Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a313030303a3a2f33362d3336203d3e20323632353332.roa
File:                     323830343a6563383a313030303a3a2f33362d3336203d3e20323632353332.roa (raw, json)
Hash identifier:          VdH0p6nEh6eb4IwBJhyRDSQWA3EsjaVIn3Ws+Il/KLI=
Subject key identifier:   0E:C7:EE:40:E6:BC:94:C7:70:CD:83:E9:C3:09:98:EA:66:23:34:51
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       637252AF8109068944BC35C29C7731EDD391D293
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a313030303a3a2f33362d3336203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:54 +0000
ROA not before:           Thu 04 Apr 2024 14:11:54 +0000
ROA not after:            Thu 03 Apr 2025 14:16:54 +0000
asID:                     262532
IP address blocks:        2804:ec8:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:72:52:af:81:09:06:89:44:bc:35:c2:9c:77:31:ed:d3:91:d2:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:54 2024 GMT
            Not After : Apr  3 14:16:54 2025 GMT
        Subject: CN=0EC7EE40E6BC94C770CD83E9C30998EA66233451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ac:0f:62:08:4f:04:fa:72:68:4f:ef:9a:6f:
                    50:03:69:1b:11:69:52:bb:18:a1:97:9d:98:17:2c:
                    46:5c:77:1f:b1:4a:7f:ec:44:02:33:37:c2:4f:d4:
                    16:1d:a2:6d:64:ff:e6:59:ff:ab:93:67:0c:31:3a:
                    82:cc:8a:15:c2:26:6b:9c:59:aa:e4:9b:1b:6a:7e:
                    d3:88:73:64:03:33:ae:a4:de:35:b0:5f:2d:69:5c:
                    b1:c9:5c:0f:c9:6b:15:26:5c:8a:eb:ed:1f:60:5c:
                    a0:a1:61:e3:5f:1a:7f:6b:4e:56:55:76:22:05:0a:
                    30:85:45:0d:ac:76:e1:84:03:3f:2b:4d:ed:33:55:
                    81:98:a8:37:6c:50:80:6c:ca:fd:56:cf:ac:b1:20:
                    8f:3a:9c:84:98:18:94:7f:86:02:0d:2f:5d:39:ae:
                    cb:86:5f:13:9d:4c:f6:ed:8c:e3:87:a6:28:53:d9:
                    dd:c3:8a:ae:c0:8f:2d:9c:87:2e:d6:e1:36:88:19:
                    da:12:e8:46:16:a1:51:d2:07:8c:3a:16:44:63:c7:
                    ce:86:ec:c0:95:13:f7:84:a8:a0:33:94:64:1b:ed:
                    04:eb:16:9f:8a:0e:0e:95:ef:56:47:37:35:94:8d:
                    fb:20:00:39:61:c3:1d:5b:bc:1b:02:7b:24:09:81:
                    86:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C7:EE:40:E6:BC:94:C7:70:CD:83:E9:C3:09:98:EA:66:23:34:51
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a313030303a3a2f33362d3336203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         32:af:1a:4f:50:e3:a9:83:98:59:4b:86:21:11:04:33:30:a3:
         42:79:b6:a3:69:30:39:dc:05:70:6a:be:1b:74:4c:dc:8e:05:
