Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3132382e3230312e3132302e302f32332d3233203d3e20323632353332.roa
File:                     3132382e3230312e3132302e302f32332d3233203d3e20323632353332.roa (raw, json)
Hash identifier:          txEw563W7JNJqDwe89pjvd/V9DseWSiuRiz32q2OMhA=
Subject key identifier:   A7:7C:6E:20:30:AC:67:A0:70:CE:62:FD:C3:AC:C6:34:57:10:38:19
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       59671E715C80471179B4FCDA364221FC1F28437A
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3132382e3230312e3132302e302f32332d3233203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:54 +0000
ROA not before:           Thu 04 Apr 2024 14:11:54 +0000
ROA not after:            Thu 03 Apr 2025 14:16:54 +0000
asID:                     262532
IP address blocks:        128.201.120.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:67:1e:71:5c:80:47:11:79:b4:fc:da:36:42:21:fc:1f:28:43:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:54 2024 GMT
            Not After : Apr  3 14:16:54 2025 GMT
        Subject: CN=A77C6E2030AC67A070CE62FDC3ACC63457103819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a0:7c:35:3c:7a:92:d8:42:da:59:73:21:1a:
                    9b:ac:aa:de:73:be:60:5e:cf:05:e0:cc:44:b0:d1:
                    6d:e8:ad:33:13:83:e7:95:1f:2b:04:d6:5f:84:78:
                    a5:db:ff:92:12:9d:c3:ef:67:5b:9b:3e:19:71:d7:
                    bb:7b:1c:9c:b9:8f:8d:67:28:c1:f7:1d:a4:dd:07:
                    c0:9d:d2:12:76:35:65:b5:d8:5d:94:98:53:cf:62:
                    02:a0:d4:9a:8a:f4:09:dc:d8:e9:52:d2:2d:5e:2c:
                    15:f5:d4:99:40:1f:7f:4b:b4:23:48:ff:ba:14:ad:
                    56:59:50:b8:7c:19:57:3c:cd:6d:1e:ab:65:a7:b4:
                    af:6b:ea:60:a3:86:46:6e:b4:d2:68:bf:e2:c8:37:
                    5a:c0:5f:e9:a7:c4:40:f2:28:6e:94:c9:2f:3f:ab:
                    a9:47:8a:cc:66:1f:1b:2e:14:42:f4:e3:e1:91:30:
                    13:35:76:bd:1a:11:38:aa:08:40:77:58:fd:22:74:
                    2c:fc:06:f4:01:6e:6f:47:21:ce:24:21:82:a9:1d:
                    fd:16:9c:ed:7e:4b:b8:c5:8a:b9:a9:44:02:c6:4a:
                    80:1c:7b:c9:6b:ea:d2:0c:e7:fc:45:0c:e8:a5:fa:
                    e5:63:62:ce:f0:ba:a3:02:42:42:32:ca:a8:24:5e:
                    c4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7C:6E:20:30:AC:67:A0:70:CE:62:FD:C3:AC:C6:34:57:10:38:19
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3132382e3230312e3132302e302f32332d3233203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:37:5d:c9:73:1a:0d:fc:eb:88:7b:31:3b:15:79:4c:1d:84:
         40:93:b0:40:e2:4b:ef:68:6e:ef:a1:33:23:13:6b:25:c5:c2:
         4a:c0:10:31:53:84:c2:4c:ff:41:3e:94:33:d5:dd:a0:e9:5f:
         e7:85:7d:58:52:fa:fe:ab:c6:f5:b4:e5:94:1d:82:06:00:30:
         e4:ea:79:74:30:8e:b5:f7:00:0b:9c:a1:8a:5b:d0:bd:1d:55:
         20:cd:21:fd:14:e3:a2:a8:9e:3c:b2:dc:0c:f5:ba:28:60:05:
         6e:55:eb:69:ba:10:1f:bb:e7:1a:6c:ea:c0:78:9d:2d:e9:99:
         e8:26:ac:e8:4f:d2:38:57:37:9d:dd:ab:54:5e:45:d9:42:07:
         c2:95:d6:99:b0:03:e2:5e:e7:aa:b3:52:b6:e2:cc:eb:8c:3e:
         18:e3:fc:7c:cb:47:11:b6:28:40:b1:16:e2:19:67:7e:eb:61:
         51:8e:68:28:9a:82:e4:7f:97:f0:c3:48:f5:ed:16:9f:28:ca:
         b4:d9:6c:7d:a8:29:d7:92:95:2b:a2:7d:24:73:18:5c:96:48:
         e6:61:02:11:40:3b:26:7d:ed:8c:7e:59:46:0e:32:a6:e8:dc:
         1b:ab:43:23:72:80:00:56:84:b1:7c:ce:34:e6:c4:f3:36:9b:
         62:33:c6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org