Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a643030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a643030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          uXHj9hYCfp4JQW2mDFIh96g3LNXWzRSugmeDUEdUguE=
Subject key identifier:   B4:59:1D:D3:43:99:06:4D:55:DD:94:D9:8B:D0:D1:3A:EE:BB:74:C7
Certificate issuer:       /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial:       0664CFFC54C672BA462384F03F8A62D7D5E985FC
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a643030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Fri 23 Feb 2024 20:36:54 +0000
ROA not before:           Fri 23 Feb 2024 20:31:54 +0000
ROA not after:            Fri 21 Feb 2025 20:36:54 +0000
asID:                     61637
IP address blocks:        2804:1c18:d000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:64:cf:fc:54:c6:72:ba:46:23:84:f0:3f:8a:62:d7:d5:e9:85:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Validity
            Not Before: Feb 23 20:31:54 2024 GMT
            Not After : Feb 21 20:36:54 2025 GMT
        Subject: CN=B4591DD34399064D55DD94D98BD0D13AEEBB74C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5d:7a:cb:25:75:b6:1c:25:9e:3e:1d:f1:44:
                    67:2d:95:cc:1d:d3:b4:d1:a2:a6:bd:23:a2:5e:24:
                    27:8b:c2:85:d4:f4:9a:4c:bd:cd:e5:5c:e6:be:8e:
                    e2:e0:91:0d:68:a6:60:23:97:d5:9b:ae:2c:bf:d2:
                    73:94:52:77:0b:75:bd:73:5c:89:dc:c3:06:68:75:
                    80:3e:e1:ac:e9:b6:92:19:a7:c9:07:1f:79:7a:14:
                    d6:51:04:b4:de:27:ab:96:f2:e9:1d:e7:55:93:8c:
                    fc:a5:35:7d:a8:d7:5a:1a:36:51:99:73:44:58:f5:
                    02:99:55:d0:57:b1:38:6d:fe:5f:22:51:a8:48:4f:
                    e5:7c:62:9f:e1:e2:dd:97:c5:9c:bd:b8:30:b4:6d:
                    c1:52:81:b2:20:21:d5:1b:c0:96:91:af:a4:f9:93:
                    3a:50:3a:ff:59:85:95:15:e5:90:50:5d:e9:f6:2a:
                    a4:0f:ad:fd:69:ff:30:53:60:25:e0:fd:e8:d0:9a:
                    a5:bf:61:66:7d:94:41:1e:50:01:48:b9:18:72:f2:
                    56:f8:18:51:35:59:1b:ad:3f:7b:aa:1c:4d:a9:0c:
                    4e:08:0d:1b:a8:5b:e0:b7:78:9c:ef:01:70:a2:56:
                    e0:f5:b1:30:d9:7c:9f:b1:5a:00:fd:8d:52:0e:4d:
                    99:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:59:1D:D3:43:99:06:4D:55:DD:94:D9:8B:D0:D1:3A:EE:BB:74:C7
            X509v3 Authority Key Identifier:
                keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a643030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         67:fa:70:50:5d:cb:2f:5f:18:5d:52:5d:8c:34:14:06:90:c3:
         3d:6d:d4:ed:a8:c5:2e:55:de:25:2c:2c:bd:e7:77:cd:f9:71:
         a5:9d:43:bd:a6:ad:b0:23:96:08:93:28:73:39:1f:2c:fd:ff:
         e6:1f:be:64:b0:aa:ab:e1:db:d3:4c:96:ca:09:9e:0d:50:75:
         0d:e8:42:13:4e:89:d5:07:4d:df:27:05:af:bc:52:93:f7:36:
         50:44:81:8a:8f:5f:23:dd:89:f1:00:ef:16:ac:9a:44:45:b2:
         d7:45:d0:8b:e1:65:31:a4:3a:a9:56:36:fa:1e:34:66:2c:e8:
         c4:bb:8f:1a:ed:0b:dc:8b:05:72:d9:15:5a:f2:9a:12:c3:77:
         78:4f:ae:ff:05:50:c8:3e:b6:83:76:dc:93:b4:f8:82:d5:04:
         b7:f5:e2:70:1c:8c:3a:61:d0:dc:97:18:a4:28:81:c2:73:e8:
         91:4f:e7:a9:1b:94:b2:d4:46:22:c6:26:eb:b2:a6:1a:de:84:
         ef:8d:2c:bb:93:dd:06:b4:48:53:5f:3d:70:73:f8:7c:ca:5b:
         1f:40:82:dc:52:31:3f:c3:ff:e8:b5:93:68:22:5c:12:82:39:
         7b:9e:3d:fc:21:9a:6f:0c:f9:9f:e0:d3:a2:15:cb:d0:8a:a9:
         f3:50:9c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org