Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a363030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a363030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          sYAsY+07PASsGKN/LqsUwXAFe5XrwyysWzD0vF8pmyo=
Subject key identifier:   09:F6:C2:FC:21:79:2D:BA:00:6B:79:C1:50:60:8B:29:6F:92:12:38
Certificate issuer:       /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial:       26BC1919701E8E2637B8E26A62A0A64FA12D5617
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a363030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Fri 23 Feb 2024 20:36:53 +0000
ROA not before:           Fri 23 Feb 2024 20:31:53 +0000
ROA not after:            Fri 21 Feb 2025 20:36:53 +0000
asID:                     61637
IP address blocks:        2804:1c18:6000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:bc:19:19:70:1e:8e:26:37:b8:e2:6a:62:a0:a6:4f:a1:2d:56:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Validity
            Not Before: Feb 23 20:31:53 2024 GMT
            Not After : Feb 21 20:36:53 2025 GMT
        Subject: CN=09F6C2FC21792DBA006B79C150608B296F921238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:45:89:be:17:f1:73:7f:1d:f0:79:2e:ca:
                    d2:41:5c:08:25:33:1b:a9:07:90:b5:38:3e:98:44:
                    8a:a5:d8:2a:5c:ed:cc:0c:70:c7:ff:0e:a5:80:9f:
                    4c:3a:aa:24:92:c1:d9:18:1e:b2:ec:e3:e6:c7:30:
                    d9:88:3c:16:8e:a2:1c:9d:98:34:b3:dc:f0:69:44:
                    d7:b7:ea:d2:a2:f8:89:5e:69:6e:08:cd:48:1e:87:
                    c4:b2:6f:ce:35:f0:dd:58:6c:59:cd:37:9f:29:53:
                    ec:4a:78:be:df:23:31:07:85:3f:a4:d6:4a:4d:5e:
                    82:8e:d9:50:25:3e:c8:fd:ab:7e:3f:9b:26:4e:b9:
                    c9:4f:03:11:ad:7f:71:11:ab:46:ac:b1:d3:88:40:
                    c3:3f:ac:43:7b:c9:f6:63:cb:25:fc:79:be:d0:da:
                    32:ca:42:16:3d:b3:f2:24:d7:60:e2:67:98:b1:ad:
                    cf:c6:48:67:07:9e:63:d9:a9:ba:5c:cf:69:66:b9:
                    ea:c2:be:d7:6a:be:c1:73:0e:64:60:b3:2f:f0:f2:
                    44:62:18:e0:d3:b1:70:69:d2:39:77:c4:a5:42:d7:
                    74:fd:39:0b:fc:c3:f5:d9:ae:4d:5c:e0:95:76:22:
                    61:fa:77:d5:d4:de:88:60:44:26:93:bf:45:4f:6d:
                    e0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F6:C2:FC:21:79:2D:BA:00:6B:79:C1:50:60:8B:29:6F:92:12:38
            X509v3 Authority Key Identifier:
                keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a363030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         99:87:e7:4b:e3:00:8f:55:87:e6:64:81:dd:c7:b9:96:e0:ba:
         1b:e9:a7:e9:c1:c2:2b:3c:ac:ef:76:f8:0b:2d:4c:24:56:d3:
         6e:d8:81:f4:1d:85:76:9e:ca:11:2a:e6:b7:11:79:31:2b:79:
         76:22:fd:cb:34:5c:2d:43:49:66:c4:19:d5:a9:1d:d3:48:72:
         59:2b:16:48:dd:36:95:44:c8:30:c7:b2:a9:98:e1:93:64:57:
         ae:8a:95:d7:68:e2:75:c5:5d:dd:42:9c:29:a4:ab:e7:92:b3:
         d6:4a:af:36:f2:47:f9:05:8c:b1:a3:98:e0:ee:39:01:fd:61:
         b2:13:1d:60:eb:4e:01:22:1f:2a:0f:a2:78:e8:5c:ac:12:2e:
         86:e8:45:6c:6b:c8:dc:ac:2d:26:21:42:d1:fe:0c:44:b9:6c:
         c4:30:fa:26:ea:da:a4:3b:1d:92:2d:5a:e4:82:d0:08:46:df:
         f6:e7:85:56:f9:19:63:81:16:68:4b:80:3b:88:e4:cc:1f:fe:
         03:ef:2c:76:b2:00:7a:82:0f:a4:5c:bb:29:9a:bb:ee:64:88:
         4d:b0:9d:e8:58:e5:d5:13:af:ee:cf:7d:6d:49:18:47:f9:1a:
         df:6b:42:1d:cd:cd:70:fb:1a:92:b4:8c:95:01:9c:34:e4:59:
         ad:33:cc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:53 2024 by rpki-client on console-fra.rpki-client.org