Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3138362e3234392e3138322e302f32332d3233203d3e20323632353332.roa
File:                     3138362e3234392e3138322e302f32332d3233203d3e20323632353332.roa (raw, json)
Hash identifier:          WSC4fGfAcbXha8IpnPD+7X47O5qbu5xDFuFe+AsRAgo=
Subject key identifier:   20:9D:70:D7:00:5C:65:00:9C:48:20:B7:8C:45:62:EF:B5:1A:FB:F9
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       4177EDD796402266AED3EAEA4B35CFA8C9BD764D
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3138362e3234392e3138322e302f32332d3233203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:55 +0000
ROA not before:           Thu 04 Apr 2024 14:11:55 +0000
ROA not after:            Thu 03 Apr 2025 14:16:55 +0000
asID:                     262532
IP address blocks:        186.249.182.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:77:ed:d7:96:40:22:66:ae:d3:ea:ea:4b:35:cf:a8:c9:bd:76:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:55 2024 GMT
            Not After : Apr  3 14:16:55 2025 GMT
        Subject: CN=209D70D7005C65009C4820B78C4562EFB51AFBF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:21:55:91:16:67:d6:b7:99:90:e4:d2:7f:03:
                    17:1b:a9:40:80:cc:6e:ec:58:ff:bb:64:4f:3f:69:
                    a9:d5:81:61:13:12:8c:54:2e:ae:0e:7c:50:88:fd:
                    c2:3d:4a:1f:9f:0c:e7:f2:40:ee:69:50:43:42:3b:
                    2a:32:32:78:f4:d1:7d:65:12:76:3c:68:50:e3:41:
                    b3:8d:2f:12:c3:16:85:85:92:a9:b4:c7:93:66:b4:
                    8a:4f:f6:40:f9:3f:e8:bc:07:7b:c7:05:95:7e:34:
                    ce:40:14:49:32:3a:b1:22:53:1a:5d:da:3e:88:31:
                    74:07:36:06:d8:9d:71:ea:b2:b4:45:95:c8:30:80:
                    5f:e3:7b:d8:21:1d:ef:b4:83:f0:5f:1a:31:b3:0f:
                    55:14:82:38:fb:da:a6:e1:20:ea:90:3e:d7:03:94:
                    49:9f:00:88:43:4c:47:3a:18:7d:6f:5a:c7:57:97:
                    2a:60:1b:f7:c1:02:c1:7c:b4:55:68:13:e6:71:7e:
                    8a:be:a8:c5:66:a8:a2:02:8c:be:8e:ca:14:bb:6f:
                    ac:ea:73:ca:0a:f8:4b:93:0c:95:fa:03:d9:02:b2:
                    9d:52:59:a7:3b:ec:8a:a7:3b:19:94:f2:71:fa:fa:
                    6f:6b:15:ea:d2:b6:2b:a7:6f:9d:59:56:91:ca:97:
                    1d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9D:70:D7:00:5C:65:00:9C:48:20:B7:8C:45:62:EF:B5:1A:FB:F9
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3138362e3234392e3138322e302f32332d3233203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:9d:f4:0a:5b:2f:5b:2c:bf:43:4e:be:e4:f3:25:b6:75:ab:
         26:96:79:e7:81:2d:f7:4d:06:4b:42:32:09:3a:6f:45:3b:80:
         25:c0:bd:77:3b:67:50:b6:e9:2d:84:7f:36:ec:5c:ee:80:8b:
         d0:aa:58:ff:f3:48:51:4c:ce:64:d2:e1:dc:1e:cc:9b:de:36:
         74:98:5a:47:91:9c:f4:2c:9b:3d:d2:dd:36:a3:c1:f0:0d:0e:
         e9:07:a8:9a:51:73:ed:b2:a5:d7:e9:3a:1d:db:32:2c:c9:f5:
         9a:ad:55:03:2c:6d:d8:c1:ef:69:8f:f1:8f:78:c5:b7:57:9d:
         68:69:4b:28:b5:2b:aa:8a:cd:92:b3:6a:70:3f:c9:be:a2:01:
         26:b1:12:37:6f:18:bd:a7:1f:5e:9e:80:c2:e7:bd:93:c3:e2:
         8c:8c:3d:52:1b:0d:d5:1d:e7:31:6e:9d:4c:6d:d4:55:f9:2e:
         2f:3c:c1:a6:0a:79:72:b2:e0:50:06:3d:60:1f:a0:22:b0:35:
         04:8f:19:b3:36:6c:7a:47:27:92:20:1c:e8:b2:3e:e3:c1:5c:
         02:b6:81:a8:9d:9c:7a:c7:17:1b:f0:08:aa:77:48:44:61:4e:
         71:39:ad:7d:eb:00:b9:4c:45:a5:bb:b4:8a:ef:82:8d:6f:33:
         2a:6a:76:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org