Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a363030303a3a2f33362d3336203d3e20323632353332.roa
File:                     323830343a6563383a363030303a3a2f33362d3336203d3e20323632353332.roa (raw, json)
Hash identifier:          0Aq7vGdZ+XrdoBYp9stNrPmKzICEWYF41ipCgUdCxl0=
Subject key identifier:   45:F2:72:27:4F:3C:72:CC:01:DD:A3:74:32:DB:86:F3:16:45:FD:CB
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       400340E808C785CA903DC1E6B1E1038C02C5BF31
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a363030303a3a2f33362d3336203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:54 +0000
ROA not before:           Thu 04 Apr 2024 14:11:54 +0000
ROA not after:            Thu 03 Apr 2025 14:16:54 +0000
asID:                     262532
IP address blocks:        2804:ec8:6000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:03:40:e8:08:c7:85:ca:90:3d:c1:e6:b1:e1:03:8c:02:c5:bf:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:54 2024 GMT
            Not After : Apr  3 14:16:54 2025 GMT
        Subject: CN=45F272274F3C72CC01DDA37432DB86F31645FDCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1b:fb:c6:d4:c7:05:fc:0f:3a:ea:42:3b:3e:
                    2d:02:21:6c:29:6c:a7:c3:b6:88:4e:04:e4:cd:1d:
                    ec:a0:0b:c6:8a:9f:11:d4:33:02:32:3c:8f:fd:de:
                    d6:31:f3:81:09:8b:2b:41:3b:4b:7b:53:a4:c1:4a:
                    79:a3:1b:d5:b2:53:06:e9:b9:ac:0d:37:e1:35:40:
                    e9:d7:97:f6:d6:53:7e:f4:06:b9:20:13:f5:e7:ac:
                    7f:b0:30:af:a3:0d:ab:1f:7d:08:8c:3c:04:b6:a4:
                    4c:da:d4:c3:72:24:52:ce:6d:a6:81:92:a1:dc:9b:
                    68:8f:e4:42:1c:6a:68:c2:54:4c:46:68:98:ec:7b:
                    e8:87:94:2d:95:d3:1f:5f:6e:8f:78:1c:80:d7:54:
                    2a:71:cb:34:39:54:83:76:4c:4a:c3:82:d3:e4:e8:
                    31:e5:f8:47:f1:3b:58:91:e5:8b:a7:79:98:a1:84:
                    2f:c5:0a:8f:be:9c:fe:56:60:90:19:8a:8c:88:94:
                    a9:1f:ba:bf:be:e2:0a:eb:6c:f5:f4:6f:11:df:7d:
                    3a:10:60:04:48:a1:eb:4c:96:ac:1b:1d:60:e7:c7:
                    75:5b:39:a9:a4:7f:af:a4:53:f3:fa:bd:43:35:83:
                    50:8f:3f:2d:81:1f:e2:e7:4f:02:3a:31:af:20:e4:
                    04:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F2:72:27:4F:3C:72:CC:01:DD:A3:74:32:DB:86:F3:16:45:FD:CB
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a363030303a3a2f33362d3336203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         83:4f:21:85:c7:f0:5f:fc:1f:f8:01:e6:d9:a2:53:0b:53:e9:
         4d:dd:06:f9:9f:e5:d2:49:04:b0:e3:ac:1d:12:00:bb:8b:13:
         50:36:c7:d8:b7:a8:cd:68:1a:d5:eb:ff:b7:cd:a9:89:7d:ea:
         37:4e:26:ae:2c:89:65:69:2d:98:93:8e:c9:24:e9:55:7e:92:
         b2:1c:4f:8a:dc:78:0f:df:dc:d0:c6:d1:c5:9f:27:2c:b8:8f:
         c0:79:71:cb:dc:c2:8d:8a:cb:81:fc:b1:38:ee:17:7e:99:2a:
         60:86:ee:50:7c:df:d6:b5:05:ed:ee:b8:6c:9d:19:9b:a7:2f:
         5c:da:53:58:d4:e9:be:1b:fc:23:c9:50:8f:5f:72:5e:c5:fd:
         81:5b:5e:3f:28:a1:fb:ef:15:41:ce:8a:0f:97:4b:0f:4e:20:
         c5:1b:b5:78:85:91:3b:d1:d9:4a:ae:ef:4a:2b:a6:72:c4:61:
         86:7f:32:cc:16:03:07:27:61:b5:14:e1:14:eb:2a:8a:c3:57:
         fc:04:b3:46:fe:0d:ff:04:b7:59:2e:74:25:3d:09:bc:03:6a:
         52:8d:c6:96:8c:77:39:89:00:4c:93:26:2e:ae:d6:a9:ea:d2:
         9f:5c:1c:ad:a8:d1:35:30:d0:69:1c:9e:40:23:e1:75:1f:4d:
         10:21:0f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org