Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a3a2f33332d3333203d3e20323632353332.roa
File:                     323830343a6563383a3a2f33332d3333203d3e20323632353332.roa (raw, json)
Hash identifier:          UF5EWMvWot2DYuXUZnYekZ37ba4s/wIymc9gDvIXa3k=
Subject key identifier:   38:4F:15:47:AB:AC:5C:CF:5B:CE:B3:86:F1:79:79:E6:58:9A:73:96
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       1CE06D72C0CE1084BB642DF5B13B871A2E76FEA8
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a3a2f33332d3333203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:52 +0000
ROA not before:           Thu 04 Apr 2024 14:11:52 +0000
ROA not after:            Thu 03 Apr 2025 14:16:52 +0000
asID:                     262532
IP address blocks:        2804:ec8::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e0:6d:72:c0:ce:10:84:bb:64:2d:f5:b1:3b:87:1a:2e:76:fe:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:52 2024 GMT
            Not After : Apr  3 14:16:52 2025 GMT
        Subject: CN=384F1547ABAC5CCF5BCEB386F17979E6589A7396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4c:7a:db:0b:14:c7:82:9e:5f:a9:0c:c4:71:
                    ae:69:77:ce:d0:a2:7d:be:a7:3d:20:28:55:f6:c8:
                    c1:b1:eb:d9:0d:c0:e9:7a:54:47:1c:1d:46:05:25:
                    22:b1:ae:2e:4b:34:58:cf:9f:62:b5:1c:ea:1d:d3:
                    26:6a:6c:28:4f:fb:f9:49:f6:db:f6:1a:f7:43:dc:
                    31:2e:b5:8b:fc:e1:f0:84:0f:91:02:22:09:68:8b:
                    68:12:01:d4:61:9f:19:5c:3a:5b:5f:8f:98:37:bf:
                    2d:d4:9d:3b:44:a3:76:04:06:ba:d8:be:f1:4b:53:
                    5d:4c:58:92:8f:67:3d:33:ec:9f:cd:d4:01:dc:c0:
                    b4:ba:f2:18:40:6f:75:f6:a1:7b:ae:67:50:2c:71:
                    19:ec:99:b0:44:ab:e9:fb:0c:20:f0:3a:d6:b0:0f:
                    78:8d:4f:cc:81:d8:a5:0c:03:b1:89:0b:83:12:50:
                    b2:25:93:48:c5:f8:3d:5a:d4:c0:16:bc:dd:19:81:
                    54:d7:48:91:45:8e:8d:8d:8f:fb:cc:48:19:d5:38:
                    76:7e:8d:e7:40:d0:73:36:86:4f:69:21:c8:f3:c6:
                    36:fa:83:f7:66:de:4c:ca:56:6a:cc:cc:ba:8d:b7:
                    49:e6:e5:1f:05:3e:a4:2c:b0:fa:0e:0e:ca:71:67:
                    43:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4F:15:47:AB:AC:5C:CF:5B:CE:B3:86:F1:79:79:E6:58:9A:73:96
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a3a2f33332d3333203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8::/33

    Signature Algorithm: sha256WithRSAEncryption
         ba:9e:56:29:00:84:ff:14:94:1a:8e:ad:ca:ea:98:22:5e:c3:
         91:89:b5:9d:d6:18:99:a2:79:d8:ee:7a:49:f1:3f:4c:23:7b:
         9a:b1:7a:3c:76:de:19:58:30:fa:39:1e:17:85:dd:06:71:d3:
         82:fe:95:5c:37:f6:60:1a:f1:71:31:a0:78:45:f2:44:94:dd:
         28:0c:d8:e6:b6:d2:cb:ed:78:ba:10:49:f3:91:d1:dd:b5:04:
         81:3a:51:6b:fd:f3:79:bb:ad:f7:96:71:b3:93:0b:47:d2:33:
         e2:d3:f9:2a:3a:b5:e0:e9:85:5e:f3:41:df:7f:fa:6c:fb:83:
         c6:04:49:b6:02:a3:d6:36:07:ca:c5:38:0f:17:d9:ed:41:cf:
         f7:59:e8:50:21:46:2c:ac:fb:04:76:35:8c:7a:52:5a:96:57:
         54:61:a5:06:23:75:3a:39:77:34:37:ae:c1:fe:1a:29:28:cf:
         ee:0a:17:a5:04:c0:6c:97:47:b6:98:13:82:02:c5:ec:fc:e8:
         48:95:f7:56:0f:5d:52:28:0f:96:b5:39:21:97:99:b0:ec:e6:
         d9:54:1f:d5:30:06:0e:b4:ef:18:3b:8f:27:82:54:f5:8e:83:
         41:ec:7a:f1:2a:85:24:e0:aa:8d:84:e4:23:af:99:65:6c:2d:
         c6:0e:11:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org