Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a393030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a393030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          J0lBhj5QTgv1b0PtB4KpjxCoFwKZ7boRLlIfW2YM20o=
Subject key identifier:   45:FF:3B:F3:CD:8B:E8:ED:6F:16:BB:A9:15:58:E7:A6:BF:B8:19:86
Certificate issuer:       /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial:       1B88DA60F19B91620D2A93FBBA182FD860852F16
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a393030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Fri 23 Feb 2024 20:36:51 +0000
ROA not before:           Fri 23 Feb 2024 20:31:51 +0000
ROA not after:            Fri 21 Feb 2025 20:36:51 +0000
asID:                     61637
IP address blocks:        2804:1c18:9000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:88:da:60:f1:9b:91:62:0d:2a:93:fb:ba:18:2f:d8:60:85:2f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Validity
            Not Before: Feb 23 20:31:51 2024 GMT
            Not After : Feb 21 20:36:51 2025 GMT
        Subject: CN=45FF3BF3CD8BE8ED6F16BBA91558E7A6BFB81986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:62:9e:3f:9a:08:a4:4e:9e:2c:60:78:3d:ae:
                    06:4b:a3:a6:84:34:c0:e7:68:dd:f4:78:62:d6:1f:
                    80:14:38:96:46:8c:ce:af:c7:8e:47:b0:3c:6f:43:
                    e5:31:ed:8c:a8:39:dc:26:67:7c:99:77:86:6f:49:
                    71:9f:3c:f5:f0:3e:16:87:fb:20:11:45:9e:71:7b:
                    b9:25:0a:9f:43:44:8a:84:60:73:d8:68:ef:85:3d:
                    5f:8f:76:b2:ab:e2:90:68:85:7a:2d:68:1b:af:52:
                    9d:0d:a9:69:e9:64:1e:1f:e0:29:ef:40:bf:c7:9e:
                    61:10:d3:27:d2:c0:77:51:f2:35:ef:60:46:c8:e8:
                    38:eb:5c:f8:26:4d:5d:19:d0:66:e7:36:55:38:f1:
                    e5:6b:68:2d:74:7e:62:30:18:62:d7:21:9c:11:19:
                    db:61:57:7b:38:12:c3:04:17:5f:07:36:69:9f:a2:
                    18:25:50:a1:45:21:bb:27:ae:6b:ac:fe:de:91:da:
                    b2:c5:09:99:bf:01:6a:a0:68:18:d4:49:9b:01:25:
                    6f:36:c8:cd:55:89:d5:dd:72:53:b3:44:cc:f5:13:
                    48:f0:d6:aa:97:74:c9:21:19:9d:df:a5:5b:10:0a:
                    2c:8e:9f:ae:9c:56:4b:bd:2b:eb:1b:47:5f:30:85:
                    a6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FF:3B:F3:CD:8B:E8:ED:6F:16:BB:A9:15:58:E7:A6:BF:B8:19:86
            X509v3 Authority Key Identifier:
                keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a393030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         75:9b:7c:b1:11:d4:e0:9e:61:71:e4:e2:93:92:4e:6f:d9:12:
         d3:ab:cb:b5:09:56:b9:dd:d9:e5:2a:84:65:14:e1:d3:cf:c0:
         87:b1:ae:5c:ab:a8:d7:9f:2d:4a:be:92:54:f5:71:74:47:ef:
         0b:bf:a2:1e:a4:b3:6a:7c:31:61:fe:f5:9f:65:86:c9:33:31:
         a3:ae:45:9c:23:74:bd:a3:00:4e:5e:05:62:82:00:c6:a2:2d:
         51:82:95:de:d0:fc:65:0e:83:ee:e9:da:35:53:03:d3:07:fa:
         f6:1b:86:c0:66:49:2c:8f:af:8e:0f:ee:9d:99:6e:a5:00:c4:
         ef:fc:2c:78:90:9a:53:eb:91:03:5c:58:05:d0:4f:43:af:11:
         dc:22:7c:3c:a5:7d:ac:3b:61:d3:7f:68:32:ff:ca:86:b2:fb:
         fd:19:14:03:92:80:38:af:6d:4c:84:93:87:c3:4d:49:e5:e5:
         13:ca:06:16:c4:5a:dc:53:0d:0d:29:7c:95:83:72:b2:1d:e9:
         36:0d:37:fe:52:c7:65:b0:31:a7:89:77:d1:6c:86:b7:1c:77:
         f2:73:07:fa:ce:ba:b4:96:c1:1f:af:4a:51:bc:86:e2:fd:03:
         2a:ae:13:72:1b:7b:76:c7:95:09:77:48:c6:aa:ea:94:24:40:
         97:f6:3c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org