         8f:c7:a2:ba:f3:38:f7:6a:12:e1:a2:02:74:87:da:e5:2f:1a:
         46:1f:9b:cf:dc:89:e2:19:b5:9a:37:83:4f:10:66:35:00:65:
         37:34:e0:ec:3e:16:be:43:28:ea:d8:be:30:2f:e2:d7:b5:c0:
         42:56:2c:c2:de:01:ee:d6:91:63:62:ab:94:76:49:b7:67:83:
         ef:32:05:d7:cd:b7:f0:92:50:dd:8a:26:76:22:64:1d:2a:3a:
         04:ed:49:ef:fa:ef:5d:52:f0:93:02:71:f4:a0:74:77:89:70:
         8d:f4:a1:14:2e:a4:9a:f9:24:42:df:53:20:4c:04:ad:21:6c:
         ae:2c:61:4c:9d:7b:f2:9d:84:f7:12:0e:8e:0f:61:2e:a0:5e:
         8e:d3:63:2d:4c:79:ca:6d:26:4e:f3:d2:78:75:a8:f5:a6:65:
         ab:e8:d7:79:dc:51:1e:d0:8a:99:55:52:4d:97:2d:3f:10:4d:
         3a:f5:25:21:81:69:0b:02:4a:aa:69:80:d7:17:9a:2c:07:85:
         7e:c5:30:3b:6b:6f:14:ec:4c:2e:1f:6a:ac:b9:14:70:6b:ad:
         28:93:9f:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUY3JSr4EJBolEvDXCnHcx7dOR0pMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUVDNjM4QjQ1OUI0N0IwMDIwM0EzODY4RDBERjVGRjlB
REREQjQzMDAeFw0yNDA0MDQxNDExNTRaFw0yNTA0MDMxNDE2NTRaMDMxMTAvBgNV
BAMTKDBFQzdFRTQwRTZCQzk0Qzc3MENEODNFOUMzMDk5OEVBNjYyMzM0NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5rA9iCE8E+nJoT++ab1ADaRsR
aVK7GKGXnZgXLEZcdx+xSn/sRAIzN8JP1BYdom1k/+ZZ/6uTZwwxOoLMihXCJmuc
WarkmxtqftOIc2QDM66k3jWwXy1pXLHJXA/JaxUmXIrr7R9gXKChYeNfGn9rTlZV
diIFCjCFRQ2sduGEAz8rTe0zVYGYqDdsUIBsyv1Wz6yxII86nISYGJR/hgINL105
rsuGXxOdTPbtjOOHpihT2d3Diq7Ajy2chy7W4TaIGdoS6EYWoVHSB4w6FkRjx86G
7MCVE/eEqKAzlGQb7QTrFp+KDg6V71ZHNzWUjfsgADlhwx1bvBsCeyQJgYblAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUDsfuQOa8lMdwzYPpwwmY6mYjNFEwHwYDVR0j
BBgwFoAU7sY4tFm0ewAgOjho0N9f+a3dtDAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGtxVVhZcUpWRWs5dG15bTQxUXB0ZmVSdGpnazNpS3o0eGVRNXZIaVA1
dFYvMS9FRUM2MzhCNDU5QjQ3QjAwMjAzQTM4NjhEMERGNUZGOUFERERCNDMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VFQzYzOEI0NTlCNDdCMDAy
MDNBMzg2OEQwREY1RkY5QUREREI0MzAuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hrcVVYWXFKVkVrOXRteW00MVFwdGZlUnRqZ2szaUt6NHhlUTV2SGlQNXRWLzEv
MzIzODMwMzQzYTY1NjMzODNhMzEzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzMjM2MzIzNTMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBA7IEDANBgkqhkiG9w0BAQsFAAOC
AQEAMq8aT1DjqYOYWUuGIREEMzCjQnm2o2kwOdwFcGq+G3RM3I4Fj8eiuvM492oS
4aICdIfa5S8aRh+bz9yJ4hm1mjeDTxBmNQBlNzTg7D4WvkMo6ti+MC/i17XAQlYs
wt4B7taRY2KrlHZJt2eD7zIF18238JJQ3YomdiJkHSo6BO1J7/rvXVLwkwJx9KB0
d4lwjfShFC6kmvkkQt9TIEwErSFsrixhTJ178p2E9xIOjg9hLqBejtNjLUx5ym0m
TvPSeHWo9aZlq+jXedxRHtCKmVVSTZctPxBNOvUlIYFpCwJKqmmA1xeaLAeFfsUw
O2tvFOxMLh9qrLkUcGutKJOfPQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org