Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3132382e3230312e3132322e302f32332d3233203d3e20323632353332.roa
File:                     3132382e3230312e3132322e302f32332d3233203d3e20323632353332.roa (raw, json)
Hash identifier:          jjiANa1zs2bA6UZOQsEk8x2uUdsqj7JvkDJaOAMZ9y0=
Subject key identifier:   38:49:54:72:4B:04:4D:30:6E:08:B8:F2:D0:12:60:D6:7D:7C:46:39
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       663DB5243CBEF9978B881202733FD6F4E11F5F1D
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3132382e3230312e3132322e302f32332d3233203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:53 +0000
ROA not before:           Thu 04 Apr 2024 14:11:53 +0000
ROA not after:            Thu 03 Apr 2025 14:16:53 +0000
asID:                     262532
IP address blocks:        128.201.122.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:3d:b5:24:3c:be:f9:97:8b:88:12:02:73:3f:d6:f4:e1:1f:5f:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:53 2024 GMT
            Not After : Apr  3 14:16:53 2025 GMT
        Subject: CN=384954724B044D306E08B8F2D01260D67D7C4639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a6:53:07:08:cc:99:2e:2d:33:7a:06:df:cc:
                    46:6a:49:bc:5c:34:62:30:92:75:8a:4a:a0:1f:0b:
                    cb:b6:81:f5:a5:e0:9e:37:52:d9:bf:47:10:de:bb:
                    ec:1f:66:28:25:f1:17:57:2d:5b:a1:57:e6:9d:36:
                    e6:50:34:0a:88:5b:e4:7c:78:35:d5:26:49:64:96:
                    8f:e4:1b:b4:9a:fe:d9:35:58:15:2c:14:3f:b6:1d:
                    ec:45:a6:41:18:cc:6e:13:e8:33:da:fd:8c:17:77:
                    4d:c2:9c:85:a8:e5:9e:32:d4:48:0d:35:92:6f:e9:
                    29:16:d2:34:1c:1e:89:7d:fb:7d:c5:cc:5a:59:0f:
                    be:1d:7e:9c:23:a5:4f:d5:e2:e4:cb:41:b0:35:8d:
                    d3:b5:88:14:3f:66:25:e2:32:2f:48:d6:5f:cb:f2:
                    46:f6:96:64:2e:2b:56:36:71:5d:52:89:a5:cb:b2:
                    21:25:66:b8:a2:bc:58:aa:03:94:29:50:7e:87:2f:
                    be:9f:53:52:61:98:10:e8:66:9c:15:70:3d:f7:bf:
                    be:a9:27:82:19:9f:c0:0f:21:d1:2d:ca:1b:fc:fa:
                    9f:4b:11:16:e4:c2:3d:61:6b:bc:47:00:1a:4b:6d:
                    c3:e8:55:e8:15:11:20:a8:7d:92:74:54:d9:8e:00:
                    f3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:49:54:72:4B:04:4D:30:6E:08:B8:F2:D0:12:60:D6:7D:7C:46:39
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3132382e3230312e3132322e302f32332d3233203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:93:a2:3a:97:3c:a2:73:7b:30:f7:ea:db:64:36:a1:a3:c6:
         be:7b:d8:52:97:3d:eb:ba:78:53:9b:a4:b3:48:65:f7:63:fa:
         e8:dd:dd:3c:3d:b0:75:ff:2f:44:05:d7:74:ee:16:c6:c9:40:
         4d:3c:f2:53:97:21:b7:c0:a7:7b:02:68:08:a6:dd:85:2d:72:
         5e:bf:67:c5:75:19:e9:0f:0d:8f:42:f6:0e:78:a9:68:fd:14:
         33:aa:b9:84:df:c4:11:d9:e7:14:d7:a1:8d:ea:16:34:e2:d5:
         c3:15:99:1b:86:1c:ba:5d:e4:c7:a5:10:82:00:5c:1c:7b:4c:
         d2:aa:56:28:c1:a0:f6:70:5b:87:e7:9f:1d:cf:3c:21:41:11:
         d6:b6:b8:d1:41:fd:aa:33:93:5c:65:d7:a8:33:9c:c1:c8:6f:
         94:5e:6f:e5:ea:a9:47:1a:25:89:7e:03:06:b6:f5:48:7d:ce:
         ef:a8:1f:0f:d6:f1:04:9a:cc:23:a9:b9:62:37:6f:ba:c7:d6:
         d9:91:47:34:91:58:9c:6f:63:ab:93:bb:3e:99:c9:18:dd:83:
         77:c0:c4:97:5b:82:d1:dd:31:5e:a6:fc:af:4b:8a:c7:38:cc:
         d9:5e:d7:18:35:93:e3:6a:3a:25:d2:1d:1b:a1:24:da:59:0c:
         a4:c1:51:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org