Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3132382e3230312e3132322e302f32342d3234203d3e20323632353332.roa
File:                     3132382e3230312e3132322e302f32342d3234203d3e20323632353332.roa (raw, json)
Hash identifier:          0hUb7gtjYACBsGSByaF9k5SZuld56rdrQtiNx9pEmqI=
Subject key identifier:   15:BB:53:1A:B6:3C:8F:B1:A1:21:C4:D9:9B:84:97:F9:CD:41:57:0B
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       7B7744E127265F74C7C1E1856145FD0076E71AC8
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3132382e3230312e3132322e302f32342d3234203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:54 +0000
ROA not before:           Thu 04 Apr 2024 14:11:54 +0000
ROA not after:            Thu 03 Apr 2025 14:16:54 +0000
asID:                     262532
IP address blocks:        128.201.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:77:44:e1:27:26:5f:74:c7:c1:e1:85:61:45:fd:00:76:e7:1a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:54 2024 GMT
            Not After : Apr  3 14:16:54 2025 GMT
        Subject: CN=15BB531AB63C8FB1A121C4D99B8497F9CD41570B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e9:58:e2:ab:c1:40:b6:60:77:5e:19:fd:0c:
                    a0:08:85:98:29:b1:a6:43:c8:1f:61:71:7e:48:74:
                    a4:9c:03:be:3c:d7:26:76:12:76:f3:9e:89:25:7d:
                    00:a3:43:cc:e8:ae:67:cf:7a:4a:b8:9e:fc:73:32:
                    b6:1e:8d:3e:90:9b:41:68:b3:a2:b8:25:96:83:ef:
                    e1:28:1f:d8:3e:7d:2a:6a:00:53:56:38:8c:9f:e8:
                    dd:f6:6f:e7:9b:84:5c:36:a1:75:19:df:e1:8b:4d:
                    1a:af:59:e9:45:ae:8e:29:30:26:18:38:bf:9f:a2:
                    9c:58:b5:d1:4e:a1:e4:f6:f7:4d:46:a8:02:5b:02:
                    24:ac:90:8f:94:57:7e:c3:45:c2:32:bf:79:bb:03:
                    a3:4f:3c:41:d3:db:a5:11:82:a6:5b:15:20:76:70:
                    1c:6d:07:74:00:bf:6b:02:55:77:fa:be:cf:82:f2:
                    a8:ec:15:fe:a1:b0:1d:89:ad:4c:58:53:f0:ce:e1:
                    a8:66:eb:da:06:e5:11:81:5e:d9:ff:47:b5:3e:41:
                    ec:37:19:e9:62:2a:25:e6:d1:66:9e:0c:a9:f1:85:
                    1e:22:72:5f:b5:6f:aa:c4:5b:53:c5:59:66:27:42:
                    bb:43:4d:73:d9:39:d7:3e:06:43:92:4c:ce:c8:c4:
                    51:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BB:53:1A:B6:3C:8F:B1:A1:21:C4:D9:9B:84:97:F9:CD:41:57:0B
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3132382e3230312e3132322e302f32342d3234203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:71:fc:f5:f4:81:51:ab:d6:80:7c:ca:c1:0a:88:70:59:da:
         87:d7:78:c0:89:a4:bb:64:8e:ec:fa:b7:6f:22:dd:4b:9b:ae:
         5a:7d:3c:f1:9e:e2:de:41:8f:8a:8f:ad:e6:bd:b8:0d:9d:e4:
         19:ca:3b:fb:e8:41:52:6f:6c:5d:d3:48:15:45:79:36:1a:ec:
         fd:a6:98:85:86:7b:c8:5d:85:7b:16:39:8a:ed:98:b5:a2:86:
         81:d3:f5:7b:82:ea:5b:99:d3:48:90:41:d5:b6:80:db:cd:63:
         0b:94:81:4a:63:df:82:92:e0:f7:85:79:c6:1e:41:65:ff:82:
         4c:56:eb:48:a7:c4:59:32:b8:3c:7a:d1:fe:8f:10:c6:2a:f8:
         77:43:81:dd:b6:ce:9a:83:1d:d5:12:a8:1b:21:a7:51:d2:c4:
         e7:5b:cb:a1:1d:b4:20:1e:3d:7e:da:f1:d6:25:f6:ad:9b:45:
         7d:5e:84:bd:be:12:4c:44:d3:78:ce:e1:2b:f6:71:97:47:a0:
         56:f0:45:ce:a8:26:ed:d0:83:a7:2d:9c:83:ff:a6:13:8c:e7:
         bd:aa:d7:ce:7a:43:4a:34:85:b1:1e:06:1b:27:f3:52:46:12:
         ee:ec:31:f3:ca:54:26:c5:62:ae:ea:f1:52:cf:18:a4:1a:07:
         23:f8:9a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org