Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a343030303a3a2f33352d3335203d3e20323632353332.roa
File:                     323830343a6563383a343030303a3a2f33352d3335203d3e20323632353332.roa (raw, json)
Hash identifier:          y9GvcTEV1+Kskc2rysHRfQwliFsSBTpLIS1yo90CPvs=
Subject key identifier:   50:09:7C:82:78:81:D2:B3:4A:1B:0D:4B:B4:EF:CC:14:52:79:89:81
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       0798817AC25B286F09E726CD4B2EEB5BA238EA6D
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a343030303a3a2f33352d3335203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:50 +0000
ROA not before:           Thu 04 Apr 2024 14:11:50 +0000
ROA not after:            Thu 03 Apr 2025 14:16:50 +0000
asID:                     262532
IP address blocks:        2804:ec8:4000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:98:81:7a:c2:5b:28:6f:09:e7:26:cd:4b:2e:eb:5b:a2:38:ea:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:50 2024 GMT
            Not After : Apr  3 14:16:50 2025 GMT
        Subject: CN=50097C827881D2B34A1B0D4BB4EFCC1452798981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:13:bb:6d:ba:d0:d3:df:2b:62:3b:54:e8:dc:
                    2b:48:5d:d5:f8:bf:c9:b1:30:e8:95:37:43:54:81:
                    c4:33:64:8d:6b:fb:db:6f:53:8b:c4:79:78:54:1b:
                    b6:ab:87:5d:f4:75:5d:7f:79:10:75:c4:5c:df:01:
                    78:d7:8b:54:d7:c1:16:20:f5:23:02:01:57:c3:ed:
                    18:89:23:33:12:15:99:fa:b8:73:9f:61:5b:75:de:
                    5e:3b:bb:04:f1:89:ae:9b:96:3e:44:58:12:5f:21:
                    c4:f8:6b:c8:4b:96:5b:d1:6b:01:d7:62:28:fe:d2:
                    27:c9:fa:29:89:e5:42:0d:89:bf:01:fa:d7:60:29:
                    5f:64:d5:82:e5:df:95:31:de:5c:89:94:9a:de:d5:
                    53:5b:b4:34:56:28:64:be:92:f3:a8:b3:74:76:1b:
                    45:37:a7:09:e3:d1:65:27:82:3b:63:d1:a9:ff:6b:
                    13:c9:47:a0:1c:c5:f2:99:44:9a:db:8b:53:c8:19:
                    2d:56:e3:78:82:03:05:49:ca:5d:ae:ff:b2:37:1c:
                    a8:f8:a1:90:b2:45:b0:68:cf:55:6c:68:16:ec:da:
                    1c:1d:4b:d5:29:e7:fc:0e:9d:85:0e:2e:8f:3a:78:
                    ba:4e:f3:c9:db:98:3b:d7:6a:be:ae:60:76:12:30:
                    83:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:09:7C:82:78:81:D2:B3:4A:1B:0D:4B:B4:EF:CC:14:52:79:89:81
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a343030303a3a2f33352d3335203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         99:87:2c:f1:c3:0a:ce:1f:c9:35:5b:b3:ad:f3:a6:cc:fd:64:
         fd:b8:93:18:c3:f7:54:ff:b6:a6:c0:37:98:26:6e:89:a5:9a:
         05:b0:0c:aa:88:23:a5:b2:65:84:f2:b6:cc:02:bf:fd:af:4e:
         49:6a:a4:e7:1b:c0:a0:c9:b1:98:1f:97:e9:99:d6:c5:d8:dc:
         dc:b0:12:9a:c9:4c:5a:b3:fb:c4:e2:50:cf:a4:8f:5e:08:35:
         df:f0:1d:90:66:a5:66:18:95:5a:a2:61:40:eb:4f:6f:74:d7:
         f9:7a:5a:8a:7a:d3:ea:84:a9:de:d5:98:d2:7b:2f:24:72:c6:
         95:c2:28:d0:28:4c:3b:bb:1e:fe:70:81:49:c6:55:5e:03:68:
         32:b9:c9:b7:15:4a:d4:6e:4a:8c:9a:35:3f:e8:5f:2f:bb:aa:
         71:90:af:c0:60:c6:44:21:ab:81:f1:6d:30:6e:cb:8f:0a:72:
         10:5e:ac:1e:94:16:6d:de:00:02:32:3f:05:22:16:6e:0e:8f:
         03:19:96:05:00:a6:94:0a:90:29:26:4b:2b:9d:c2:23:e0:08:
         50:99:2b:97:92:42:64:1c:e8:97:9e:3d:25:18:7a:ad:f9:52:
         ef:43:31:e0:7e:9f:37:8f:90:97:45:03:f4:41:69:70:5a:77:
         bc:07:3e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org