Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3138362e3234392e3137362e302f32302d3230203d3e20323632353332.roa
File:                     3138362e3234392e3137362e302f32302d3230203d3e20323632353332.roa (raw, json)
Hash identifier:          igYYd9ElnzuoDgWjqsyF7KGyj2aiJN3sq6bYgGY5Gvc=
Subject key identifier:   B6:07:74:93:E6:90:52:42:1D:45:25:DB:79:B3:D9:8C:8A:27:13:8C
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       630543C967C680D82CDD1D1DCFFDA71D26EE1564
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3138362e3234392e3137362e302f32302d3230203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:51 +0000
ROA not before:           Thu 04 Apr 2024 14:11:51 +0000
ROA not after:            Thu 03 Apr 2025 14:16:51 +0000
asID:                     262532
IP address blocks:        186.249.176.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:05:43:c9:67:c6:80:d8:2c:dd:1d:1d:cf:fd:a7:1d:26:ee:15:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:51 2024 GMT
            Not After : Apr  3 14:16:51 2025 GMT
        Subject: CN=B6077493E69052421D4525DB79B3D98C8A27138C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:65:df:b2:3b:6d:cd:d6:9f:b4:ae:d4:b3:a4:
                    c0:ae:24:6b:72:75:5a:22:5b:fc:2a:dc:bf:ae:47:
                    5f:69:84:84:73:fa:0b:b2:ad:08:1c:4c:e8:e4:73:
                    c4:23:ce:7b:a5:99:34:a5:29:d8:52:75:8b:2a:9e:
                    a4:a1:2c:10:70:15:6d:84:ae:77:fc:9c:aa:aa:7d:
                    6f:ff:b0:59:44:4c:7c:50:e0:3a:58:bc:73:5d:73:
                    a4:51:df:24:ad:d1:79:df:db:a1:1e:15:e6:3d:8f:
                    65:7e:49:bc:12:da:24:f8:68:6c:1a:dd:7a:71:6b:
                    f7:53:80:12:27:36:c5:2d:d4:5e:9d:84:1c:61:ab:
                    38:55:88:38:df:9d:89:f2:5f:78:85:20:8e:eb:a1:
                    e3:b2:80:14:4a:25:7f:ad:33:bf:34:98:7f:14:a9:
                    19:4b:09:98:08:d9:98:c9:16:83:d7:5d:67:ad:8d:
                    12:fc:ef:e6:2f:6b:68:c6:28:6f:d2:8e:1d:b4:f4:
                    be:55:4e:ed:63:3c:72:54:78:a8:75:c7:71:05:1b:
                    dd:c1:1b:bc:dc:4f:d7:25:c7:93:83:73:3e:75:44:
                    d1:2b:bf:f6:de:eb:9c:69:a9:55:84:d9:23:8b:1d:
                    44:94:d8:4f:06:c5:1b:42:9f:72:61:ec:d5:90:6e:
                    8c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:07:74:93:E6:90:52:42:1D:45:25:DB:79:B3:D9:8C:8A:27:13:8C
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3138362e3234392e3137362e302f32302d3230203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         36:9b:23:7b:7d:31:8e:3b:9a:68:9c:cc:fd:3f:ef:1c:01:d6:
         62:2a:43:f1:a6:cc:b3:cc:ac:a1:cb:a2:da:9d:50:3f:07:38:
         52:07:53:62:53:27:48:18:49:d5:a7:7f:7b:b0:4e:7c:c2:6c:
         64:28:d2:2e:c2:2f:da:5c:fb:88:ab:48:5e:79:16:17:f2:da:
         70:ef:8e:9b:a7:d2:45:e3:1f:51:0d:b0:9a:a9:61:0c:c7:74:
         98:f5:4e:44:f0:b7:24:8d:3a:5a:59:4f:b2:73:f2:98:b1:6c:
         d5:3b:f1:44:d9:d8:70:9e:31:ce:87:de:cb:3a:32:70:8c:38:
         22:0f:42:80:27:46:c2:9b:fd:5e:4f:3a:ac:6e:16:d7:2b:90:
         30:80:0e:9a:dd:54:fb:a5:7d:c0:7f:83:96:ba:b8:34:b0:92:
         1a:ba:c4:99:fa:a7:13:e6:7e:f2:05:7c:2f:9f:6e:1f:3d:95:
         e0:61:fc:6c:af:0a:ef:da:60:83:c4:ca:62:c6:14:e8:2e:2e:
         fa:17:76:20:7d:a0:15:a0:e0:9f:4f:77:e9:27:ee:6c:3e:7f:
         45:60:1d:bf:83:b9:bf:3c:b2:67:b9:3d:5f:99:05:bd:ed:c7:
         9c:16:96:fd:dc:32:4d:be:57:27:3a:6a:cd:6a:d2:06:a6:3f:
         50:8c:34:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org