Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a653030303a3a2f33352d3335203d3e203631363337.roa
File:                     323830343a316331383a653030303a3a2f33352d3335203d3e203631363337.roa (raw, json)
Hash identifier:          JlLwmSkyGXT+mbIjlKnGSNcbiVpmphMnUfg3Rfx+f/E=
Subject key identifier:   44:89:4A:1F:90:B8:EB:F9:CF:57:83:E2:BA:EE:6A:4F:72:71:9F:42
Certificate issuer:       /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial:       43A3B7CBF62593A5ED76C259187C0FF5A65CFE1D
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a653030303a3a2f33352d3335203d3e203631363337.roa
Signing time:             Fri 23 Feb 2024 20:36:55 +0000
ROA not before:           Fri 23 Feb 2024 20:31:55 +0000
ROA not after:            Fri 21 Feb 2025 20:36:55 +0000
asID:                     61637
IP address blocks:        2804:1c18:e000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a3:b7:cb:f6:25:93:a5:ed:76:c2:59:18:7c:0f:f5:a6:5c:fe:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Validity
            Not Before: Feb 23 20:31:55 2024 GMT
            Not After : Feb 21 20:36:55 2025 GMT
        Subject: CN=44894A1F90B8EBF9CF5783E2BAEE6A4F72719F42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:03:e0:b1:9c:d8:1e:b3:9c:ee:aa:a1:f1:04:
                    24:fa:24:7c:c5:8a:6e:68:33:30:39:5d:11:f4:93:
                    16:07:f0:1d:e6:62:80:f2:52:0d:0d:28:09:c6:8d:
                    67:ab:4e:eb:3b:40:4e:b9:e2:46:57:4f:49:f2:66:
                    51:67:e4:e8:77:41:c8:4f:ea:2a:27:aa:b6:a6:9b:
                    a1:1d:96:54:a5:90:0a:b0:67:4e:1b:c7:5e:0d:f3:
                    bb:3e:9c:53:37:24:9a:c1:3d:7e:b5:d0:62:90:c6:
                    4f:4c:10:87:57:03:19:75:7e:1b:44:f1:b8:16:70:
                    50:44:30:fe:26:44:fe:85:bf:03:fd:d9:d8:6e:02:
                    b8:0a:f2:60:8c:5b:90:e6:2e:13:55:94:df:71:22:
                    48:32:6d:1e:ee:03:27:23:aa:fa:a7:e6:c2:d2:c1:
                    79:b6:5e:fe:85:3c:c6:f1:d8:cc:16:82:73:b8:09:
                    47:7e:55:47:43:c7:6e:6f:5e:a7:42:1f:d2:8e:2b:
                    46:18:90:14:97:d6:e4:e1:8d:74:f5:c7:4b:9e:fa:
                    de:58:d9:fa:94:15:b9:1d:81:cb:8d:e7:47:77:66:
                    c7:b7:57:85:c4:d1:74:fd:94:a8:29:44:f9:b6:06:
                    4a:d3:92:48:00:5e:23:19:cc:6b:13:3a:50:4e:91:
                    42:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:89:4A:1F:90:B8:EB:F9:CF:57:83:E2:BA:EE:6A:4F:72:71:9F:42
            X509v3 Authority Key Identifier:
                keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a653030303a3a2f33352d3335203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         9d:dd:39:c6:43:5e:17:c4:c5:55:f1:91:b3:74:53:33:7b:fb:
         84:e3:26:49:b9:b1:c5:6e:65:a2:d2:57:98:7f:ef:27:d5:60:
         b0:61:e9:23:a4:a8:11:1b:2b:ab:1d:ca:bf:50:fd:62:0a:06:
         e3:90:b5:0a:29:5f:c8:2e:dc:5e:5f:1d:88:e8:94:3b:06:83:
         62:6d:61:5b:f6:5d:a4:65:80:c3:eb:ad:59:16:76:30:62:35:
         c2:b4:2a:1a:8a:75:44:62:a2:a3:85:a7:87:3f:ae:7b:de:59:
         5f:1c:4a:35:3f:73:e4:ca:f0:de:62:b8:42:21:e9:22:70:ef:
         d3:0f:b9:e9:b5:9b:7e:8b:c2:9b:21:23:ab:6b:d7:2f:cd:1d:
         77:e2:fa:a4:e4:74:9c:4c:3f:01:4a:3e:de:16:66:44:07:ab:
         15:06:d8:78:8c:c2:c4:43:91:f7:d0:d4:5b:08:f2:b3:1a:3a:
         78:6d:65:28:46:71:13:f1:19:16:76:83:02:7f:81:64:82:1e:
         d1:a2:85:be:d9:3f:05:2b:e2:69:bd:ee:d8:08:16:42:14:73:
         0d:50:d6:91:a6:f1:e9:7e:c6:5f:f5:67:63:e8:3e:ba:0e:ae:
         b1:66:6d:1e:bb:2e:59:a4:67:5a:bb:15:57:e3:a8:d2:f9:1d:
         84:12:61:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org