Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a343030303a3a2f33362d3336203d3e20323632353332.roa
File:                     323830343a6563383a343030303a3a2f33362d3336203d3e20323632353332.roa (raw, json)
Hash identifier:          TFlRjBBJJL2dmj3e+WGGhf+WYFc/NlwxCh0/ut05li8=
Subject key identifier:   D4:71:20:CC:0D:35:2E:11:A1:77:0E:EC:2A:D1:90:52:87:E6:18:26
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       751C71AF5FAE21DF14B1224D28154B5E83C04800
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a343030303a3a2f33362d3336203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:52 +0000
ROA not before:           Thu 04 Apr 2024 14:11:52 +0000
ROA not after:            Thu 03 Apr 2025 14:16:52 +0000
asID:                     262532
IP address blocks:        2804:ec8:4000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:1c:71:af:5f:ae:21:df:14:b1:22:4d:28:15:4b:5e:83:c0:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:52 2024 GMT
            Not After : Apr  3 14:16:52 2025 GMT
        Subject: CN=D47120CC0D352E11A1770EEC2AD1905287E61826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:11:2a:6d:ab:74:3d:32:9d:8f:c6:cb:51:58:
                    04:9d:ac:14:e6:3c:73:63:d1:d6:59:5c:42:d9:0d:
                    1c:f9:cb:d6:04:5b:e8:19:cf:99:f7:23:b0:2f:25:
                    73:46:50:c6:03:10:0b:0d:d7:9b:a3:d9:85:f8:fb:
                    1a:7e:01:0b:de:01:52:03:21:ae:70:e8:82:4e:3d:
                    bc:08:e1:ae:f4:c8:26:0f:88:79:43:c5:39:13:65:
                    df:39:43:72:3b:62:6c:90:55:e0:90:8b:d2:f0:9d:
                    54:f4:47:2a:f7:2e:a2:ec:40:bc:2b:c8:d0:3d:e5:
                    fe:5a:50:46:05:e0:a5:ab:a6:98:a1:f5:59:c1:d6:
                    b2:b7:b2:b8:39:18:d9:39:68:45:17:ff:ca:cc:ec:
                    cd:01:5e:b0:2a:c5:0e:78:f1:75:57:e6:35:7a:bb:
                    2f:a0:0f:6d:27:1c:07:c7:41:90:66:d0:2c:e2:ee:
                    c4:37:b7:c7:d5:5e:59:f2:49:54:5d:dd:1f:2e:a8:
                    3a:49:a2:01:ca:8d:34:64:58:5d:c8:88:18:aa:1f:
                    c3:ab:82:ec:c2:7a:10:34:a6:0e:9d:79:39:9b:e0:
                    5b:d1:9c:70:78:6f:f8:aa:a5:66:47:68:23:c5:33:
                    24:8d:1c:f1:0c:97:8d:47:ab:fd:f2:95:bf:d7:94:
                    f5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:71:20:CC:0D:35:2E:11:A1:77:0E:EC:2A:D1:90:52:87:E6:18:26
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a343030303a3a2f33362d3336203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ba:fa:fb:9e:23:01:b0:c8:12:84:bf:e0:77:af:8d:73:73:02:
         6b:66:a0:e4:70:51:e2:9f:b5:5a:86:94:10:5c:3d:00:94:96:
         0f:a2:65:f7:d0:25:be:a4:5e:5a:95:6d:0d:28:a3:31:6e:f0:
         24:ae:63:be:69:b0:ac:f4:12:18:f3:99:6d:40:66:54:26:47:
         71:56:61:5b:b7:22:68:e7:58:04:3e:8d:b1:69:73:9b:af:38:
         98:d2:67:e2:11:0d:fa:75:02:cc:5a:71:c1:52:4b:62:c7:ca:
         7c:4f:db:7a:7d:5e:92:e9:c5:85:85:eb:ba:bc:31:7b:92:19:
         73:da:69:cf:17:be:70:90:b8:4a:80:d6:be:89:3e:44:f6:b4:
         8b:24:85:a4:34:27:51:a6:64:a2:f8:66:0f:29:75:ba:52:c9:
         34:f4:40:b7:de:32:a3:fa:48:fb:cf:de:d1:e5:a3:62:66:40:
         4a:1e:21:49:bf:8a:5d:14:a4:06:ef:5e:77:79:19:46:97:ad:
         6e:0d:23:ad:64:65:06:4e:e3:65:b1:50:20:f8:62:c8:91:1b:
         36:74:c7:b9:7c:2f:ce:0e:6c:e4:94:fe:bc:f8:14:ce:21:0a:
         6c:a2:0f:1c:4c:f0:82:49:74:68:32:ef:63:2a:d7:0a:61:55:
         31:53:d6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org