Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a353030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a353030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          PfjYkMoDdYfGy/fBZh56WvMEsd9T/fbbS4iTWfL/Ylk=
Subject key identifier:   55:90:23:D1:C5:2B:8D:ED:0E:45:43:87:B0:89:F5:26:7F:1F:E0:90
Certificate issuer:       /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial:       1C947088933AF524DEB2AC6244D81C9484B88C0A
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a353030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Fri 23 Feb 2024 20:36:52 +0000
ROA not before:           Fri 23 Feb 2024 20:31:52 +0000
ROA not after:            Fri 21 Feb 2025 20:36:52 +0000
asID:                     61637
IP address blocks:        2804:1c18:5000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:94:70:88:93:3a:f5:24:de:b2:ac:62:44:d8:1c:94:84:b8:8c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Validity
            Not Before: Feb 23 20:31:52 2024 GMT
            Not After : Feb 21 20:36:52 2025 GMT
        Subject: CN=559023D1C52B8DED0E454387B089F5267F1FE090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:47:71:76:b3:12:5b:9a:df:a3:20:e9:6e:
                    7a:54:5c:63:22:11:72:2c:b7:4c:38:5d:80:e2:12:
                    b0:60:6b:13:95:ba:ba:4f:4f:63:76:16:0b:e0:9a:
                    b2:01:ac:09:eb:90:32:e2:ee:a5:47:3d:73:c3:ae:
                    2a:6f:c2:91:f4:13:fb:5c:c1:ee:d1:aa:22:4e:97:
                    5d:2d:40:00:d0:59:07:b6:fd:35:80:a7:7b:75:78:
                    f2:96:c6:20:6a:d0:e7:2c:5e:59:f4:d1:13:41:30:
                    a5:c2:8b:e9:59:b2:ac:b0:a2:6f:3e:71:1b:eb:67:
                    bc:5c:24:ab:b6:f6:3a:b3:99:7d:b1:ea:03:dc:13:
                    c0:a1:05:6b:72:85:54:89:ba:7f:1d:b4:3a:0f:c8:
                    9b:5e:ce:d1:5d:a8:1e:4a:e3:e5:c1:91:5e:cf:6b:
                    59:b8:b5:c1:6a:f7:eb:50:b3:9a:81:27:e1:26:fe:
                    75:05:96:e8:49:95:a1:69:b4:e0:e3:45:29:e7:8f:
                    64:36:c4:d9:71:63:2f:0d:93:3d:1e:7f:6d:f0:9b:
                    ca:ba:44:d0:f7:12:72:3c:3c:27:77:b6:02:17:3c:
                    1d:8c:8b:db:38:29:15:50:48:62:9f:e1:ef:ce:81:
                    4e:9c:33:2e:8a:f1:7b:dc:a1:7c:77:97:4b:12:75:
                    8d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:90:23:D1:C5:2B:8D:ED:0E:45:43:87:B0:89:F5:26:7F:1F:E0:90
            X509v3 Authority Key Identifier:
                keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a353030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6c:4a:12:9a:b2:e3:9a:f4:91:e2:11:9a:af:e8:da:84:a2:0e:
         03:84:33:6e:3d:f9:8c:74:b7:14:e8:56:29:75:da:9e:1e:c8:
         64:f2:c5:8f:43:ab:82:d8:7f:f6:cd:46:95:c1:1f:c0:de:89:
         4e:14:31:2e:43:aa:fb:fc:94:7e:fb:e9:a5:f6:74:f8:2b:61:
         67:84:4e:ae:6a:55:3f:40:9a:62:03:bc:92:a4:7e:ce:62:5b:
         e6:34:4d:59:8f:7e:04:8e:52:ac:98:fd:7e:f4:3f:94:ec:54:
         6a:b5:7a:c7:36:f4:03:ce:f6:d2:50:6e:d6:21:58:81:e3:76:
         59:ac:9d:ac:70:dc:b9:8c:4c:d2:82:35:aa:54:42:1a:7b:dd:
         4b:3b:cf:05:55:f1:6f:a5:3e:48:04:5a:a1:e9:98:29:af:70:
         cb:46:38:7d:f2:4a:48:7c:ae:b7:e3:71:6d:26:6f:f3:36:0a:
         a9:2b:83:ec:68:46:7b:e2:2d:5f:fa:ed:9a:73:8c:4e:83:99:
         93:e5:51:ed:51:99:39:85:d3:a4:f8:18:14:fe:1f:94:0c:7d:
         3a:30:13:72:0b:90:20:40:be:68:92:d5:28:71:29:ee:d6:2d:
         07:1e:b8:79:04:f0:5a:29:82:fc:e9:52:2a:cc:43:71:42:c3:
         47:d1:06:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:09 2024 by rpki-client on console-fra.rpki-client.org