Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a623030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a623030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          cfvxLbs+wGo3m6Kt8FRwfC1Jx+RDw3Iv2HrGJ+xIPVE=
Subject key identifier:   BB:02:8C:2B:22:78:A9:CA:34:69:9C:B7:FE:26:2C:E5:FE:4D:43:32
Certificate issuer:       /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial:       250FFD177F889BA3DFF9728A2818B368A23F9914
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a623030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Fri 23 Feb 2024 20:36:54 +0000
ROA not before:           Fri 23 Feb 2024 20:31:54 +0000
ROA not after:            Fri 21 Feb 2025 20:36:54 +0000
asID:                     61637
IP address blocks:        2804:1c18:b000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0f:fd:17:7f:88:9b:a3:df:f9:72:8a:28:18:b3:68:a2:3f:99:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Validity
            Not Before: Feb 23 20:31:54 2024 GMT
            Not After : Feb 21 20:36:54 2025 GMT
        Subject: CN=BB028C2B2278A9CA34699CB7FE262CE5FE4D4332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c7:b4:e8:66:12:5f:f2:63:43:41:57:0d:6e:
                    dc:10:61:85:87:dd:57:4d:8f:25:c5:d6:5b:d4:5f:
                    7e:f7:a1:b1:ec:fd:b2:33:d8:3f:a9:04:bd:2d:bb:
                    ee:03:22:b9:7f:c5:e2:ec:91:99:7b:06:03:b8:f4:
                    4a:3e:1b:4e:a6:81:7e:7e:fa:44:5a:52:5c:db:33:
                    08:0b:72:e9:fb:1f:f5:57:c1:c1:ba:e5:d1:43:dc:
                    5c:80:ab:4a:34:8d:ff:db:f3:b8:15:35:72:40:51:
                    6a:f2:3d:a5:06:e4:96:cf:61:da:2d:2a:15:fb:e6:
                    10:83:66:ee:cc:8d:2d:a3:30:39:8c:59:ea:ab:e2:
                    f8:0a:aa:f8:f7:11:9e:cb:9d:29:59:2b:77:d5:86:
                    b9:f9:4d:9b:14:4b:19:2f:97:3e:de:75:8f:8e:d5:
                    b7:eb:30:2b:3a:69:32:00:73:04:5e:50:a1:f1:84:
                    38:9b:2e:41:17:21:ba:80:ff:36:c4:46:15:18:99:
                    7c:3e:66:12:5c:45:f2:d0:79:51:c4:92:47:08:c9:
                    ed:8f:f5:1b:c6:0b:a4:4a:6d:5e:3c:9a:75:2b:a5:
                    f1:1e:7b:64:b7:d5:83:7f:36:cc:59:d9:2a:aa:95:
                    30:0b:9d:64:69:5b:02:ed:fb:a2:16:15:56:20:a7:
                    2b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:02:8C:2B:22:78:A9:CA:34:69:9C:B7:FE:26:2C:E5:FE:4D:43:32
            X509v3 Authority Key Identifier:
                keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a623030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         58:a0:7c:dd:f3:f4:7c:ee:6c:4b:50:24:88:1c:af:6d:9a:11:
         74:25:ea:8f:d4:7c:e4:79:84:f5:c4:58:ec:ff:ca:f2:9b:2b:
         44:a4:d4:5d:41:bf:e6:b8:99:0a:71:25:4c:e0:cb:3b:9a:ad:
         03:96:1e:3e:ae:39:b3:86:ac:3f:8f:92:dc:3f:c7:cc:e7:a4:
         50:a9:39:ed:1a:a4:65:a5:16:77:a8:33:d9:47:d5:77:be:42:
         fb:d5:4b:25:06:c5:93:d7:40:7b:86:87:cc:25:cb:99:70:79:
         4e:cf:33:b0:2a:60:b1:62:fe:2e:76:c3:cb:65:92:15:26:f7:
         ef:33:1e:42:9a:9a:92:9a:01:59:7f:81:55:e6:3e:7b:2f:cb:
         fe:a3:14:ba:a1:94:97:6e:a3:b7:3e:50:82:7a:42:c6:ba:b8:
         4a:90:e6:7a:73:cf:66:64:b3:f6:1b:5b:bf:46:6f:f8:0d:84:
         7c:09:70:99:7f:58:11:2f:b2:96:a1:24:73:56:c3:30:53:08:
         a9:a7:70:21:d2:91:2c:1e:f0:a4:34:7b:32:a9:55:47:14:ac:
         69:33:2f:ea:73:99:21:f9:a6:20:67:f1:21:21:db:e1:91:e9:
         df:e7:7e:00:77:16:c5:44:7d:14:04:8e:90:aa:dd:5b:03:c0:
         24:28:cb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org