Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a383030303a3a2f33352d3335203d3e203631363337.roa
File:                     323830343a316331383a383030303a3a2f33352d3335203d3e203631363337.roa (raw, json)
Hash identifier:          l9QUNrP6T0f/G1JnxSDEr3K/HDDbtVym4kqYYpPm1mE=
Subject key identifier:   0B:59:F9:6F:4E:27:94:95:45:9E:39:7D:9A:7C:95:90:B9:8F:F3:90
Certificate issuer:       /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial:       6A18E93F6D6E39940CE75E4496848D15057F593A
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a383030303a3a2f33352d3335203d3e203631363337.roa
Signing time:             Fri 23 Feb 2024 20:36:54 +0000
ROA not before:           Fri 23 Feb 2024 20:31:54 +0000
ROA not after:            Fri 21 Feb 2025 20:36:54 +0000
asID:                     61637
IP address blocks:        2804:1c18:8000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:18:e9:3f:6d:6e:39:94:0c:e7:5e:44:96:84:8d:15:05:7f:59:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Validity
            Not Before: Feb 23 20:31:54 2024 GMT
            Not After : Feb 21 20:36:54 2025 GMT
        Subject: CN=0B59F96F4E279495459E397D9A7C9590B98FF390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:87:bf:82:3e:8c:ba:a8:62:6e:f1:37:1d:4e:
                    22:22:25:10:c9:7d:c7:5d:68:f8:73:e5:cc:ef:f2:
                    b7:20:d7:27:bd:3b:ea:de:65:1b:38:3f:6d:ec:48:
                    02:85:12:b8:42:61:39:05:cb:4a:25:8b:5e:51:dc:
                    92:10:69:e8:ab:2f:38:19:d4:9c:95:d9:77:32:da:
                    8d:5c:a3:c9:ed:a8:6a:68:5f:ee:13:ba:c7:67:a7:
                    4f:e3:63:cc:30:da:f4:9f:03:11:3b:88:3b:5f:59:
                    0e:a2:e8:bd:71:58:48:87:f0:4c:e0:3a:1a:18:4b:
                    a3:22:74:11:b2:89:d0:28:d9:1b:d5:64:ca:21:d5:
                    47:bc:0a:74:91:e1:66:0a:16:98:63:6c:d4:7f:43:
                    4e:f5:f6:a1:fd:44:12:04:5e:c9:67:70:c0:e0:d5:
                    84:8e:9c:11:f5:f0:6c:2d:0d:f3:d4:19:55:88:5f:
                    81:22:c6:c0:5a:04:d7:05:48:f0:09:92:ff:2c:9c:
                    af:d7:9d:0a:d7:41:07:98:2f:f1:c2:9e:29:31:40:
                    53:13:65:d7:01:77:59:f5:ab:d2:dc:0b:6b:ea:a0:
                    14:db:93:13:73:9e:b4:3f:27:a1:ed:38:05:40:39:
                    d5:07:17:df:54:09:d0:d4:6a:cd:af:67:b1:1d:e7:
                    44:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:59:F9:6F:4E:27:94:95:45:9E:39:7D:9A:7C:95:90:B9:8F:F3:90
            X509v3 Authority Key Identifier:
                keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a383030303a3a2f33352d3335203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         36:e3:a2:0a:71:c0:16:0e:bb:41:52:f8:82:d2:93:54:76:6f:
         8e:7f:87:ac:89:41:1f:62:6a:79:90:c3:ad:39:db:40:12:ef:
         75:50:99:34:75:96:5f:d9:cc:20:23:12:c7:6a:7e:60:7e:4b:
         16:58:7d:23:05:68:aa:8e:47:11:64:15:c6:0a:a8:d1:ee:8a:
         6a:2d:37:a5:f4:c1:e0:ce:f6:ce:94:b3:bd:cf:48:50:9c:22:
         d3:f1:df:42:4e:fe:71:40:ec:4a:dc:0a:19:af:39:41:5e:5f:
         5e:0f:3d:4b:db:84:34:91:65:5e:af:00:0b:f1:e4:1c:1e:07:
         4e:88:68:d8:37:8b:b3:eb:21:d8:1e:e7:9f:aa:e1:2b:a8:a8:
         54:b3:1c:f6:a8:96:36:38:aa:94:d4:38:4b:bf:e6:7f:3e:ff:
         0d:76:99:93:b5:cf:b8:ad:32:5c:38:bb:7e:76:e1:4b:5b:15:
         99:d9:c4:d0:96:f0:24:38:41:b0:ca:95:f1:c9:37:04:94:5e:
         0b:40:1c:7c:71:5d:cf:0a:91:a9:96:c2:49:dc:e2:5e:dd:d2:
         2f:fd:8a:25:56:ec:d8:c6:00:be:db:8d:82:43:9e:fd:b4:b3:
         85:f5:fd:09:f9:21:a1:ec:87:0b:66:5c:ba:c8:fc:c7:58:ac:
         36:be:c0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org