Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a393030303a3a2f33362d3336203d3e20323632353332.roa
File:                     323830343a6563383a393030303a3a2f33362d3336203d3e20323632353332.roa (raw, json)
Hash identifier:          4YS3o3XX4RONzTNb/O3Y5vgZrwnrdOGgJFNdXakssvI=
Subject key identifier:   7A:B0:71:A2:6E:E3:AF:77:3F:97:EF:0A:31:AF:5B:AB:52:61:A1:8A
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       011B5923FBDA874C412AA8BED0FEA0CFAE9DDE22
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a393030303a3a2f33362d3336203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:53 +0000
ROA not before:           Thu 04 Apr 2024 14:11:53 +0000
ROA not after:            Thu 03 Apr 2025 14:16:53 +0000
asID:                     262532
IP address blocks:        2804:ec8:9000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1b:59:23:fb:da:87:4c:41:2a:a8:be:d0:fe:a0:cf:ae:9d:de:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:53 2024 GMT
            Not After : Apr  3 14:16:53 2025 GMT
        Subject: CN=7AB071A26EE3AF773F97EF0A31AF5BAB5261A18A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e2:3b:76:38:d0:c3:46:de:fb:77:67:68:5f:
                    8e:4d:40:ee:6e:3a:01:08:e6:6e:dc:9f:ed:42:b7:
                    3b:b7:6e:9e:eb:e4:ea:2b:d4:13:4d:1e:01:3e:05:
                    dc:78:db:72:9a:5d:1e:80:ae:c4:11:a2:96:f7:68:
                    8f:0d:3f:ef:2e:82:3f:8e:e4:61:fc:ed:01:bc:18:
                    23:9d:e8:0a:7d:50:05:84:d3:5a:03:a7:99:a4:c5:
                    a7:de:c1:30:12:22:f1:7b:f4:56:29:91:2c:ca:fd:
                    1c:84:96:1b:fd:2e:6f:5d:b8:ff:43:d2:47:06:53:
                    2c:e0:95:1c:78:3d:95:04:83:0b:1f:fe:16:b7:7a:
                    e4:07:38:17:0e:da:ba:c8:88:a2:f7:76:c2:49:c5:
                    a1:ea:bc:23:bc:cb:07:75:db:65:04:33:cc:ed:89:
                    48:35:6c:16:90:08:68:12:30:fc:6e:af:35:a0:4a:
                    5f:b6:50:68:30:18:ce:08:ff:5e:9f:1c:2f:ab:81:
                    77:6e:a1:0c:34:7f:6f:c4:e1:0a:ab:82:b4:bf:a5:
                    08:13:90:3d:d2:2d:21:1b:0d:96:eb:56:aa:30:58:
                    14:ee:43:84:e1:dd:36:78:af:33:cf:c1:a7:ae:38:
                    57:dc:4a:9d:76:8d:d5:52:ff:40:1b:a2:43:18:93:
                    6c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B0:71:A2:6E:E3:AF:77:3F:97:EF:0A:31:AF:5B:AB:52:61:A1:8A
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a393030303a3a2f33362d3336203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c0:c5:b9:86:46:a1:39:08:1b:b2:49:47:6a:5f:3e:94:a4:e9:
         ff:18:5e:62:9c:2e:e2:43:69:76:a1:82:31:91:85:ee:88:bb:
         48:e2:ef:91:7c:ab:c1:7d:4d:96:75:69:9f:23:06:dd:90:31:
         2a:69:ca:24:05:b6:c4:f1:2e:81:84:0e:9c:f0:0c:0f:e6:f0:
         7b:21:55:90:ac:bc:74:c8:4d:7d:8c:2e:15:96:a6:46:7d:4a:
         9e:13:37:82:d4:c5:51:7f:2f:26:9f:c0:da:a8:50:06:1f:b9:
         0d:1b:17:c3:ae:c6:92:31:ed:49:a7:76:e0:4b:2c:70:6a:cb:
         e9:cd:59:a1:60:67:a2:2f:04:a3:39:89:d0:c3:00:71:56:97:
         af:4b:a4:41:f7:82:e1:60:43:49:bc:e2:e1:eb:6c:ca:76:0c:
         21:0a:09:62:87:0d:6e:58:df:fe:3f:37:0f:83:21:4f:38:17:
         47:0a:c2:15:e3:c3:c7:ac:06:80:2b:78:33:6b:95:0d:05:be:
         70:c1:84:63:00:a2:68:7a:66:14:16:51:b0:23:c0:34:75:ea:
         95:f3:c8:5e:c6:02:9b:f4:94:71:3c:a2:2c:a3:43:a9:16:be:
         26:e8:20:e7:65:1f:2c:d0:3b:6e:7c:19:3a:46:eb:cf:07:84:
         51:c1:0c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org