Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a363030303a3a2f33352d3335203d3e203631363337.roa
File:                     323830343a316331383a363030303a3a2f33352d3335203d3e203631363337.roa (raw, json)
Hash identifier:          WA6aCu3dkzodR5cTO7kJ7DxlxYpL9lwy7IB6jfoUMdk=
Subject key identifier:   1A:85:05:FA:65:5C:B8:E1:38:E4:7C:05:19:44:3A:5A:C3:A9:DD:5B
Certificate issuer:       /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial:       38D8220EB48528B52E148B01D2514D7A25EB7DDC
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a363030303a3a2f33352d3335203d3e203631363337.roa
Signing time:             Fri 23 Feb 2024 20:36:50 +0000
ROA not before:           Fri 23 Feb 2024 20:31:50 +0000
ROA not after:            Fri 21 Feb 2025 20:36:50 +0000
asID:                     61637
IP address blocks:        2804:1c18:6000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d8:22:0e:b4:85:28:b5:2e:14:8b:01:d2:51:4d:7a:25:eb:7d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Validity
            Not Before: Feb 23 20:31:50 2024 GMT
            Not After : Feb 21 20:36:50 2025 GMT
        Subject: CN=1A8505FA655CB8E138E47C0519443A5AC3A9DD5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ac:c4:99:9d:de:81:13:2f:e0:07:bd:95:66:
                    2d:14:4f:4c:77:68:ce:bf:d3:85:07:98:cc:be:5b:
                    1a:38:5f:ef:51:b3:32:cb:08:09:c6:15:92:1e:aa:
                    19:e4:76:6b:c8:bf:7b:2f:f1:6b:be:74:03:f6:85:
                    d0:6f:7c:92:91:97:68:56:b7:90:58:2a:ed:2a:a7:
                    ed:36:95:2c:f9:3c:76:e0:ff:75:ee:47:64:95:71:
                    42:d6:f1:2c:7c:96:78:8c:a1:d4:45:0f:46:ae:36:
                    e4:0d:e2:52:b0:78:e0:41:5d:fa:70:39:fd:4a:46:
                    89:ec:a0:7f:cf:61:fc:a1:9c:9a:9c:ed:23:3a:10:
                    b0:76:8a:b4:c2:90:af:c4:28:5f:47:ae:67:4e:9d:
                    5f:ac:a1:0b:d4:ee:44:20:c4:85:dd:00:80:fa:50:
                    84:98:f1:75:6a:aa:ae:a2:99:1d:5b:8f:62:75:fc:
                    d2:96:c8:af:05:93:43:c6:b7:03:5f:f4:be:08:7e:
                    46:28:01:2c:26:65:3d:8c:54:c0:78:99:0f:6b:8c:
                    52:0e:e1:3e:28:a8:35:02:ce:47:b4:97:f0:f1:a2:
                    bd:1f:22:42:18:03:3a:b7:02:94:bb:e6:e6:8b:e2:
                    7a:e6:f5:09:6e:bc:d4:a8:5e:e0:af:2f:0f:a1:1c:
                    6b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:85:05:FA:65:5C:B8:E1:38:E4:7C:05:19:44:3A:5A:C3:A9:DD:5B
            X509v3 Authority Key Identifier:
                keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a363030303a3a2f33352d3335203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         a5:54:28:3c:e9:e9:8e:c5:f3:15:1a:6b:e0:a2:0a:d6:b2:8c:
         a2:97:da:11:39:45:43:64:3b:42:90:21:36:7e:4d:f0:85:6b:
         97:95:92:a1:63:8e:78:25:57:71:59:a8:bf:22:06:2d:8e:30:
         71:01:9b:10:c3:08:aa:07:5c:89:35:cf:38:3d:c7:59:e2:b5:
         9d:7a:c1:8e:94:7e:be:2d:7a:e5:3e:36:41:f6:05:59:e3:94:
         ff:41:bb:55:b3:d6:56:bd:0b:05:c4:84:79:2d:98:b1:aa:69:
         4f:8d:0d:c8:d6:89:9d:ef:a4:ef:f1:1e:73:e1:97:44:10:08:
         18:97:cf:2f:70:d5:41:7e:96:43:12:49:39:e2:02:af:53:47:
         ca:f4:3d:2b:60:a0:e5:de:a0:34:f1:d1:43:51:ea:65:f8:79:
         65:05:7b:d9:49:f2:22:24:c0:83:c4:1b:91:0e:2a:b6:b3:38:
         a2:25:0e:0a:83:47:99:52:15:46:8f:67:8b:cf:f3:09:ab:0d:
         a0:c3:64:bf:31:07:4b:73:fb:ff:5e:da:aa:8a:ad:8b:e7:e5:
         40:bb:df:29:b3:39:a1:4c:2b:d7:54:a1:d6:e8:64:b3:58:74:
         8c:76:ec:41:8c:e7:ad:9b:a9:77:e3:93:6e:e1:6f:59:7b:38:
         95:ee:a3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org