Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a343030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a343030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          5f16ZGJJGLycZXgPVIs6r6QgLiVbP75paaAJmvyvDzc=
Subject key identifier:   D3:24:E3:AC:DB:58:F7:57:6E:93:DC:4B:F9:F4:17:98:E1:63:34:F8
Certificate issuer:       /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial:       7C41C06B3B35C778A40DB74DA170541E59AF38C7
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a343030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Fri 23 Feb 2024 20:36:55 +0000
ROA not before:           Fri 23 Feb 2024 20:31:55 +0000
ROA not after:            Fri 21 Feb 2025 20:36:55 +0000
asID:                     61637
IP address blocks:        2804:1c18:4000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:41:c0:6b:3b:35:c7:78:a4:0d:b7:4d:a1:70:54:1e:59:af:38:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Validity
            Not Before: Feb 23 20:31:55 2024 GMT
            Not After : Feb 21 20:36:55 2025 GMT
        Subject: CN=D324E3ACDB58F7576E93DC4BF9F41798E16334F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:35:e6:66:f4:a4:33:e9:21:96:ab:44:41:7c:
                    1e:fb:97:0f:e6:9a:df:82:a6:b9:24:2f:bb:23:44:
                    1c:b1:69:21:31:d2:e6:75:51:f6:c8:7b:1c:10:45:
                    bb:e3:bd:65:f4:eb:df:55:7b:65:4d:6b:fd:2d:fe:
                    0e:ed:80:d0:33:d9:13:74:02:0c:a7:20:b5:2c:52:
                    7e:a2:52:7a:0e:29:33:69:9a:91:42:fa:a6:86:9a:
                    5d:62:f2:b0:6b:61:df:c4:22:4c:db:9f:bb:95:10:
                    21:f4:4c:a2:ee:1c:33:d8:f2:90:b0:fe:d4:39:98:
                    a2:52:1d:94:3c:a5:f8:e7:15:84:cd:d2:c2:e9:0f:
                    95:1c:7b:d6:cf:bf:64:21:b9:ad:53:08:b5:50:13:
                    f5:e9:24:9f:31:db:4f:78:2b:84:0a:cc:d2:cf:2a:
                    a1:f6:9d:8e:8f:eb:70:e8:60:b6:59:26:53:aa:00:
                    e0:bf:c6:9e:e4:cc:03:6e:79:f5:27:8d:c8:a1:f5:
                    96:c4:eb:39:7e:23:2f:ff:b5:8e:ea:e4:30:c4:ea:
                    b4:6e:7c:ed:a4:4f:84:04:cd:96:23:7c:d9:d5:0e:
                    01:e8:d1:9d:77:00:6d:28:b6:d7:87:1a:b3:0a:ab:
                    56:76:6f:6c:d6:24:bf:0f:d0:5c:60:c9:62:05:3a:
                    41:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:24:E3:AC:DB:58:F7:57:6E:93:DC:4B:F9:F4:17:98:E1:63:34:F8
            X509v3 Authority Key Identifier:
                keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a343030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         09:a9:ab:ff:45:b3:77:4f:a5:c4:c4:dd:10:79:79:a1:5f:d6:
         a5:99:c8:02:15:f8:f0:e6:37:ba:a6:55:af:bf:fc:59:9f:6b:
         30:db:2e:fe:8e:62:4d:81:07:d9:f1:32:45:ab:43:61:fa:ba:
         57:10:db:47:ed:80:47:60:14:3b:b9:cd:f7:6f:b9:e8:12:cc:
         fa:eb:2d:6b:a8:6f:62:ea:7b:e3:4b:9d:8a:5c:4c:50:8c:50:
         ed:e6:51:ae:c6:95:62:2d:38:de:a7:0c:cb:f3:05:ff:67:0e:
         6a:dd:f5:f3:bb:e6:90:6d:d0:8f:e5:ad:f7:43:4a:18:57:51:
         f5:46:7e:40:76:64:c8:5c:86:8e:09:22:fc:0d:98:76:17:a1:
         0f:76:46:aa:a1:78:26:cc:22:50:b3:0e:b2:2b:fa:46:db:ce:
         37:0b:3f:7f:15:80:c8:f3:c0:8e:1b:f9:3a:56:ba:7a:b7:93:
         e9:36:14:01:72:a5:a9:1f:0f:5b:47:af:2b:ef:38:f8:04:03:
         e8:f1:e7:b2:4b:cf:ff:02:64:46:87:52:ff:95:8f:70:64:90:
         00:05:5a:56:ee:2f:0f:55:4f:74:85:18:94:4f:01:b2:a0:c5:
         ce:49:1b:4a:9f:b4:76:2a:04:f1:5e:16:e3:b6:7c:51:00:bb:
         f2:70:b2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org