Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3138362e3234392e3138362e302f32332d3233203d3e20323632353332.roa
File:                     3138362e3234392e3138362e302f32332d3233203d3e20323632353332.roa (raw, json)
Hash identifier:          fLdBioFlUV7moF5qKzX9IxbWFrcm+7a2Fymck106W4A=
Subject key identifier:   56:4F:DC:FC:F7:42:34:46:F0:C5:10:BF:BB:71:54:6E:15:41:2C:C3
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       26831238A160A9CE87C064418AB1C80EE7B19532
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3138362e3234392e3138362e302f32332d3233203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:52 +0000
ROA not before:           Thu 04 Apr 2024 14:11:52 +0000
ROA not after:            Thu 03 Apr 2025 14:16:52 +0000
asID:                     262532
IP address blocks:        186.249.186.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:83:12:38:a1:60:a9:ce:87:c0:64:41:8a:b1:c8:0e:e7:b1:95:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:52 2024 GMT
            Not After : Apr  3 14:16:52 2025 GMT
        Subject: CN=564FDCFCF7423446F0C510BFBB71546E15412CC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:98:8a:b1:9a:27:5b:be:ad:01:7e:85:d2:3c:
                    69:1e:2f:c8:53:11:69:cc:61:99:e4:aa:49:3e:60:
                    fe:85:21:47:b4:18:32:46:37:df:31:79:9f:1b:2e:
                    c8:7b:79:d3:a2:cb:9c:f3:b9:36:e4:67:93:1a:21:
                    a8:b6:ec:e9:89:a0:2f:bc:d8:cb:19:8e:a9:31:d7:
                    99:5e:3e:4f:6d:00:7f:c5:d3:18:e5:0b:04:38:6c:
                    9b:be:55:4d:c0:90:a4:a6:c2:0b:5d:8a:f5:e8:54:
                    31:ed:bc:fa:d4:b6:39:62:f7:2b:c3:36:34:ad:13:
                    46:fb:0b:03:33:9a:0f:71:fd:99:f0:59:df:7d:a1:
                    fd:95:af:35:cf:a5:d0:80:8e:45:50:01:72:88:89:
                    52:90:77:2b:86:a7:c5:10:d3:b5:67:17:20:15:58:
                    7f:1e:9f:ad:01:86:ec:30:b6:16:d9:d0:84:c1:b6:
                    d2:4b:74:be:39:19:c9:f2:e2:44:b6:63:3a:e8:02:
                    9b:cd:b2:0b:5b:1f:a9:47:32:06:5d:ac:b9:90:38:
                    30:20:18:7a:6b:90:b4:68:fb:25:b9:e1:36:e6:dc:
                    d6:5e:48:de:59:0a:31:82:0f:e7:6c:0e:19:e1:88:
                    a6:d3:92:8b:5d:d0:73:2a:dc:66:67:a0:d1:a1:1e:
                    9d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4F:DC:FC:F7:42:34:46:F0:C5:10:BF:BB:71:54:6E:15:41:2C:C3
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3138362e3234392e3138362e302f32332d3233203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:a8:35:17:6b:27:01:a1:79:73:32:53:bc:35:4d:87:21:58:
         40:99:3b:92:26:07:d2:90:8c:c2:6c:de:d0:b1:96:30:34:0e:
         ae:36:f1:e9:a5:c7:70:9a:0c:8e:ed:a4:50:f8:e7:13:6d:f9:
         37:6f:55:60:eb:bf:2c:62:ce:31:3f:5c:0d:a7:2e:22:e0:c9:
         2e:b8:b5:26:b8:f6:82:9f:cd:b3:19:d2:44:6b:99:d9:cd:da:
         60:1c:57:9a:a6:ec:6c:5a:b2:4b:7e:6b:67:a5:5f:21:72:cb:
         cd:aa:53:cd:d7:df:d1:76:9b:a3:05:39:af:93:1b:42:8a:40:
         49:fc:a9:13:8e:99:72:cd:cd:1f:52:60:84:7e:d4:ff:c4:e0:
         45:51:dd:12:8f:f0:cd:35:74:a4:11:a3:8e:08:28:8b:fb:07:
         2c:e6:c4:1c:0c:b8:70:74:f5:0c:13:0f:79:af:44:05:05:89:
         23:31:80:91:12:9f:94:34:bf:14:3d:2d:7e:33:0a:41:79:91:
         3e:12:b7:a6:7b:9d:df:a9:57:1c:3c:e5:a6:c1:1c:35:d4:26:
         2f:8e:b7:ff:3c:5d:2d:8f:30:8d:c1:fa:71:af:3e:8f:78:e7:
         4c:54:04:5c:b6:28:18:97:3f:fd:bf:37:27:bf:c8:6c:63:d3:
         41:5f:0c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org