Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a3a2f33332d3333203d3e203631363337.roa
File:                     323830343a316331383a3a2f33332d3333203d3e203631363337.roa (raw, json)
Hash identifier:          KcAZzMDg81pxoxbrGqNHtfzt7ZDINmfoG/H1CMn875s=
Subject key identifier:   E8:4C:FF:C5:EB:12:7B:23:A0:C6:EF:F1:FF:9D:3C:EA:A5:C9:F6:C6
Certificate issuer:       /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial:       43499C6B381ADBF0376294B86398C061657A2775
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a3a2f33332d3333203d3e203631363337.roa
Signing time:             Fri 23 Feb 2024 20:36:52 +0000
ROA not before:           Fri 23 Feb 2024 20:31:52 +0000
ROA not after:            Fri 21 Feb 2025 20:36:52 +0000
asID:                     61637
IP address blocks:        2804:1c18::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:49:9c:6b:38:1a:db:f0:37:62:94:b8:63:98:c0:61:65:7a:27:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Validity
            Not Before: Feb 23 20:31:52 2024 GMT
            Not After : Feb 21 20:36:52 2025 GMT
        Subject: CN=E84CFFC5EB127B23A0C6EFF1FF9D3CEAA5C9F6C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e3:e4:5c:54:9c:90:ac:4f:fc:b7:59:7d:2c:
                    42:06:dc:bc:df:17:c1:53:11:01:1d:c7:11:4b:2f:
                    a6:ee:e7:94:3d:e8:e6:90:f3:04:d9:9a:56:7f:f8:
                    f5:d2:04:12:83:cb:3b:ce:27:ba:50:49:87:d4:3a:
                    e9:9e:67:c7:d0:3d:38:0a:6e:94:54:24:4e:c5:a0:
                    0c:13:2d:3e:34:6d:0d:2a:a2:5f:71:d2:ad:47:11:
                    28:2b:57:97:41:b2:80:25:d7:51:6c:2d:07:19:a7:
                    be:46:e5:90:8f:7e:9f:b1:a6:06:68:40:04:f5:a6:
                    17:26:df:7f:37:f7:37:36:d8:09:dc:d5:f2:15:a5:
                    db:c9:8e:89:c6:89:4f:c6:0b:7f:ee:c6:13:5d:c9:
                    46:ae:f3:72:0d:be:57:4e:7e:e6:85:aa:d2:74:e5:
                    b1:4b:e7:67:2c:dd:76:3e:5c:09:2a:3a:a4:6b:89:
                    fa:e8:03:d4:25:3b:dd:1e:a7:30:7a:9e:4c:dd:ea:
                    57:91:97:6a:b5:b2:66:54:e3:b2:bb:8b:63:56:2f:
                    64:0f:d0:36:9a:8f:21:13:53:d0:f8:30:c2:8f:28:
                    b0:e7:b3:3f:eb:02:69:99:3a:f7:37:1b:08:43:5f:
                    9b:2d:ed:ce:6e:77:bf:85:b0:be:d5:7c:f7:b6:c5:
                    76:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4C:FF:C5:EB:12:7B:23:A0:C6:EF:F1:FF:9D:3C:EA:A5:C9:F6:C6
            X509v3 Authority Key Identifier:
                keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a3a2f33332d3333203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18::/33

    Signature Algorithm: sha256WithRSAEncryption
         44:76:db:52:db:56:7b:ca:99:33:16:88:1f:ba:b3:32:41:e4:
