Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a633030303a3a2f33342d3334203d3e203631363337.roa
File:                     323830343a316331383a633030303a3a2f33342d3334203d3e203631363337.roa (raw, json)
Hash identifier:          0RPB+QYGsu2/cCvGBsnftGOWMmgCFAzfGZWqReTNgsk=
Subject key identifier:   8E:59:8C:B7:D3:CA:96:C2:1B:CF:8E:E5:12:61:69:55:4A:09:09:D7
Certificate issuer:       /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial:       20276BE0653F4D969ED884ED7D403836FBB75606
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a633030303a3a2f33342d3334203d3e203631363337.roa
Signing time:             Fri 23 Feb 2024 20:36:55 +0000
ROA not before:           Fri 23 Feb 2024 20:31:55 +0000
ROA not after:            Fri 21 Feb 2025 20:36:55 +0000
asID:                     61637
IP address blocks:        2804:1c18:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:27:6b:e0:65:3f:4d:96:9e:d8:84:ed:7d:40:38:36:fb:b7:56:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Validity
            Not Before: Feb 23 20:31:55 2024 GMT
            Not After : Feb 21 20:36:55 2025 GMT
        Subject: CN=8E598CB7D3CA96C21BCF8EE5126169554A0909D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f3:d0:52:2e:22:59:7f:70:41:32:83:35:04:
                    09:cf:52:79:d4:99:41:be:f8:d6:c2:ca:87:1c:58:
                    5a:b7:77:7b:03:f1:e7:2a:be:e8:cb:5d:c6:82:f9:
                    0a:c5:c9:07:1e:5e:43:21:6c:e5:94:6b:c8:d1:37:
                    55:d4:32:c2:d2:e8:73:d8:ca:bb:94:7c:e3:bc:0c:
                    09:14:f6:ec:dd:46:61:c4:0e:07:0d:2b:83:ba:80:
                    1b:7b:ce:81:aa:4c:e9:06:b9:2b:55:db:56:b0:e3:
                    67:f1:25:70:9a:3d:90:78:85:20:bd:80:7e:81:c6:
                    b2:8d:a5:dc:45:d8:10:f8:14:a4:b9:38:6e:07:0b:
                    41:7d:6f:15:95:c3:d4:12:c0:33:47:67:d7:d9:e6:
                    15:d4:5d:90:98:92:5b:22:67:57:a4:cd:ea:71:06:
                    b1:e6:ba:14:07:ed:65:53:4e:ec:98:92:cc:d3:90:
                    db:df:d4:ff:ef:97:be:3a:f4:81:32:5a:1d:6a:c7:
                    c1:70:a1:60:11:01:5c:d7:5b:0d:da:09:8c:db:34:
                    26:01:97:31:7d:52:d3:a9:a6:cb:5d:2f:99:72:60:
                    a2:3d:cb:61:c8:99:48:79:12:4a:90:82:a6:de:3b:
                    bc:9a:2f:4c:56:73:88:7c:26:ad:6f:08:0e:60:34:
                    4e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:59:8C:B7:D3:CA:96:C2:1B:CF:8E:E5:12:61:69:55:4A:09:09:D7
            X509v3 Authority Key Identifier:
                keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a633030303a3a2f33342d3334203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8c:90:d7:cb:9f:a5:c7:84:f1:a8:9a:e9:ad:6e:a6:98:ac:a0:
         7c:ce:e4:f4:be:7a:ad:28:05:fe:49:b0:26:da:b3:3b:80:35:
         91:58:2d:df:02:83:9c:a8:06:2f:5d:0a:f0:71:ca:a6:95:d0:
         22:9f:be:86:32:dd:be:65:61:38:4d:11:b8:c3:44:ce:0f:e7:
         58:30:59:52:50:9e:16:04:8b:bc:0f:53:c4:67:e9:7b:bd:f8:
         bd:16:a8:17:1d:96:67:2e:bd:a7:dc:07:d5:fb:9f:38:15:ef:
         78:ad:1f:78:de:e2:68:2e:38:60:45:b4:19:65:4a:ef:c4:2b:
         3a:9d:da:f8:6b:3f:88:82:3c:49:a5:99:81:a1:56:ed:30:56:
         5e:5a:1a:20:8a:7e:20:c2:6f:ea:92:f8:57:a2:40:9b:0b:2b:
         20:3b:30:41:15:4f:4c:99:96:fa:b0:0f:1b:a7:e3:0c:91:27:
         56:0e:d4:ed:30:7d:0e:61:53:e5:44:5a:bf:8f:10:60:f9:61:
         bb:84:9f:1a:1c:9d:6c:7c:77:7e:90:74:a1:d7:ad:ab:5d:1f:
         0f:31:01:53:29:40:4b:9b:d7:1b:5b:c0:de:0e:9b:3c:b1:38:
         3a:cf:da:97:9e:c3:90:b7:53:88:9e:7c:1f:77:19:b4:be:38:
         cf:16:33:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:09 2024 by rpki-client on console-fra.rpki-client.org