Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a3a2f33352d3335203d3e20323632353332.roa
File:                     323830343a6563383a3a2f33352d3335203d3e20323632353332.roa (raw, json)
Hash identifier:          jgzVbE0NjAb4BZP2gI2OVhtKGVht3hKC6CuDKc0bTko=
Subject key identifier:   35:42:6F:84:39:21:3A:78:2C:A3:4B:33:96:C3:76:D0:28:3E:EB:22
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       653D3A9262372884BE44D56D4AF1E3F51D822A6A
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a3a2f33352d3335203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:54 +0000
ROA not before:           Thu 04 Apr 2024 14:11:54 +0000
ROA not after:            Thu 03 Apr 2025 14:16:54 +0000
asID:                     262532
IP address blocks:        2804:ec8::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:3d:3a:92:62:37:28:84:be:44:d5:6d:4a:f1:e3:f5:1d:82:2a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:54 2024 GMT
            Not After : Apr  3 14:16:54 2025 GMT
        Subject: CN=35426F8439213A782CA34B3396C376D0283EEB22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:17:2c:2a:b9:f0:f2:af:98:1e:21:34:76:44:
                    cb:84:c8:de:85:2c:51:5a:8a:ad:8c:d5:ea:cd:70:
                    70:45:32:51:e1:7b:ac:b1:e1:8e:f6:63:d3:63:cb:
                    e1:f7:06:e4:1b:c4:c4:de:92:f0:9b:43:d7:9c:42:
                    28:2a:09:30:ea:6d:55:1f:aa:3b:aa:d1:d2:b0:66:
                    00:49:cc:06:4d:c6:4d:a9:e5:d5:60:75:f1:40:6d:
                    2c:38:4f:ae:3b:7b:bc:fa:6d:c2:ac:0f:8f:8c:fe:
                    0d:9f:29:12:e3:1f:a2:26:6b:86:a3:30:35:e8:91:
                    b7:78:e4:48:0f:85:f8:7d:bc:9c:37:8b:d5:c4:8f:
                    d3:15:3a:f0:dd:26:6f:d6:92:da:8c:72:55:69:4a:
                    b3:0b:c3:e1:83:c8:42:86:ea:d6:40:ea:a1:1d:a9:
                    a7:37:a5:40:c4:96:cc:e3:65:f8:2d:69:e3:c2:b3:
                    d4:3c:cc:ad:e2:9b:30:84:4f:d7:21:18:61:1c:d5:
                    30:74:f1:eb:5e:e8:f4:53:83:8c:70:96:4f:a4:24:
                    ed:4a:b6:3a:0d:f0:6d:65:a4:de:10:9b:d0:bc:ed:
                    70:84:bc:db:08:cc:28:f1:5b:56:09:78:9a:0c:f1:
                    aa:9d:60:24:b7:f6:f0:8d:04:f8:47:c6:16:19:31:
                    0e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:42:6F:84:39:21:3A:78:2C:A3:4B:33:96:C3:76:D0:28:3E:EB:22
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a3a2f33352d3335203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8::/35

    Signature Algorithm: sha256WithRSAEncryption
         b3:37:b8:44:c0:26:7d:04:c3:5b:e6:63:1e:1b:aa:37:76:fa:
         5b:17:e1:ce:7b:0d:3b:77:35:21:37:d4:72:02:5b:6a:fe:d7:
         82:ed:0e:fc:c2:6d:5c:58:52:af:00:28:de:f1:03:51:36:e3:
         40:67:07:c3:62:40:cf:d1:72:bf:ae:50:da:1c:d0:18:fc:ec:
         a4:e5:92:ba:50:29:36:fb:0a:08:51:43:80:cd:9f:67:56:f0:
         4c:94:6a:d0:57:fe:48:e8:4b:ba:2d:94:0e:74:63:ef:04:9e:
         6e:f2:a8:48:e3:26:e6:08:de:e3:b4:cf:b8:a5:98:b5:95:4c:
         a6:2f:a6:81:ba:9a:e5:2d:d7:fe:57:6b:47:3e:64:9f:3d:49:
         85:a5:a2:3d:13:f6:ae:6e:0b:df:7d:b7:34:b9:10:a4:8e:59:
         0a:b7:aa:f9:aa:10:77:ea:3c:ed:d0:17:35:f6:64:88:bc:9f:
         a0:7b:15:91:fa:ce:80:fd:cc:99:b5:da:63:5d:69:aa:9e:f9:
         2e:34:f1:05:ec:78:8e:a4:20:d7:59:09:39:1f:19:10:10:36:
         c1:61:34:6a:9a:b9:12:d7:64:80:7b:e8:11:d4:3e:e4:98:d2:
         07:12:c8:77:24:66:46:7a:2c:87:5f:ca:b6:b2:aa:2c:53:3b:
         39:01:40:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org