Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a613030303a3a2f33352d3335203d3e203631363337.roa
File:                     323830343a316331383a613030303a3a2f33352d3335203d3e203631363337.roa (raw, json)
Hash identifier:          kJVp36sbK+F6lxIlB/UTMU5jXXG13u5ffDLB6uIruMA=
Subject key identifier:   CA:BE:50:BE:BB:71:8D:31:AC:EA:BD:F7:7D:C5:E2:72:75:81:FF:D6
Certificate issuer:       /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial:       3C5D3A5F7AFB758EF0271E76E37E9FE2ADF12CD7
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a613030303a3a2f33352d3335203d3e203631363337.roa
Signing time:             Fri 23 Feb 2024 20:36:52 +0000
ROA not before:           Fri 23 Feb 2024 20:31:52 +0000
ROA not after:            Fri 21 Feb 2025 20:36:52 +0000
asID:                     61637
IP address blocks:        2804:1c18:a000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5d:3a:5f:7a:fb:75:8e:f0:27:1e:76:e3:7e:9f:e2:ad:f1:2c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Validity
            Not Before: Feb 23 20:31:52 2024 GMT
            Not After : Feb 21 20:36:52 2025 GMT
        Subject: CN=CABE50BEBB718D31ACEABDF77DC5E2727581FFD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d5:b1:0d:6c:2f:6f:dd:eb:66:34:1d:79:66:
                    c7:6e:6b:45:9e:b5:9e:56:fd:0d:e5:5d:2a:f7:e7:
                    23:0e:9e:e0:1a:ff:cb:11:eb:ef:a1:32:ac:ee:25:
                    2b:1f:e5:be:60:27:07:c6:fe:12:4d:e6:29:7a:cb:
                    15:29:d5:36:35:c6:cb:9c:79:b8:40:9a:36:7c:10:
                    a2:d7:83:5c:86:a7:fe:e9:f9:7b:84:6a:dd:1a:6c:
                    d0:c4:9f:e5:2f:d1:87:12:28:18:30:4c:79:72:3d:
                    eb:8d:59:77:5f:e9:09:d2:ee:61:76:71:12:5e:cc:
                    7a:14:31:b1:2f:dc:1a:37:a6:73:d8:8a:b6:3b:53:
                    87:4c:46:88:b0:3c:d8:7a:96:87:2b:f6:f9:13:08:
                    5c:a6:08:f5:64:63:b0:00:08:fa:49:aa:b0:20:58:
                    31:07:de:3b:23:80:82:8f:c6:e7:e2:e8:bd:be:62:
                    ab:94:e0:49:ff:64:68:b8:84:0e:4c:dc:7f:4a:7a:
                    43:f2:05:ee:9f:9c:87:0b:37:75:32:1d:17:51:82:
                    d4:c2:50:65:e3:27:ea:06:7e:41:d2:fc:a2:40:ae:
                    16:81:f5:eb:7e:85:4f:5a:14:d9:29:5d:3d:34:c0:
                    14:55:de:ff:96:91:83:2b:18:12:90:c5:0b:50:4a:
                    37:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BE:50:BE:BB:71:8D:31:AC:EA:BD:F7:7D:C5:E2:72:75:81:FF:D6
            X509v3 Authority Key Identifier:
                keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a613030303a3a2f33352d3335203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         a0:ef:b0:48:4b:a9:10:e8:00:10:ee:bd:2d:54:77:28:ab:6f:
         32:6a:47:ff:30:8c:4c:9e:9f:83:96:5c:36:8d:8e:de:29:6e:
         fe:f9:48:10:d2:21:c0:41:2f:2b:e4:b5:77:a9:ae:9b:5f:ef:
         a1:68:94:f1:91:4b:37:10:69:a9:9c:0c:52:99:e6:1e:d4:11:
         60:62:eb:ba:50:c8:eb:6d:21:e4:20:99:28:2c:c7:2d:0b:66:
         2c:fa:f1:97:8a:68:5e:22:3d:ee:5b:2f:b8:c9:22:bc:0a:0f:
         30:b3:65:e5:67:fc:10:86:f0:d7:62:38:63:26:bf:82:db:59:
         5d:df:19:b3:26:75:8f:7a:64:1b:43:78:37:a4:c3:78:fd:38:
         53:8c:69:b8:30:16:ff:70:8c:6a:17:e0:2d:ca:f2:28:12:56:
         4d:d7:f1:60:bb:11:08:16:d1:f9:7c:ec:c8:95:da:d5:d3:5d:
         fd:89:78:48:0d:21:97:ed:c3:61:fd:c5:f8:83:6d:ac:76:7f:
         60:4a:0e:6f:de:e5:3d:3f:3d:60:76:d3:bd:a8:76:44:77:ad:
         2c:6e:69:7e:24:68:b6:bf:2a:b8:0e:58:05:c8:d0:bc:f9:b4:
         ac:53:5a:aa:ba:38:14:ad:8f:d1:1f:16:7c:0e:60:d7:0e:12:
         d3:24:61:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:09 2024 by rpki-client on console-fra.rpki-client.org