Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a383030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a383030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          H7yMw29H7+Nv9Iv6hevWsSxN7KU7k3YTFMq8S6N5ABY=
Subject key identifier:   49:E5:DB:95:5A:69:5B:0C:3A:7B:22:27:8B:6D:3F:66:99:70:5E:AC
Certificate issuer:       /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial:       6D99EB4D920662487E16D4FE91FD739ECFF28E74
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a383030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Fri 23 Feb 2024 20:36:53 +0000
ROA not before:           Fri 23 Feb 2024 20:31:53 +0000
ROA not after:            Fri 21 Feb 2025 20:36:53 +0000
asID:                     61637
IP address blocks:        2804:1c18:8000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:99:eb:4d:92:06:62:48:7e:16:d4:fe:91:fd:73:9e:cf:f2:8e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Validity
            Not Before: Feb 23 20:31:53 2024 GMT
            Not After : Feb 21 20:36:53 2025 GMT
        Subject: CN=49E5DB955A695B0C3A7B22278B6D3F6699705EAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:95:dc:1a:e8:c5:02:bf:46:29:20:21:74:96:
                    9a:81:34:85:f4:ca:f4:14:56:0e:3b:b0:c2:1b:85:
                    ec:bb:9c:4c:31:a5:25:e6:fd:1b:d6:ea:21:a2:ed:
                    2d:20:a3:a8:b2:4a:08:da:19:d1:eb:08:c5:58:60:
                    e1:b5:75:cd:cb:d6:d9:3b:f3:c6:ba:2c:fb:54:97:
                    69:21:3b:a6:52:06:81:8a:49:40:42:66:a3:b8:6d:
                    9d:f3:ee:4a:78:87:6e:75:d7:a9:c5:76:99:e4:93:
                    c8:b5:27:40:ad:21:46:ac:03:a5:55:6b:95:55:3b:
                    cf:d0:db:5a:89:c1:d6:92:55:21:c8:38:e2:d7:4b:
                    62:0a:ca:76:18:11:24:84:14:d9:2a:fa:c8:ce:29:
                    cd:ff:46:ab:61:b3:49:a9:0f:e3:a4:1b:be:ba:af:
                    8a:37:78:2a:12:c0:ab:bd:b9:e5:78:31:8c:0b:5c:
                    14:45:b2:75:f9:50:38:d8:5d:8a:ba:1c:a1:2a:0c:
                    f2:99:0e:72:b2:27:9f:93:80:a1:5b:51:f0:c0:70:
                    34:3d:ce:25:bd:f5:dc:4f:94:33:fb:07:6e:ae:a9:
                    c5:7a:13:2e:87:51:b0:69:58:27:3e:38:f2:65:5b:
                    06:7b:c9:b5:3c:49:c0:7b:35:ab:28:a2:d9:24:42:
                    e2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E5:DB:95:5A:69:5B:0C:3A:7B:22:27:8B:6D:3F:66:99:70:5E:AC
            X509v3 Authority Key Identifier:
                keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a383030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         30:fa:a0:d4:c0:fe:95:cf:f6:c4:39:20:3d:f8:b1:fe:50:ea:
         01:a5:bf:2f:00:db:56:e8:03:a7:4b:88:f3:c9:b6:03:94:2d:
         89:6e:1c:ca:c9:87:af:3f:c3:be:5e:11:7d:a2:e9:b6:74:d1:
         03:4d:2f:89:ac:ea:7d:82:9b:bc:d6:b4:e8:76:83:75:8c:55:
         bc:b5:92:59:8f:95:30:50:ad:28:aa:1b:23:41:0f:01:0c:ce:
         eb:4b:25:33:32:c0:62:f3:90:6e:37:12:de:22:a4:1b:80:6b:
         60:02:16:5f:2d:e0:bb:f3:b0:e5:4d:92:ed:6b:23:78:2f:d9:
         5e:03:1f:cf:d9:d7:87:de:ce:6a:1b:08:9f:fe:5b:ef:02:f8:
         d8:9a:e8:39:3e:1a:0a:1e:eb:95:d8:6d:9c:95:77:b3:30:4e:
         ac:be:bd:a2:07:d9:63:b6:b3:c5:66:af:fd:bd:61:75:a8:10:
         ce:c3:93:54:42:6b:a1:40:dd:44:48:11:13:b8:9a:bd:05:a3:
         08:f2:53:db:73:7b:71:c3:83:97:a8:9c:a4:46:ec:06:30:de:
         10:43:55:f9:a6:66:5a:25:0b:bb:8b:b0:6a:6c:bc:e6:d8:7b:
         6a:73:03:c9:c7:20:7f:0c:5b:6c:6f:9c:ba:b8:25:3a:be:20:
         65:10:48:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org