Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a373030303a3a2f33362d3336203d3e20323632353332.roa
File:                     323830343a6563383a373030303a3a2f33362d3336203d3e20323632353332.roa (raw, json)
Hash identifier:          0q1MCNyId7SxYVp3a94co0HSnMUsOY2b415RIGcg2c4=
Subject key identifier:   DF:7F:88:A1:AE:F7:18:AB:7E:01:1C:B2:67:71:20:C4:CD:BC:F0:AF
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       4344E206EAC82E380A2B22A148E34C70EC0A9FAB
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a373030303a3a2f33362d3336203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:51 +0000
ROA not before:           Thu 04 Apr 2024 14:11:51 +0000
ROA not after:            Thu 03 Apr 2025 14:16:51 +0000
asID:                     262532
IP address blocks:        2804:ec8:7000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:44:e2:06:ea:c8:2e:38:0a:2b:22:a1:48:e3:4c:70:ec:0a:9f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:51 2024 GMT
            Not After : Apr  3 14:16:51 2025 GMT
        Subject: CN=DF7F88A1AEF718AB7E011CB2677120C4CDBCF0AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:16:2d:c9:18:e2:cb:1d:60:1c:8b:cb:a1:2e:
                    be:bf:12:6b:3e:9e:d1:59:a2:dd:11:cf:27:31:91:
                    12:b2:32:65:2e:76:8b:21:ff:d5:32:a5:ff:ad:dc:
                    7f:23:25:61:ae:5c:f7:b8:c5:89:83:ef:79:6b:93:
                    9b:4b:09:7e:6c:31:be:95:1e:32:f6:d1:a8:1e:89:
                    9c:3a:95:ee:99:ed:bc:b3:bf:03:08:c7:33:31:81:
                    8a:83:f4:42:ad:fc:c1:82:5c:55:38:96:f1:37:ac:
                    54:d2:c7:e5:b0:03:ae:3d:22:00:08:33:5a:ff:79:
                    fd:10:cb:d2:89:05:16:fe:36:e1:bb:26:bc:c3:24:
                    d6:4c:54:e1:21:2c:eb:b9:35:f2:a8:8c:3c:80:77:
                    76:39:ae:3d:60:23:12:db:16:25:7c:93:4d:46:5a:
                    c2:b7:03:7c:6a:57:c8:30:a6:44:60:82:0d:6a:da:
                    51:fb:03:6d:01:1e:63:ea:e8:bb:0e:84:cc:48:da:
                    da:ad:7b:e2:34:0e:6e:a0:d0:0c:ca:5c:16:d2:0b:
                    89:ec:a6:9d:18:a1:64:cd:ed:ae:1b:f5:d4:4f:ec:
                    4b:ae:18:8c:8c:42:ac:99:03:d3:d0:b8:ad:13:42:
                    11:c8:be:7a:0b:e5:e3:69:e2:e1:0b:99:c2:a7:fa:
                    f4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7F:88:A1:AE:F7:18:AB:7E:01:1C:B2:67:71:20:C4:CD:BC:F0:AF
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a373030303a3a2f33362d3336203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         84:ca:51:4c:a9:5a:5a:fa:6a:22:90:ec:d0:e4:f4:c5:0c:f1:
         d8:ad:5f:7f:46:25:54:31:75:26:52:92:14:70:dd:41:e8:66:
         47:f6:1b:db:cf:a9:aa:a2:43:3f:4a:b7:5a:d7:fd:c6:69:91:
         d3:60:76:1a:2b:4e:20:5c:28:36:57:9a:bb:30:46:a9:ae:e3:
         82:ba:49:be:c7:0c:9a:ed:2e:0a:b8:d5:34:01:2c:2c:d3:96:
         b2:e9:13:70:77:b8:4e:76:38:d0:30:d9:49:09:4d:0c:f0:e4:
         94:2a:37:d0:ff:a6:7b:a6:bd:a4:13:17:65:87:d9:ff:70:29:
         08:8c:e9:8e:4f:04:4b:6a:71:c9:32:b6:bd:94:d3:a9:49:fa:
         bd:96:c7:5a:34:02:d1:9c:8f:ec:db:59:3b:eb:d2:c5:ec:b0:
         6d:ea:7f:4c:2a:8b:55:7b:d3:e2:db:5a:c3:c2:32:d3:ec:a7:
         14:71:cc:5f:81:30:78:b8:9f:73:a7:7b:ef:6f:1a:8e:10:c0:
         0f:d5:13:77:38:b0:79:17:fd:05:67:60:91:fd:45:1b:04:0f:
         0e:af:06:2f:19:17:29:a4:37:50:4f:2a:2f:dd:6e:41:7e:d3:
         b0:00:0b:23:a9:e0:6e:20:9e:0b:cc:42:6a:58:a3:4c:09:c8:
         2b:73:2d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org