c:64:f9:8c:63:7b:d2:39:4c:
         0a:9d:c9:03:29:78:ea:5b:a8:c1:04:5e:58:ec:84:f4:c7:0e:
         5b:9e:b3:69:e6:74:28:29:f4:67:34:0e:be:47:ec:c2:70:ee:
         4c:59:66:d3:99:c5:4d:ca:ec:ae:59:a4:02:31:70:ba:fb:9e:
         9d:b5:33:0c:40:a4:53:f9:a2:fe:a1:7b:f9:1f:cd:0e:0a:37:
         ff:a1:a9:c8:39:00:6d:3a:5c:76:d9:48:02:c2:ae:92:d6:57:
         81:bb:ec:6a:b9:d4:2b:08:6d:a4:4d:f3:3c:19:a5:d1:ec:b6:
         65:4d:d9:02:12:6d:da:e9:d2:8f:31:a7:89:65:31:ca:2f:ca:
         ea:e0:ec:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:09 2024 by rpki-client on console-fra.rpki-client.org