Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/0/323830343a353536633a3a2f33332d3333203d3e20323637393334.roa
File:                     323830343a353536633a3a2f33332d3333203d3e20323637393334.roa (raw, json)
Hash identifier:          gjeyLFjTrdVX7PmwTLsKwvrSqdlUh8ttTJhYMtMoU7s=
Subject key identifier:   09:76:72:E9:A6:C9:63:36:E6:F4:60:F7:6B:2E:43:BC:1C:B2:92:CD
Certificate issuer:       /CN=59B8F0B9B2D0E36E4909DD9EEB66DF00C75CBC2D
Certificate serial:       579CA421FC8D160998A6375B813F9C73E1B9D65B
Authority key identifier: 59:B8:F0:B9:B2:D0:E3:6E:49:09:DD:9E:EB:66:DF:00:C7:5C:BC:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59B8F0B9B2D0E36E4909DD9EEB66DF00C75CBC2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/0/323830343a353536633a3a2f33332d3333203d3e20323637393334.roa
Signing time:             Mon 08 Jan 2024 18:31:06 +0000
ROA not before:           Mon 08 Jan 2024 18:26:06 +0000
ROA not after:            Mon 06 Jan 2025 18:31:06 +0000
asID:                     267934
IP address blocks:        2804:556c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9c:a4:21:fc:8d:16:09:98:a6:37:5b:81:3f:9c:73:e1:b9:d6:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B8F0B9B2D0E36E4909DD9EEB66DF00C75CBC2D
        Validity
            Not Before: Jan  8 18:26:06 2024 GMT
            Not After : Jan  6 18:31:06 2025 GMT
        Subject: CN=097672E9A6C96336E6F460F76B2E43BC1CB292CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:4f:0c:d7:e6:ea:ce:1d:cd:7e:20:8a:81:1d:
                    46:01:40:7b:a4:11:57:60:bc:ce:1d:2d:16:5e:25:
                    74:0e:f9:91:b4:35:c9:53:89:e1:e4:10:30:ec:e7:
                    4c:c2:44:3f:53:98:56:a5:c7:62:7c:fa:78:5b:29:
                    bd:48:d3:c2:74:1d:ff:58:5e:98:a9:a7:e4:e4:f4:
                    4d:e5:e5:48:5a:9f:b4:50:9c:03:21:09:aa:25:d1:
                    30:f8:57:0e:52:fb:ea:0e:9e:29:97:a2:88:f1:05:
                    31:06:a6:b9:0a:ca:b1:ab:5a:b1:6a:78:2c:4e:36:
                    a2:6c:8f:bf:59:9e:b5:81:22:44:8d:89:67:68:d0:
                    66:59:d3:72:a5:f5:5b:d3:27:ba:35:17:c6:a0:07:
                    61:a2:2f:40:c6:46:e8:15:99:5e:fd:10:04:36:f0:
                    a0:5b:60:b8:fe:f8:13:8e:80:bd:dd:99:dc:e3:11:
                    dd:af:ea:97:2b:9e:f7:27:a6:5f:d2:88:f4:16:92:
                    60:a4:cf:31:52:1e:27:27:32:42:e6:1a:d4:39:30:
                    c8:32:e4:58:6a:a5:40:8f:15:ab:4d:9f:07:19:02:
                    14:25:c2:8b:88:5a:ac:de:99:cb:61:5f:aa:16:5a:
                    c2:40:ba:c5:e2:b4:cd:27:7d:d8:28:d5:21:cc:d8:
                    32:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:76:72:E9:A6:C9:63:36:E6:F4:60:F7:6B:2E:43:BC:1C:B2:92:CD
            X509v3 Authority Key Identifier:
                keyid:59:B8:F0:B9:B2:D0:E3:6E:49:09:DD:9E:EB:66:DF:00:C7:5C:BC:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/0/59B8F0B9B2D0E36E4909DD9EEB66DF00C75CBC2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59B8F0B9B2D0E36E4909DD9EEB66DF00C75CBC2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/0/323830343a353536633a3a2f33332d3333203d3e20323637393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:556c::/33

    Signature Algorithm: sha256WithRSAEncryption
         53:2b:17:48:8e:3a:b3:ef:ed:7c:a4:79:78:bd:a7:3f:fd:5e:
         24:f8:6d:cd:54:31:a9:45:44:a8:b9:c4:09:fc:1d:6e:23:58:
         9c:14:f4:81:0b:1d:8a:aa:b4:1e:c6:e1:d3:43:94:28:d2:c1:
         f5:ba:86:88:59:e9:b3:44:b6:6b:e3:67:d2:19:97:e5:76:1d:
         f9:09:6f:70:26:0c:d3:95:e5:59:b2:a9:6f:ae:a5:60:33:f9:
         78:ee:f6:d1:86:ac:d2:00:2b:47:35:4e:ed:47:9d:20:ff:42:
         14:c9:50:0c:ec:56:46:47:c7:16:cd:3d:55:12:dd:23:54:21:
         7a:63:b8:90:a5:6e:1b:57:4d:b8:81:06:6d:83:08:ce:41:ba:
         4a:d0:f4:37:9a:48:2e:ee:d6:23:2c:36:90:cf:91:f3:64:84:
         e7:8e:e3:e2:49:bd:dd:6e:25:ed:70:ba:0c:f9:f3:41:7d:46:
         18:9d:91:6e:03:e1:20:1e:c2:70:9f:69:bd:fd:ba:d9:17:89:
         6f:12:8a:bd:31:9b:d9:87:99:a5:42:df:bf:4e:5f:6b:a8:b0:
         ed:2d:f0:ae:06:51:c8:24:d8:7a:c8:50:cc:22:e3:7d:89:f6:
         58:92:61:1a:ea:07:eb:e4:82:02:81:cf:2e:78:5d:07:2b:1c:
         3f:1f:72:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:00 2024 by rpki-client on console-fra.rpki-client.org