Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a383030303a3a2f33342d3334203d3e203631363337.roa
File:                     323830343a316331383a383030303a3a2f33342d3334203d3e203631363337.roa (raw, json)
Hash identifier:          Tg7eNAx25jaARSwDLJlGGpP2rFq2zvjfvWsFJbhQqmo=
Subject key identifier:   5F:CB:A3:A5:9C:A4:BE:0C:53:5F:D8:64:EF:8B:3F:AD:65:99:68:B4
Certificate issuer:       /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial:       07E67D9B3048FEF3711A26A78BEF8C5F3BFD0811
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a383030303a3a2f33342d3334203d3e203631363337.roa
Signing time:             Fri 23 Feb 2024 20:36:52 +0000
ROA not before:           Fri 23 Feb 2024 20:31:52 +0000
ROA not after:            Fri 21 Feb 2025 20:36:52 +0000
asID:                     61637
IP address blocks:        2804:1c18:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:e6:7d:9b:30:48:fe:f3:71:1a:26:a7:8b:ef:8c:5f:3b:fd:08:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Validity
            Not Before: Feb 23 20:31:52 2024 GMT
            Not After : Feb 21 20:36:52 2025 GMT
        Subject: CN=5FCBA3A59CA4BE0C535FD864EF8B3FAD659968B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:51:66:23:38:c3:34:01:c8:3b:6c:67:e8:bd:
                    db:3b:d9:53:20:a0:b3:b3:b9:ab:fd:d8:fd:e5:3a:
                    b3:c9:43:97:99:8e:f4:ad:ba:8e:eb:e7:02:b4:21:
                    a3:92:9e:6b:e1:c5:4b:89:32:ad:16:b0:4c:45:64:
                    d6:3f:21:61:bd:11:20:c2:15:1e:f4:81:4d:6f:bd:
                    12:f3:f0:1f:6d:3c:7d:29:78:a5:2e:5f:0e:e5:8e:
                    ec:f3:64:27:2f:49:3e:42:2c:01:4b:a9:fe:1e:88:
                    e9:a7:54:f6:2e:72:82:2b:03:78:86:23:a3:16:3e:
                    21:33:31:c7:c6:eb:d9:d0:18:72:9c:2c:d6:0b:f9:
                    2e:b7:a7:0a:cd:07:ac:71:ed:8c:c1:ae:48:fb:21:
                    02:12:01:36:59:d2:d0:85:20:0a:92:cd:d0:89:0a:
                    ed:8c:23:d3:03:b2:71:b2:e8:79:a2:75:b8:cf:e3:
                    36:45:fc:9d:99:2a:a7:cf:83:8c:b7:3e:9f:d9:e0:
                    69:c9:50:4f:2b:a8:f2:f1:07:9c:f5:0b:3c:03:9f:
                    e0:90:02:be:90:7b:7a:e3:1f:91:0d:c0:59:31:40:
                    6c:c5:0b:f8:df:24:84:67:63:81:b3:2b:36:04:89:
                    c1:d3:a7:7f:0f:d7:d9:0f:ce:ba:0f:a0:5b:51:0f:
                    ce:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CB:A3:A5:9C:A4:BE:0C:53:5F:D8:64:EF:8B:3F:AD:65:99:68:B4
            X509v3 Authority Key Identifier:
                keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a383030303a3a2f33342d3334203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7a:71:23:47:db:0a:8a:53:68:8e:ca:d7:85:b8:ac:94:b6:56:
         4b:65:cb:7e:5a:fc:2b:bf:43:f7:ed:e6:7e:42:54:e7:5b:0c:
         20:2b:8b:42:ad:4c:8a:cd:36:5b:0e:fe:99:f0:e1:95:e0:eb:
         cd:b2:7c:b7:cb:8d:0a:91:e5:02:95:34:44:87:02:1e:bf:b3:
         4a:e3:bd:5f:bc:53:8a:2a:77:32:cf:ba:39:43:1c:1a:e7:b9:
         cd:57:1c:00:5f:51:1b:a4:3b:b0:41:e8:78:1c:e3:41:86:2c:
         a9:75:13:fe:d4:44:94:a8:d9:57:6f:dc:30:e8:1d:d4:00:c3:
         a1:82:12:4f:35:92:42:47:45:e2:66:c2:9c:b1:bc:d9:cc:a4:
         76:ad:b9:7a:4a:88:a5:4f:cd:8c:be:b6:a5:61:ba:2f:4e:40:
         f7:ac:98:cd:ca:f9:48:57:ce:4a:8a:fd:22:3b:c4:24:2a:48:
         0d:4b:c8:e8:31:b4:d7:1a:a2:ed:13:cf:01:7e:40:55:01:ee:
         bb:4f:8c:84:0f:94:bd:34:e7:d1:87:8d:fd:fd:50:1b:c0:a5:
         af:25:56:1a:1e:26:50:69:c0:99:64:7e:8d:62:56:e7:28:30:
         b2:f8:c7:99:6e:55:2c:e8:a3:0f:c3:84:fb:08:1b:0f:83:4d:
         32:f6:78:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org