Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a383030303a3a2f33332d3333203d3e203631363337.roa
File:                     323830343a316331383a383030303a3a2f33332d3333203d3e203631363337.roa (raw, json)
Hash identifier:          LJZP2a/5QMmRLXZgfbY5Mcdyd86X83tXTts0bVGXD9o=
Subject key identifier:   6E:85:C3:C4:D1:F5:EE:55:00:3D:8C:B2:D2:1A:1C:91:08:5C:9B:12
Certificate issuer:       /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial:       7A61D0423D9133D5A538FEEC4628422BE8797245
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a383030303a3a2f33332d3333203d3e203631363337.roa
Signing time:             Fri 23 Feb 2024 20:36:51 +0000
ROA not before:           Fri 23 Feb 2024 20:31:51 +0000
ROA not after:            Fri 21 Feb 2025 20:36:51 +0000
asID:                     61637
IP address blocks:        2804:1c18:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:61:d0:42:3d:91:33:d5:a5:38:fe:ec:46:28:42:2b:e8:79:72:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Validity
            Not Before: Feb 23 20:31:51 2024 GMT
            Not After : Feb 21 20:36:51 2025 GMT
        Subject: CN=6E85C3C4D1F5EE55003D8CB2D21A1C91085C9B12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5b:8c:07:e3:41:66:da:93:4c:63:57:9a:ca:
                    44:94:15:73:8f:1f:96:83:7b:cb:9d:57:99:2f:5b:
                    bb:da:08:0d:c4:0f:1a:df:7b:0a:a6:20:ca:3d:b9:
                    9d:70:9d:ea:3f:5d:f5:9e:cb:3e:69:4a:74:4e:c9:
                    7a:9f:24:bd:84:69:1a:9b:d7:b2:bd:8f:20:1d:b3:
                    1d:55:9d:ae:16:1d:c7:09:27:f6:8c:27:da:47:39:
                    63:0c:43:21:ec:32:ff:a9:f9:ea:68:07:54:ec:7f:
                    8e:b2:a1:65:6b:4a:d9:5d:86:ac:f5:d4:f2:70:fa:
                    42:96:b0:4d:76:58:a9:e9:11:26:dc:03:71:68:d3:
                    10:68:de:b1:78:0b:c1:cd:04:05:04:2b:4c:dd:cd:
                    60:1f:de:6a:50:40:7d:77:80:92:54:86:56:72:2f:
                    99:65:19:fe:83:e3:8c:f2:a7:61:7e:97:5b:8d:4c:
                    e6:1f:cc:cb:c9:e9:bb:3e:9c:39:d5:4f:69:9a:b4:
                    cd:ca:c7:7a:bc:4e:46:95:fe:ff:f0:3e:04:56:22:
                    10:85:84:90:9e:af:db:54:ed:3e:ca:c0:67:d8:a6:
                    63:42:b4:a7:48:0f:99:ff:cc:64:0f:3b:71:81:0d:
                    cb:88:c3:d9:bd:bf:8e:c1:6b:35:43:70:64:21:97:
                    18:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:85:C3:C4:D1:F5:EE:55:00:3D:8C:B2:D2:1A:1C:91:08:5C:9B:12
            X509v3 Authority Key Identifier:
                keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a383030303a3a2f33332d3333203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         5a:40:45:58:35:8b:1b:c8:04:d2:18:b3:95:b7:11:5f:ec:0d:
         90:ec:5a:e6:1d:32:9c:a9:0c:0c:a8:76:57:f7:84:ca:d0:32:
         50:a2:bc:4a:91:37:46:fd:83:6c:85:44:3f:77:2c:4a:be:03:
         b4:6c:49:21:15:56:73:73:80:14:ec:bd:c7:0b:c0:b3:87:28:
         98:bd:c2:39:c3:41:b7:58:3b:12:e6:f5:47:28:ea:7c:b8:ce:
         58:9b:d8:c2:92:ee:a4:c2:e8:da:28:71:9f:33:71:29:57:4a:
         77:3c:d2:f2:12:18:a0:20:ed:47:7f:9e:52:5d:90:d2:56:36:
         42:ef:ad:1c:b4:ee:d9:8c:12:f6:33:6b:f0:05:84:ce:63:2a:
         da:68:b9:4c:6b:59:dc:39:d1:95:d6:fa:49:de:b6:66:ac:39:
         ba:89:e4:ec:c8:e9:3b:24:1f:af:78:e1:f4:46:01:6e:45:1a:
         ae:6c:f0:c3:38:56:2d:23:be:6e:8c:c3:50:b1:86:13:12:4e:
         73:59:4f:a0:b1:d1:45:0b:20:44:af:94:70:de:6a:0f:fc:90:
         e6:a3:4c:3f:69:df:e8:3e:42:d1:81:52:4d:ca:9a:0a:06:68:
         53:a9:13:4d:b5:9a:25:be:18:a5:ca:14:f8:eb:b4:52:46:0c:
         16:a6:75:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----