Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a373030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a373030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          MOU9qFvBXXCmoF92O1cny7sYOU7qYxQjK+UFVqgSyOY=
Subject key identifier:   7F:B0:38:47:2F:DA:E8:4A:35:41:2D:83:85:BF:A6:FC:06:C4:BC:F4
Certificate issuer:       /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial:       2FA30C83AE95C1C5D2786D0A9A659647AF46FDB2
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a373030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Fri 23 Feb 2024 20:36:52 +0000
ROA not before:           Fri 23 Feb 2024 20:31:52 +0000
ROA not after:            Fri 21 Feb 2025 20:36:52 +0000
asID:                     61637
IP address blocks:        2804:1c18:7000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a3:0c:83:ae:95:c1:c5:d2:78:6d:0a:9a:65:96:47:af:46:fd:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Validity
            Not Before: Feb 23 20:31:52 2024 GMT
            Not After : Feb 21 20:36:52 2025 GMT
        Subject: CN=7FB038472FDAE84A35412D8385BFA6FC06C4BCF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9e:09:d4:f5:dd:93:2b:5b:71:1c:f1:c7:cc:
                    43:6c:89:75:0e:b6:01:fe:4b:0a:e1:ee:a6:52:ec:
                    16:c5:35:23:78:4f:e8:4b:1e:0a:69:44:25:6f:a8:
                    48:ea:45:93:29:69:52:6b:bd:66:06:5d:45:7b:e4:
                    8d:14:be:8b:8f:b9:14:dd:1f:5b:9d:33:ff:db:6d:
                    e8:9e:0d:2c:4f:0c:0b:1c:81:86:6d:e4:62:d6:13:
                    e6:d6:c7:81:2e:63:57:da:64:08:8d:84:a8:01:9b:
                    60:cc:92:02:c5:3e:35:4c:4d:80:94:02:22:f4:dc:
                    ce:f0:e5:4e:08:f3:67:71:7c:5c:ea:9b:f5:5a:56:
                    e7:84:eb:50:46:e7:0f:ae:46:ae:af:f3:89:6b:4a:
                    5c:b1:44:4b:6e:5b:05:10:8b:31:34:14:42:fb:d9:
                    43:b4:c7:06:22:7f:15:56:c6:69:97:e9:4c:d8:39:
                    5e:35:9b:40:df:1f:ef:54:9a:2c:c0:15:cc:14:e1:
                    3a:b6:c3:1d:36:e1:6a:62:8e:e9:b4:f2:c0:17:a3:
                    00:75:19:71:95:57:41:a0:f7:e1:3c:ab:97:0a:5a:
                    ec:4c:fe:11:b4:4b:81:8e:54:49:30:64:50:3a:11:
                    2e:1d:c5:24:19:56:8c:4c:30:90:3a:27:e7:30:69:
                    4b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B0:38:47:2F:DA:E8:4A:35:41:2D:83:85:BF:A6:FC:06:C4:BC:F4
            X509v3 Authority Key Identifier:
                keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a373030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5b:c4:a4:05:a9:9a:aa:ac:16:12:56:fc:bc:ce:96:b8:de:eb:
