Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a323030303a3a2f33352d3335203d3e20323632353332.roa
File:                     323830343a6563383a323030303a3a2f33352d3335203d3e20323632353332.roa (raw, json)
Hash identifier:          2vim6zb8cKK1w9C08AM3yAEhaSC1nGAxG+G2Z+UqrcY=
Subject key identifier:   E3:C3:C7:08:69:9C:B4:9D:D4:D0:85:33:89:A1:D6:67:80:9A:1F:54
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       5A70F6C093ECC99E64ED224AC9AD1D0C496E1D7A
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a323030303a3a2f33352d3335203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:54 +0000
ROA not before:           Thu 04 Apr 2024 14:11:54 +0000
ROA not after:            Thu 03 Apr 2025 14:16:54 +0000
asID:                     262532
IP address blocks:        2804:ec8:2000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:70:f6:c0:93:ec:c9:9e:64:ed:22:4a:c9:ad:1d:0c:49:6e:1d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:54 2024 GMT
            Not After : Apr  3 14:16:54 2025 GMT
        Subject: CN=E3C3C708699CB49DD4D0853389A1D667809A1F54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3d:9f:4f:30:19:3c:de:cb:fd:5d:de:23:2e:
                    50:f4:3f:17:77:77:0e:4e:c3:5e:87:0a:fc:8f:e7:
                    da:6e:8a:da:fd:43:09:ad:04:29:80:9b:34:f9:dc:
                    70:09:b9:34:3d:21:de:9b:a0:98:6a:05:57:cf:5a:
                    9a:f5:12:4a:1e:a7:bd:9c:f6:9a:fe:f1:fd:37:ca:
                    11:39:e2:df:a6:1b:35:58:fc:00:86:28:e1:77:0e:
                    f8:bb:36:01:d7:49:f0:42:a2:1a:dd:93:2d:6c:16:
                    4c:a6:dc:d0:17:e4:71:f3:60:f6:5d:83:c2:08:fc:
                    4c:01:06:4b:4f:0b:30:a2:4e:60:fe:3e:70:58:e2:
                    9e:6e:de:87:5a:4e:e7:38:e6:80:8a:66:08:51:03:
                    57:53:1d:ea:f3:a8:fe:26:b7:64:da:bb:02:c3:9a:
                    f6:f5:46:b5:cd:45:88:44:67:5b:37:e0:6f:67:22:
                    e4:b6:7e:38:8c:5f:c1:30:a4:e0:bd:fa:43:bb:f1:
                    ab:90:95:fd:a8:50:54:b7:51:2f:0c:d9:ce:4d:93:
                    7c:29:7d:14:84:b5:88:f0:6a:86:63:ca:44:c7:be:
                    a1:bd:03:07:8f:90:b0:e2:7c:91:7c:12:f6:20:b2:
                    d3:22:f9:56:f7:d8:01:95:38:34:5e:76:ca:30:c1:
                    21:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C3:C7:08:69:9C:B4:9D:D4:D0:85:33:89:A1:D6:67:80:9A:1F:54
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a323030303a3a2f33352d3335203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         1e:7a:69:c0:a4:94:5c:59:99:1b:2c:1f:97:19:b4:b0:84:fd:
         21:e3:e1:98:60:54:92:4c:98:bc:2a:26:92:44:36:f5:77:f5:
         e8:5a:e4:b9:92:85:9c:c9:fc:56:f4:db:e5:7f:2d:8f:da:0b:
         e3:e9:20:3b:ac:e8:ef:d8:80:84:ad:cc:e2:1b:c2:37:88:cb:
         b7:2d:9a:71:73:d4:ed:72:4c:8c:37:8f:9a:b4:97:86:83:6d:
         3f:35:01:0f:26:99:d5:ab:53:43:4e:2b:fc:29:3b:2c:82:92:
         7e:34:b8:85:85:41:a0:3b:45:0d:ac:59:de:4e:77:36:0f:67:
         27:e2:a9:53:67:f9:f9:c6:ba:80:e0:8b:cd:d5:e5:90:fb:89:
         4a:a3:5e:53:03:fd:70:81:5a:38:15:0b:1e:b8:6c:a6:c9:6f:
         d0:b2:8c:40:1e:a5:99:87:7f:92:5b:ea:32:e4:10:38:f8:d5:
         53:13:76:2e:2b:8a:39:59:52:a2:d1:90:e0:5d:e6:2c:48:42:
         71:12:25:60:c8:45:04:75:ce:d0:a2:e5:00:1d:b2:f8:05:1a:
         a1:ce:d2:62:5e:62:44:c3:aa:fc:05:f5:c0:b4:5f:2a:a1:74:
         19:d7:3c:77:9b:61:48:41:76:7f:7d:2d:0e:81:70:2d:04:7d:
         ca:bd:de:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org