Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3138362e3234392e3137362e302f32332d3233203d3e20323632353332.roa
File:                     3138362e3234392e3137362e302f32332d3233203d3e20323632353332.roa (raw, json)
Hash identifier:          moznCq1TosmVrcN94aADBLxLqStnV1KKv+bQBvqtrgc=
Subject key identifier:   16:2A:20:11:95:63:40:05:06:7E:76:9B:BA:B4:30:60:35:E6:C3:04
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       233354C757A433634144467972E238ADEE9DBD90
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3138362e3234392e3137362e302f32332d3233203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:51 +0000
ROA not before:           Thu 04 Apr 2024 14:11:51 +0000
ROA not after:            Thu 03 Apr 2025 14:16:51 +0000
asID:                     262532
IP address blocks:        186.249.176.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:33:54:c7:57:a4:33:63:41:44:46:79:72:e2:38:ad:ee:9d:bd:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:51 2024 GMT
            Not After : Apr  3 14:16:51 2025 GMT
        Subject: CN=162A201195634005067E769BBAB4306035E6C304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:08:eb:dc:be:77:b1:8f:ea:57:a7:ae:4d:30:
                    3c:69:bb:8c:e0:c5:04:9e:45:4e:d4:b8:24:e5:de:
                    1c:40:69:37:ec:1e:15:91:72:70:4e:53:10:08:55:
                    5f:a3:6c:73:0f:fe:63:6a:4a:7c:2e:5c:48:c6:65:
                    03:7c:32:9a:03:5d:90:4b:f5:cb:ca:55:0f:e0:79:
                    29:55:ee:18:8f:c0:8a:07:e7:f8:77:db:e8:7a:77:
                    b9:6b:8f:22:17:b4:df:9b:bb:11:74:80:39:b5:e0:
                    88:60:96:cd:08:b4:10:f5:cb:3c:16:d7:40:ce:7c:
                    50:5f:0f:79:67:26:84:48:64:21:09:11:a6:b9:46:
                    7d:b9:8e:33:0b:24:ac:9d:fc:50:48:98:c2:e3:10:
                    7e:64:cd:6a:d7:58:7e:ca:a0:01:84:d5:67:a3:23:
                    89:6f:ce:39:0e:52:4c:7a:01:d6:72:42:d4:3d:e3:
                    6a:af:0d:70:b4:12:a1:b3:a7:f6:36:3a:3f:23:3c:
                    49:53:2d:6f:93:59:74:6c:6a:ca:4b:f8:1b:00:2e:
                    40:b5:36:84:5c:a8:3d:a2:40:9b:16:96:9c:2f:ca:
                    5f:43:6a:b5:84:60:a3:8e:a2:85:9d:6d:40:21:af:
                    7c:91:6d:ed:58:40:43:a9:3c:5c:e6:34:af:0e:d6:
                    42:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2A:20:11:95:63:40:05:06:7E:76:9B:BA:B4:30:60:35:E6:C3:04
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3138362e3234392e3137362e302f32332d3233203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:b2:3b:f2:5d:db:ea:0f:4e:77:93:f0:f1:ca:bb:60:43:69:
         a8:11:4e:86:48:f1:47:ae:c2:cc:be:de:6a:b4:e3:39:18:6c:
         e3:41:b0:46:4a:89:d3:63:1a:1b:f6:78:60:ce:38:18:b1:62:
         e4:09:1a:97:8d:c7:38:11:fc:04:6e:85:06:4a:1f:c4:13:2c:
         52:70:19:b1:5c:62:d6:4c:e1:42:6c:7d:c0:1d:6e:5e:76:3c:
         af:03:a6:b0:71:09:d1:8d:bf:24:4f:f3:02:2a:fb:54:32:5d:
         f8:25:93:38:03:71:ac:0a:db:d4:ec:c7:6b:24:22:82:57:6d:
         7e:12:fa:5d:c3:7e:70:72:33:b7:4c:22:e9:84:54:ec:79:31:
         b8:15:0a:d4:04:a3:b6:f3:f4:18:67:7b:92:6f:81:9f:16:f2:
         03:19:41:87:c9:34:69:86:77:b2:77:c4:b9:de:df:ed:80:d4:
         81:c6:c5:6e:f0:ff:49:59:72:55:61:b4:62:45:8b:a7:48:ad:
         70:0e:2e:2d:a2:a9:e1:38:35:23:e4:4f:1c:63:59:15:d0:2b:
         b7:05:94:d2:d5:93:ef:3d:6e:f6:de:a6:f7:91:74:95:2a:76:
         f0:49:bd:e0:78:b4:6b:0f:21:81:72:b5:ee:48:b7:23:bb:95:
         77:de:f0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org