         fc:0a:4d:13:7c:4c:cd:7c:7e:04:85:0e:5b:82:93:7a:4c:f5:
         ff:83:79:73:ab:29:79:ff:6e:1c:aa:1c:ae:ef:82:dd:db:56:
         95:35:31:da:a1:30:9d:ce:5a:9b:0c:99:0e:e5:28:9c:c6:2c:
         b3:be:c2:cd:8d:f8:b7:a6:ce:c4:96:f7:3d:1e:f8:1c:76:6a:
         f0:f1:63:4f:bf:4b:98:92:45:21:66:7b:c4:f7:47:2d:35:5d:
         20:be:37:18:f1:6e:d4:bd:93:e7:8b:80:00:87:89:3f:87:ae:
         79:32:a5:d4:39:6e:5a:3d:c1:a1:80:1a:c9:93:9f:97:df:b9:
         49:fd:f7:6b:77:e4:a0:4f:7d:4e:2c:47:6b:f6:4c:d3:ca:4e:
         f7:57:b1:1b:70:31:78:30:39:8b:af:78:b1:4a:06:42:08:79:
         5f:0b:c2:9c:e5:2d:44:0e:be:92:b2:1f:a3:9d:00:66:3d:b3:
         70:49:6b:e5:87:6e:29:7b:e8:03:32:69:85:a7:e0:0f:21:71:
         5f:d5:67:7f:f3:7e:71:1b:62:3a:fd:b1:f5:e0:89:59:e9:90:
         be:a1:bc:81:01:55:2e:b8:04:f0:19:b9:b7:33:11:f9:30:71:
         f7:ff:5e:82
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQ0mcazga2/A3YpS4Y5jAYWV6J3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk1NzBBNEQ0RTI1MjYyODZFMkE3QkQ3NERCMDVBOUM4
OTJFNjk5NDAeFw0yNDAyMjMyMDMxNTJaFw0yNTAyMjEyMDM2NTJaMDMxMTAvBgNV
BAMTKEU4NENGRkM1RUIxMjdCMjNBMEM2RUZGMUZGOUQzQ0VBQTVDOUY2QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC24+RcVJyQrE/8t1l9LEIG3Lzf
F8FTEQEdxxFLL6bu55Q96OaQ8wTZmlZ/+PXSBBKDyzvOJ7pQSYfUOumeZ8fQPTgK
bpRUJE7FoAwTLT40bQ0qol9x0q1HESgrV5dBsoAl11FsLQcZp75G5ZCPfp+xpgZo
QAT1phcm33839zc22Anc1fIVpdvJjonGiU/GC3/uxhNdyUau83INvldOfuaFqtJ0
5bFL52cs3XY+XAkqOqRrifroA9QlO90epzB6nkzd6leRl2q1smZU47K7i2NWL2QP
0DaajyETU9D4MMKPKLDnsz/rAmmZOvc3GwhDX5st7c5ud7+FsL7VfPe2xXYdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU6Ez/xesSeyOgxu/x/5086qXJ9sYwHwYDVR0j
BBgwFoAUWVcKTU4lJihuKnvXTbBanIkuaZQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXNTcmY3cGZYTVA3c0Z6M3FSYzY2Y2FkUFp0SFVWd014RGlQazR2eGFk
ckYvMC81OTU3MEE0RDRFMjUyNjI4NkUyQTdCRDc0REIwNUE5Qzg5MkU2OTk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU5NTcwQTRENEUyNTI2Mjg2
RTJBN0JENzREQjA1QTlDODkyRTY5OTQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlzU3JmN3BmWE1QN3NGejNxUmM2NmNhZFBadEhVVndNeERpUGs0dnhhZHJGLzAv
MzIzODMwMzQzYTMxNjMzMTM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzYzMTM2
MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBygEHBgAMA0GCSqGSIb3DQEBCwUAA4IBAQBEdttS21Z7
ypkzFogfurMyQeT8Ck0TfEzNfH4EhQ5bgpN6TPX/g3lzqyl5/24cqhyu74Ld21aV
NTHaoTCdzlqbDJkO5SicxiyzvsLNjfi3ps7Elvc9Hvgcdmrw8WNPv0uYkkUhZnvE
90ctNV0gvjcY8W7UvZPni4AAh4k/h655MqXUOW5aPcGhgBrJk5+X37lJ/fdrd+Sg
T31OLEdr9kzTyk73V7EbcDF4MDmLr3ixSgZCCHlfC8Kc5S1EDr6Ssh+jnQBmPbNw
SWvlh24pe+gDMmmFp+APIXFf1Wd/835xG2I6/bH14IlZ6ZC+obyBAVUuuATwGbm3
MxH5MHH3/16C
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:09 2024 by rpki-client on console-fra.rpki-client.org