Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a653030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a653030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          JhMUaVVPiNT9hw6uMkTOf7HpjY4XM8YSrG4MleUB9go=
Subject key identifier:   B1:08:34:E2:36:C9:0C:3E:0F:E9:2D:65:0C:4E:DC:FC:3A:7E:C8:D1
Certificate issuer:       /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial:       37A8F53FFCC080CE2E108826006F7C01B0EE27CC
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a653030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Fri 23 Feb 2024 20:36:54 +0000
ROA not before:           Fri 23 Feb 2024 20:31:54 +0000
ROA not after:            Fri 21 Feb 2025 20:36:54 +0000
asID:                     61637
IP address blocks:        2804:1c18:e000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a8:f5:3f:fc:c0:80:ce:2e:10:88:26:00:6f:7c:01:b0:ee:27:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Validity
            Not Before: Feb 23 20:31:54 2024 GMT
            Not After : Feb 21 20:36:54 2025 GMT
        Subject: CN=B10834E236C90C3E0FE92D650C4EDCFC3A7EC8D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b5:d9:a8:4a:45:95:49:6d:a2:d2:65:8f:2a:
                    ad:20:43:f8:86:4f:c1:66:52:ec:9d:ad:30:d6:70:
                    99:9f:47:b9:43:0e:ab:76:70:d2:91:9b:9c:e3:21:
                    60:74:8a:4b:80:93:15:ce:85:ac:a9:b7:1f:2b:0c:
                    08:e8:02:f1:f8:d5:4a:91:e4:1b:c1:5c:ea:be:50:
                    4c:ea:d8:7c:7f:45:c8:2d:fe:7c:f7:6e:16:49:b9:
                    bb:01:3d:dc:41:ae:93:b2:6d:17:25:67:b2:a4:a0:
                    b1:1d:a2:dd:53:ea:a5:3d:ea:3a:96:99:d4:4c:89:
                    65:ed:4b:da:2a:13:d2:13:f0:d5:e3:15:52:d9:b8:
                    df:b2:c2:04:e1:e6:9c:60:df:6e:3a:50:b8:92:29:
                    d2:31:77:1b:8c:99:8b:c4:ab:a9:0c:bf:97:b5:93:
                    fb:7a:05:32:ba:cd:9f:e5:d0:77:ed:0b:fa:34:87:
                    46:45:9c:c1:9f:b8:c1:7f:05:04:da:22:5c:ab:8f:
                    38:b9:6a:1b:d4:90:9b:42:19:ba:82:fd:d9:10:bb:
                    a0:f4:e6:d1:77:be:c7:f3:1f:51:ad:7b:0f:0a:ee:
                    c6:35:6d:af:ed:64:3d:2e:b6:f7:18:cf:91:af:e0:
                    a9:73:28:51:57:38:2d:3f:25:90:9e:c4:81:5e:8a:
                    87:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:08:34:E2:36:C9:0C:3E:0F:E9:2D:65:0C:4E:DC:FC:3A:7E:C8:D1
            X509v3 Authority Key Identifier:
                keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a653030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         70:26:95:7c:c8:2e:e6:b2:0a:59:71:c7:4c:cb:92:b4:4b:6c:
         af:86:e2:3b:fe:2a:eb:24:95:9f:1a:62:e8:cb:ed:07:c9:bd:
         76:a8:b8:17:97:a2:37:05:6e:2b:e4:e5:b3:e7:34:74:cb:1d:
         eb:40:a3:f1:71:aa:26:aa:22:6d:14:35:7f:d8:7c:d1:bf:1d:
         49:71:dd:66:1a:10:8a:97:6b:c1:a4:e7:c2:ee:a5:5e:f0:bb:
         54:da:8b:ac:78:10:83:d1:a0:49:7b:af:6e:65:b7:d9:5c:18:
         a4:b9:35:1e:0a:e7:de:7b:ec:76:26:65:6d:b8:ad:7b:66:5c:
         60:28:b2:45:bc:96:47:9c:71:a8:07:24:a8:52:eb:d9:94:f7:
         a1:20:68:a4:7b:31:f6:41:0f:ed:10:25:55:1b:23:6d:6b:dc:
         5a:35:e5:b6:37:43:15:31:db:33:58:42:49:aa:19:91:eb:ff:
         9a:9b:6a:71:be:f0:dc:7b:2f:52:ed:6d:e4:e4:3f:f2:ed:40:
         71:96:27:91:34:5b:a5:da:53:ee:6b:36:78:e9:f2:9a:13:bc:
         81:7c:a1:7f:92:43:39:43:78:a9:2d:64:84:b2:3d:04:de:44:
         d6:f7:c4:45:e7:ba:2b:a7:dd:ec:f0:1e:bc:29:31:93:d8:71:
         72:cd:2a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org