Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a383030303a3a2f33342d3334203d3e20323632353332.roa
File:                     323830343a6563383a383030303a3a2f33342d3334203d3e20323632353332.roa (raw, json)
Hash identifier:          uuA1xEadSQr4x8Pty+rGwGLAYR4l3Wlfs3PsonzWib0=
Subject key identifier:   0C:04:C0:09:9C:4D:A4:AA:19:78:FD:D3:0E:5C:EC:BE:8B:4A:37:F9
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       44988047B837CFF5413A9919886037AE6ACC6820
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a383030303a3a2f33342d3334203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:55 +0000
ROA not before:           Thu 04 Apr 2024 14:11:55 +0000
ROA not after:            Thu 03 Apr 2025 14:16:55 +0000
asID:                     262532
IP address blocks:        2804:ec8:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:98:80:47:b8:37:cf:f5:41:3a:99:19:88:60:37:ae:6a:cc:68:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:55 2024 GMT
            Not After : Apr  3 14:16:55 2025 GMT
        Subject: CN=0C04C0099C4DA4AA1978FDD30E5CECBE8B4A37F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:67:d2:c4:4a:b1:3b:7f:29:73:48:0d:5c:48:
                    56:60:06:36:92:7b:84:22:b1:e9:35:fe:6c:10:c5:
                    6e:5f:aa:a1:1a:09:27:ad:83:96:ac:ed:d9:a4:58:
                    27:6e:5e:df:f4:7c:1a:8d:2d:4c:f7:ea:77:16:2e:
                    0c:1f:54:ed:01:a2:de:f3:73:af:da:6c:16:35:54:
                    15:e9:00:fa:83:a8:21:43:c8:d6:86:fa:2d:09:7c:
                    77:de:22:4e:a1:86:56:8a:dc:06:75:a0:05:49:5b:
                    4b:2c:cc:db:13:52:ed:73:80:49:be:cb:bb:78:47:
                    e5:14:3b:81:5b:7e:72:db:bf:77:9d:7e:57:14:5a:
                    be:9e:29:1f:21:dd:09:03:b8:31:f5:5b:6f:22:76:
                    98:50:d2:5a:12:ed:a1:df:54:23:65:27:de:db:83:
                    f3:10:b7:ca:d4:8a:34:ec:69:17:bf:80:60:ef:ab:
                    60:c6:bc:94:09:3d:ef:46:9a:4d:89:77:98:ba:9e:
                    3b:ea:39:e9:bd:8b:10:8b:13:aa:95:f8:a9:47:fa:
                    2c:97:8a:e8:33:3a:2b:9d:ef:53:21:b7:a8:64:1c:
                    ff:e6:f5:f5:0d:81:2b:72:d9:57:dd:91:ef:80:db:
                    85:0c:17:d9:37:4a:e7:00:ab:74:ea:3d:46:65:df:
                    05:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:04:C0:09:9C:4D:A4:AA:19:78:FD:D3:0E:5C:EC:BE:8B:4A:37:F9
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a383030303a3a2f33342d3334203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         21:6e:0d:91:b2:31:3a:d6:b7:5b:74:22:c3:f9:36:6b:98:26:
         52:ea:5a:d0:27:22:8f:3b:3e:34:06:84:17:c6:a3:f3:45:ca:
         e8:34:78:02:39:bf:f8:b5:66:39:9c:03:5b:58:40:e1:74:da:
         fa:dc:03:88:71:5c:0c:a8:ca:dc:70:cb:b1:1b:08:44:7e:0a:
         59:ae:18:56:1f:7e:4e:94:18:47:40:23:c1:1f:24:23:90:2b:
         a1:32:d6:af:5b:f5:43:c0:f6:93:39:07:9c:37:71:40:cb:38:
         7d:e5:66:67:86:4d:dc:67:4d:03:2a:d4:63:55:38:f2:45:50:
         1a:a4:4a:b7:df:fd:fd:a2:17:7d:50:81:04:d1:ae:c7:6d:0b:
         4b:4c:6a:22:ed:3f:1c:08:bb:e8:5a:9a:35:05:48:d5:03:94:
         e3:86:1e:1b:2d:bd:93:0f:6d:99:90:59:40:02:0b:6a:04:7c:
         32:2c:57:fa:8b:b0:e4:31:02:b4:9e:89:df:fb:92:3d:c6:f2:
         36:91:71:d7:87:de:df:e8:d7:bf:c1:29:43:54:bd:99:31:f2:
         c8:b1:79:b9:9d:13:fb:59:12:ee:fa:dc:c5:93:c8:89:6c:6f:
         8c:ae:eb:6c:c0:e8:fd:c4:5c:13:80:dc:6c:94:23:29:a2:2e:
         f1:bf:80:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org