Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3138362e3234392e3138342e302f32332d3233203d3e20323632353332.roa
File:                     3138362e3234392e3138342e302f32332d3233203d3e20323632353332.roa (raw, json)
Hash identifier:          hkGu4V0veuKEPnzeFrPryPi6QToVRg5YVa6hPZqlNqM=
Subject key identifier:   12:01:EA:4D:FB:B1:D4:5C:EC:29:EA:45:B5:DE:74:87:43:7E:B2:2C
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       71AED0A2F70FB96283A501432850DBBD9FA83CBA
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3138362e3234392e3138342e302f32332d3233203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:56 +0000
ROA not before:           Thu 04 Apr 2024 14:11:56 +0000
ROA not after:            Thu 03 Apr 2025 14:16:56 +0000
asID:                     262532
IP address blocks:        186.249.184.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ae:d0:a2:f7:0f:b9:62:83:a5:01:43:28:50:db:bd:9f:a8:3c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:56 2024 GMT
            Not After : Apr  3 14:16:56 2025 GMT
        Subject: CN=1201EA4DFBB1D45CEC29EA45B5DE7487437EB22C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9f:ff:30:ac:99:9b:93:b4:01:09:7f:0d:bc:
                    5d:62:2c:7f:f1:b3:ee:8c:9f:fd:e0:1a:65:00:42:
                    f9:f4:67:69:27:e7:0b:83:7c:7f:15:f7:9e:37:ed:
                    81:66:aa:fc:5f:22:71:4a:f9:17:2a:c7:7f:a2:8b:
                    74:ea:ed:20:c8:db:e7:fc:92:72:0d:4f:a4:38:ef:
                    08:67:9b:1a:96:35:2d:bc:cf:34:26:d9:dc:3a:c7:
                    be:b9:52:e8:63:45:22:61:69:cb:0b:ed:f2:61:ac:
                    77:53:6c:24:3c:6e:d8:67:03:9f:1f:c3:32:50:dc:
                    7d:31:3d:e6:cd:21:43:32:8a:e2:54:cc:94:f3:56:
                    1b:af:33:e7:e2:d2:24:bd:81:f0:34:4f:20:d4:13:
                    38:cd:a5:53:ab:da:3e:f7:d5:ed:59:59:f9:0d:e0:
                    7d:fa:02:6f:19:e0:ce:79:41:41:90:fb:8d:9e:a4:
                    fb:2c:b8:99:5b:8f:59:97:6a:47:e6:7a:cc:fa:ac:
                    c0:c5:ef:10:e8:69:12:b6:12:37:9a:33:2e:14:cd:
                    d3:e3:29:1a:87:00:e9:fd:fe:25:e5:6c:ee:76:ff:
                    d1:48:0a:4a:2b:e5:a0:63:0f:7b:6d:46:21:d7:0c:
                    2a:a3:73:85:2e:10:c0:8b:63:6e:92:fd:15:9a:69:
                    56:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:01:EA:4D:FB:B1:D4:5C:EC:29:EA:45:B5:DE:74:87:43:7E:B2:2C
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3138362e3234392e3138342e302f32332d3233203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:86:47:e0:83:8f:de:9e:04:61:51:f5:da:db:35:9c:7a:ef:
         89:a3:73:5e:2c:de:d0:a9:ec:68:b6:37:69:91:80:6b:6a:10:
         63:8c:df:db:10:8f:81:a7:c4:96:64:9d:1f:ea:79:81:64:e1:
         e3:77:86:a3:4f:9a:47:3b:5f:1d:39:e4:0e:db:ab:b1:35:67:
         6b:cb:c8:bc:52:22:62:d7:64:5b:60:9a:e9:34:c1:ec:69:88:
         68:cb:47:7c:11:df:f9:fc:79:d5:40:27:eb:e9:0e:e4:21:00:
         2a:05:96:b6:ec:fb:54:70:2e:17:9f:f9:e6:fc:75:b3:34:34:
         4c:d0:9d:20:cd:f3:bf:f9:17:3e:66:c9:01:84:06:4e:a9:ef:
         c3:41:12:4b:97:25:47:d6:c3:15:1c:cc:05:53:3a:20:bc:e2:
         a7:5f:0e:6e:35:5b:f2:33:fc:5a:c5:b5:55:44:98:d4:58:92:
         03:90:6f:ce:7b:9c:02:50:e0:a8:0a:0c:d6:e9:78:7c:23:ed:
         f9:9d:d9:da:72:2b:1a:e1:5d:fa:20:31:b0:08:de:40:da:d5:
         d7:4d:5d:93:14:6c:01:7b:08:9d:d5:f6:1c:30:4e:09:47:dc:
         45:b5:fd:13:41:ce:4c:d7:d7:c6:b9:7b:3c:87:ca:4c:ff:b2:
         f7:fa:15:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org