         79:70:e3:9f:e6:82:72:e9:dd:d8:ef:67:bd:eb:74:47:35:4e:
         54:ca:b3:87:18:0a:f5:62:0a:d9:6c:3b:2e:d1:e5:ed:9e:5b:
         67:f2:e7:5f:45:95:63:25:b4:cb:d5:f3:38:53:68:e7:a3:70:
         19:8b:ec:1a:de:0a:62:64:25:d9:3e:ec:34:a8:e5:63:be:4e:
         cc:9c:0a:b2:56:0c:e9:10:93:40:7a:7c:21:fd:f5:58:98:01:
         ee:8c:53:c1:fd:8b:fa:0f:9e:30:30:8a:b9:a7:fc:23:8b:f2:
         51:d7:bd:33:fc:57:dc:56:ee:60:4e:38:c2:90:57:81:47:00:
         9d:44:c2:10:a1:ad:c5:48:1e:35:8a:96:37:b6:6c:5d:a9:47:
         04:15:1d:c6:e0:b9:0f:cb:08:b2:2a:65:14:5d:2b:fc:08:e8:
         84:e7:d3:86:33:67:7e:76:5b:c6:da:c7:81:46:a6:b6:9a:24:
         78:a4:bb:a9:38:56:f8:d8:cf:15:9c:fd:4e:86:75:d9:ac:59:
         48:bd:6c:77:aa:b8:c0:7d:5d:2b:8d:b0:41:e2:2a:76:04:f0:
         bf:c5:5a:95:00:5a:0f:38:ec:5d:9a:51:5a:44:ba:f3:b9:8d:
         be:2c:0f:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUL6MMg66VwcXSeG0KmmWWR69G/bIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk1NzBBNEQ0RTI1MjYyODZFMkE3QkQ3NERCMDVBOUM4
OTJFNjk5NDAeFw0yNDAyMjMyMDMxNTJaFw0yNTAyMjEyMDM2NTJaMDMxMTAvBgNV
BAMTKDdGQjAzODQ3MkZEQUU4NEEzNTQxMkQ4Mzg1QkZBNkZDMDZDNEJDRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcngnU9d2TK1txHPHHzENsiXUO
tgH+Swrh7qZS7BbFNSN4T+hLHgppRCVvqEjqRZMpaVJrvWYGXUV75I0UvouPuRTd
H1udM//bbeieDSxPDAscgYZt5GLWE+bWx4EuY1faZAiNhKgBm2DMkgLFPjVMTYCU
AiL03M7w5U4I82dxfFzqm/VaVueE61BG5w+uRq6v84lrSlyxREtuWwUQizE0FEL7
2UO0xwYifxVWxmmX6UzYOV41m0DfH+9UmizAFcwU4Tq2wx024Wpijum08sAXowB1
GXGVV0Gg9+E8q5cKWuxM/hG0S4GOVEkwZFA6ES4dxSQZVoxMMJA6J+cwaUsjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUf7A4Ry/a6Eo1QS2Dhb+m/AbEvPQwHwYDVR0j
BBgwFoAUWVcKTU4lJihuKnvXTbBanIkuaZQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXNTcmY3cGZYTVA3c0Z6M3FSYzY2Y2FkUFp0SFVWd014RGlQazR2eGFk
ckYvMC81OTU3MEE0RDRFMjUyNjI4NkUyQTdCRDc0REIwNUE5Qzg5MkU2OTk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU5NTcwQTRENEUyNTI2Mjg2
RTJBN0JENzREQjA1QTlDODkyRTY5OTQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlzU3JmN3BmWE1QN3NGejNxUmM2NmNhZFBadEhVVndNeERpUGs0dnhhZHJGLzAv
MzIzODMwMzQzYTMxNjMzMTM4M2EzNzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDM2MzEzNjMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBBwYcDANBgkqhkiG9w0BAQsFAAOC
AQEAW8SkBamaqqwWElb8vM6WuN7reXDjn+aCcund2O9nvet0RzVOVMqzhxgK9WIK
2Ww7LtHl7Z5bZ/LnX0WVYyW0y9XzOFNo56NwGYvsGt4KYmQl2T7sNKjlY75OzJwK
slYM6RCTQHp8If31WJgB7oxTwf2L+g+eMDCKuaf8I4vyUde9M/xX3FbuYE44wpBX
gUcAnUTCEKGtxUgeNYqWN7ZsXalHBBUdxuC5D8sIsiplFF0r/AjohOfThjNnfnZb
xtrHgUamtpokeKS7qThW+NjPFZz9ToZ12axZSL1sd6q4wH1dK42wQeIqdgTwv8Va
lQBaDzjsXZpRWkS687mNviwPXw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org