Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a663030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a663030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          oAUggoHOMb5hm7FDmNG2y9cMFLLMNcQnWssGg0l0Mz4=
Subject key identifier:   34:5B:24:E5:39:3A:94:80:08:1B:CB:4A:02:C4:01:31:18:53:81:3E
Certificate issuer:       /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial:       3F765EA0116829F5E843E8BB3A7B2324B2FAA36D
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a663030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Fri 23 Feb 2024 20:36:52 +0000
ROA not before:           Fri 23 Feb 2024 20:31:52 +0000
ROA not after:            Fri 21 Feb 2025 20:36:52 +0000
asID:                     61637
IP address blocks:        2804:1c18:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:76:5e:a0:11:68:29:f5:e8:43:e8:bb:3a:7b:23:24:b2:fa:a3:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Validity
            Not Before: Feb 23 20:31:52 2024 GMT
            Not After : Feb 21 20:36:52 2025 GMT
        Subject: CN=345B24E5393A9480081BCB4A02C401311853813E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:12:b8:9c:fa:b8:8c:f8:54:bc:39:34:ba:ad:
                    ea:bf:05:12:58:b6:d2:e6:02:6a:b8:c6:d5:da:b2:
                    ac:9f:37:09:cd:a3:b3:34:98:7f:ad:56:d0:2c:d0:
                    c6:f2:db:51:11:1c:7c:ea:0b:1d:30:87:56:71:9e:
                    76:3e:24:80:e9:f1:56:5e:79:17:18:f5:5e:c7:19:
                    a8:f9:15:49:f8:24:1b:2f:37:64:d2:93:46:bf:05:
                    44:78:d5:fe:fb:6c:02:c6:0c:0b:1a:00:f2:ab:4a:
                    3f:cc:69:bb:2f:ed:ce:3e:78:14:59:1f:29:a9:0a:
                    9d:88:ca:09:b1:21:be:9e:e9:2a:fe:a2:85:d3:f7:
                    02:5e:be:f5:aa:f7:f8:a3:14:9f:bd:77:92:b8:98:
                    ff:40:56:bd:38:a2:72:8c:24:08:37:30:a8:8b:cb:
                    68:22:1b:3a:1a:a1:6b:24:fe:eb:8d:47:a9:07:14:
                    89:98:f6:f3:7a:f3:3c:89:da:b5:95:b2:9f:7e:d0:
                    68:c5:97:6b:05:9e:df:51:fc:5b:ef:df:68:13:8b:
                    b9:26:5e:9e:14:a1:7e:fc:c8:5e:42:c2:b3:72:b6:
                    13:f5:97:91:eb:c5:9e:69:72:ef:cb:a3:f6:a2:4d:
                    6b:cb:ed:24:d8:b1:a3:32:8c:ab:17:ee:70:fb:ce:
                    39:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5B:24:E5:39:3A:94:80:08:1B:CB:4A:02:C4:01:31:18:53:81:3E
            X509v3 Authority Key Identifier:
                keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/323830343a316331383a663030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7e:59:67:d2:eb:10:70:9d:6c:e4:cb:75:41:b6:82:a4:ec:09:
         d5:a8:bf:e4:8f:6d:8f:fb:64:c6:ad:d4:25:1b:dd:b0:b2:85:
         b2:fb:74:ef:3a:fe:71:9e:ec:3b:d5:27:6d:77:3b:9f:fb:3a:
         df:e3:a6:b0:dc:eb:ed:aa:c4:54:db:1a:5f:82:ee:c4:5a:b9:
         80:19:ed:cc:00:ba:f0:11:eb:75:29:12:b4:66:8b:ca:a8:27:
         18:87:62:ce:06:ab:f2:d5:10:f3:40:c8:0d:c5:2b:9e:85:df:
         af:a7:e0:78:19:85:a9:74:8b:16:4c:c8:f4:32:7a:4b:63:42:
         0b:1c:d9:05:78:c5:79:57:26:11:44:b6:f3:57:61:e9:51:3b:
         4f:d1:60:33:1d:48:7f:56:80:4c:b4:28:b6:da:06:26:b7:1c:
         7f:e2:4c:2e:84:12:91:98:c4:36:c3:bf:d8:53:b6:2c:10:ea:
         fa:7b:24:ee:49:40:b9:f0:6e:16:a1:ca:d6:45:3f:14:1e:70:
         fa:20:45:58:9a:76:27:4b:c3:72:cd:77:b9:8c:9b:a9:da:62:
         77:6e:91:b7:60:8a:1e:38:4d:ed:39:42:6f:85:70:e4:25:02:
         42:fb:c4:31:dd:eb:d5:90:d0:b0:18:cc:61:31:ec:ab:55:ae:
         4d:89:d7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org