Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3132382e3230312e3132312e302f32342d3234203d3e20323632353332.roa
File:                     3132382e3230312e3132312e302f32342d3234203d3e20323632353332.roa (raw, json)
Hash identifier:          muGieJi0p65Rav/skzsi8oeb1JCl91n8ZdeF/r0ZWEo=
Subject key identifier:   10:26:83:A8:5D:A7:BA:86:9C:80:B0:A8:3E:1F:8F:47:25:C6:11:EB
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       0B855A905F9D8573C56C8CC88CB79B3E986BFD2A
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3132382e3230312e3132312e302f32342d3234203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:53 +0000
ROA not before:           Thu 04 Apr 2024 14:11:53 +0000
ROA not after:            Thu 03 Apr 2025 14:16:53 +0000
asID:                     262532
IP address blocks:        128.201.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:85:5a:90:5f:9d:85:73:c5:6c:8c:c8:8c:b7:9b:3e:98:6b:fd:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:53 2024 GMT
            Not After : Apr  3 14:16:53 2025 GMT
        Subject: CN=102683A85DA7BA869C80B0A83E1F8F4725C611EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:11:34:a9:ad:e7:0f:2f:f3:78:ab:5b:d2:
                    0b:bb:d0:3c:92:fa:ee:86:34:6f:9c:4b:fb:3a:1c:
                    d4:f7:27:50:43:7e:44:a4:33:74:5b:03:63:60:b5:
                    46:ce:69:b0:c7:33:a2:a3:cc:e8:c6:4d:e8:3c:28:
                    46:e1:fe:4e:7a:9e:f9:8b:19:22:5a:6f:83:2d:be:
                    e3:49:2a:32:e3:d3:0a:87:7b:b5:e8:5a:da:37:9a:
                    1c:c1:52:a7:68:3b:60:df:04:6f:50:e7:35:3b:79:
                    30:18:61:53:e9:f5:b3:24:76:b6:9c:75:e5:f4:d5:
                    e8:1d:60:73:72:7a:21:75:a2:98:67:bd:b0:05:11:
                    1a:94:ba:89:3c:4f:af:72:20:80:83:ba:aa:b3:ee:
                    97:55:e5:30:a2:99:1d:73:03:92:b3:08:2f:9c:2e:
                    25:75:d5:d7:6c:27:49:db:f3:5f:47:e2:9f:ba:3c:
                    15:17:11:ae:a8:41:6d:15:7c:db:a4:2e:c0:db:8e:
                    1a:6b:09:5b:a6:7a:cf:cb:4f:a3:43:ca:a6:ef:86:
                    8f:6a:cf:d4:d5:d9:0f:98:a0:85:17:c8:6c:94:4b:
                    4c:c5:47:fc:05:82:fb:92:ce:fc:2d:ea:5f:ed:41:
                    05:02:27:24:1a:a8:88:cc:bc:46:09:d0:b7:84:49:
                    53:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:26:83:A8:5D:A7:BA:86:9C:80:B0:A8:3E:1F:8F:47:25:C6:11:EB
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3132382e3230312e3132312e302f32342d3234203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:50:9e:67:f3:6e:24:b7:b5:a6:87:49:57:89:eb:b0:98:08:
         f7:e3:37:ec:d2:13:32:9e:ad:4b:08:98:0f:f4:2d:66:5e:ec:
         e8:1a:38:35:d8:a1:32:78:e6:af:70:9d:a8:82:21:2c:17:5f:
         90:7a:c1:c8:11:dc:33:bf:3e:22:9e:11:c7:8a:85:b8:c9:10:
         7b:18:a2:71:fe:08:34:ee:54:22:f9:e5:ff:8f:fb:7a:b8:69:
         ca:70:6d:3f:d2:00:38:1c:6e:06:a3:c8:67:53:5a:cd:57:29:
         c9:6b:a0:72:97:bf:c2:04:20:72:36:fd:52:93:6c:55:9a:a9:
         08:9e:9b:8f:0a:18:16:f3:53:9d:ff:a9:a3:13:8d:f5:7d:a8:
         b6:0f:c3:44:1a:93:60:f1:15:5a:e0:a5:c5:3f:99:6e:23:aa:
         99:78:2b:64:36:71:01:c7:54:54:df:5d:f2:7a:16:2f:c4:44:
         35:95:02:7a:49:1b:25:43:28:24:08:c2:87:00:70:df:72:51:
         bd:f1:27:68:6f:29:43:0a:4e:33:2c:e3:fa:08:b2:be:58:60:
         50:23:e0:f3:1d:fe:a2:d9:21:09:3b:b7:ff:12:24:8b:8d:cb:
         77:27:5f:19:93:b7:7b:c3:2a:02:4c:63:67:f2:dc:bc:cf:4d:
         d9:bf:73:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org