Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a343030303a3a2f33342d3334203d3e20323632353332.roa
File:                     323830343a6563383a343030303a3a2f33342d3334203d3e20323632353332.roa (raw, json)
Hash identifier:          KJlI8Zbdyoah5bIfl78/Pa1t/dfb40q9QuLSjXQWq+Q=
Subject key identifier:   58:3E:A4:04:29:B2:E9:AA:AE:BD:C0:04:C5:31:01:B5:84:D9:78:9D
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       7C8EB8AE6F9845F4A022F49DDFAED1C00BD7EA41
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a343030303a3a2f33342d3334203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:52 +0000
ROA not before:           Thu 04 Apr 2024 14:11:52 +0000
ROA not after:            Thu 03 Apr 2025 14:16:52 +0000
asID:                     262532
IP address blocks:        2804:ec8:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:8e:b8:ae:6f:98:45:f4:a0:22:f4:9d:df:ae:d1:c0:0b:d7:ea:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:52 2024 GMT
            Not After : Apr  3 14:16:52 2025 GMT
        Subject: CN=583EA40429B2E9AAAEBDC004C53101B584D9789D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9f:0c:c5:ca:09:15:1e:64:d2:d4:7b:01:d9:
                    23:59:b3:63:b7:56:78:7d:bf:ee:e9:46:26:91:ee:
                    18:34:16:3c:2a:ef:a7:05:f8:15:74:ee:08:b9:c2:
                    40:10:af:fd:3e:15:46:98:b3:c8:fc:99:88:14:d2:
                    cc:e5:a7:57:fc:88:93:60:d6:d5:48:ef:52:43:7e:
                    97:d2:d4:5d:50:88:ce:d1:f9:f1:b6:bc:c3:9f:1b:
                    e7:ec:41:78:a9:ed:2e:6f:ff:97:89:57:7d:91:ae:
                    e1:e2:f9:d5:a0:d0:6f:8b:5c:03:00:2f:f8:d7:bf:
                    7c:96:34:ee:0d:31:d0:3e:4d:ee:5b:81:48:b0:02:
                    3a:78:37:25:9e:20:d4:3f:44:a7:75:69:7b:cc:69:
                    12:67:1e:6e:62:68:2c:07:a7:bc:4b:4f:a3:20:67:
                    2f:f6:71:0d:18:8a:8a:25:98:6e:55:71:f6:9e:ae:
                    04:6f:e4:b5:87:77:df:9d:98:32:54:b7:5e:68:3d:
                    71:92:5b:ac:eb:fd:73:e9:ee:73:1f:5e:9c:f5:81:
                    6b:45:c9:7a:67:20:24:26:7d:41:82:c2:d3:17:97:
                    d6:53:1b:a4:3d:4d:75:47:a6:c0:9b:26:90:83:74:
                    ea:aa:21:1a:cb:7b:2e:86:db:dc:0d:7c:2f:ed:4b:
                    a3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3E:A4:04:29:B2:E9:AA:AE:BD:C0:04:C5:31:01:B5:84:D9:78:9D
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a343030303a3a2f33342d3334203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7d:64:db:7a:2d:9e:1d:11:33:79:81:10:91:c4:b4:b3:f9:bf:
         f0:f2:f9:71:8d:99:21:20:bb:e8:82:c1:73:10:78:23:82:a9:
         f3:fe:af:61:11:d2:be:99:93:74:23:c2:d2:8d:ec:cc:72:33:
         93:ae:a0:e6:f5:5a:05:f2:d7:9e:50:8f:0e:da:53:37:d8:e5:
         06:dd:5f:cb:f4:eb:35:63:d5:2e:3b:31:f2:5c:7e:8b:5f:11:
         17:33:d9:72:6c:32:24:3c:f1:a1:f7:f2:c2:39:cd:e7:f1:9b:
         6a:3d:13:a3:13:c4:05:d1:6f:96:a7:6f:79:6f:ae:04:3f:ad:
         0e:34:17:47:5c:66:04:e2:13:42:3a:99:67:c6:e1:1c:a1:40:
         56:df:d1:ab:16:4f:ca:f3:64:34:29:b2:b4:05:d7:dc:5e:cc:
         b0:3b:bb:13:ac:27:cc:8e:13:a9:4c:7d:fd:90:65:28:80:54:
         3d:9b:50:08:5f:3e:3f:a0:20:3b:50:ce:f9:89:e5:ee:83:ff:
         30:24:d1:0f:da:f9:dc:61:fd:f4:17:bb:38:f9:d7:b6:f0:50:
         d6:13:a5:75:14:25:b7:3a:8a:e4:ab:27:d3:34:fd:77:22:f9:
         79:6e:0c:ae:7a:ec:1c:de:e8:57:d5:3b:da:f0:49:ae:4b:fb:
         cc:0d:9b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org