Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3138362e3234392e3138382e302f32332d3233203d3e20323632353332.roa
File:                     3138362e3234392e3138382e302f32332d3233203d3e20323632353332.roa (raw, json)
Hash identifier:          Re2iONreWl1ytm7rsBMRKl9ityp5o466gcAO4NoCkqY=
Subject key identifier:   94:66:B0:9F:DE:F1:12:B8:DA:F0:75:0F:CC:28:79:68:01:23:01:79
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       64283D3E2905BD901469E66A25154B3F1C2B17E8
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3138362e3234392e3138382e302f32332d3233203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:52 +0000
ROA not before:           Thu 04 Apr 2024 14:11:52 +0000
ROA not after:            Thu 03 Apr 2025 14:16:52 +0000
asID:                     262532
IP address blocks:        186.249.188.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:28:3d:3e:29:05:bd:90:14:69:e6:6a:25:15:4b:3f:1c:2b:17:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:52 2024 GMT
            Not After : Apr  3 14:16:52 2025 GMT
        Subject: CN=9466B09FDEF112B8DAF0750FCC28796801230179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:08:50:e3:85:dc:89:7d:59:c0:46:b4:20:3c:
                    d7:d1:79:a4:72:e7:bc:c3:5e:21:3b:52:9d:93:1a:
                    df:bc:1d:aa:94:cb:85:32:83:cb:2f:5d:86:3e:65:
                    02:d6:5f:db:10:1f:65:85:35:c6:05:b6:92:46:35:
                    40:e5:60:34:ff:46:b3:af:f1:bb:18:3e:fe:9d:49:
                    af:30:06:3b:3c:67:14:a7:da:23:17:2b:99:49:eb:
                    46:1c:07:67:02:f5:c3:4e:6d:81:40:ed:38:ff:cc:
                    6d:6f:d5:9f:06:2b:42:4e:3f:47:f8:4e:c4:63:9f:
                    45:95:b0:9d:5e:68:b0:7f:78:ee:50:f7:f0:49:36:
                    44:56:32:6b:cf:90:fd:15:9d:ed:06:26:8d:c5:cc:
                    f2:73:2a:69:a0:bc:e5:2c:b4:13:59:a6:0c:07:b9:
                    1d:37:a3:82:58:f1:90:60:1d:b4:79:71:26:03:e0:
                    66:13:13:ca:3a:d7:98:70:3d:25:43:0d:96:90:4c:
                    f2:0b:16:96:55:bd:a9:27:70:46:65:4b:0b:c3:78:
                    de:0d:b0:19:88:d2:7e:d0:cf:28:0d:55:ce:7a:f2:
                    74:d2:ad:7e:52:2c:e0:a9:5b:de:f1:94:58:54:21:
                    28:1f:a7:4c:61:a6:66:cd:09:3d:82:df:f2:01:fd:
                    8c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:66:B0:9F:DE:F1:12:B8:DA:F0:75:0F:CC:28:79:68:01:23:01:79
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/3138362e3234392e3138382e302f32332d3233203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:24:ea:68:18:f5:2e:e4:ef:6a:58:f9:0b:78:3a:80:92:7e:
         d7:95:e0:f4:bc:13:91:19:12:1b:1d:16:c3:88:3c:42:36:01:
         ff:b9:6a:60:31:bf:75:60:4b:2c:da:09:4b:b3:2c:2c:63:63:
         28:6d:a8:ab:75:42:ed:48:d0:08:86:c0:0d:ac:f1:7f:48:2e:
         9f:c5:ae:a0:6d:16:84:67:f0:48:b1:18:a0:7e:52:5d:d7:6b:
         fd:dc:61:1b:04:66:de:e7:e3:86:3a:eb:d8:41:6e:61:c0:ae:
         ff:c4:01:bf:47:59:0f:26:17:9e:a8:b0:14:92:f2:fb:ae:1b:
         03:ee:0d:7b:df:c5:9d:6a:48:ce:a1:a2:ec:33:90:80:c5:ee:
         f3:d4:0c:98:1b:78:f6:34:f3:c5:f1:09:bb:a2:f2:33:30:c0:
         b3:b6:05:ad:6c:e1:ab:2a:ba:9d:d0:e0:47:a1:87:ef:7c:9e:
         92:f9:36:a7:8f:4e:4c:08:6a:00:cf:1c:2d:b3:47:34:e3:0e:
         ae:ed:1f:be:1c:c0:9a:66:f0:c6:0e:c6:97:b2:f7:3a:d4:e4:
         4b:f9:1d:32:6a:77:d0:3c:b5:db:bd:03:4f:a9:99:be:54:a8:
         3b:56:0a:73:eb:41:e9:e4:2d:13:9e:74:75:a7:d7:37:d8:3b:
         66:3c:17:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org