Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a3a2f33362d3336203d3e20323632353332.roa
File:                     323830343a6563383a3a2f33362d3336203d3e20323632353332.roa (raw, json)
Hash identifier:          h0PXYGN2/T4SLn6UXQpwCUF8Og/2Ktfwep0zq+ake8U=
Subject key identifier:   74:41:A6:26:59:12:84:00:95:AC:0F:4C:6A:1D:68:AE:06:3B:4B:EA
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       51F60B29BC65A1DDA8F979788D3A1FF4E3BF8F75
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a3a2f33362d3336203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:55 +0000
ROA not before:           Thu 04 Apr 2024 14:11:55 +0000
ROA not after:            Thu 03 Apr 2025 14:16:55 +0000
asID:                     262532
IP address blocks:        2804:ec8::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f6:0b:29:bc:65:a1:dd:a8:f9:79:78:8d:3a:1f:f4:e3:bf:8f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:55 2024 GMT
            Not After : Apr  3 14:16:55 2025 GMT
        Subject: CN=7441A6265912840095AC0F4C6A1D68AE063B4BEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2a:6b:1e:25:d0:3d:76:cf:ed:97:87:7f:08:
                    cb:ca:77:a3:0b:fd:fa:57:22:60:65:66:b2:98:bd:
                    7c:0f:99:ad:56:01:7b:5e:10:97:56:12:c6:f9:82:
                    c3:75:43:d1:fa:77:4d:1f:a7:10:65:e5:3d:b2:ee:
                    dd:e1:b8:dd:15:bb:76:97:ea:1e:be:c3:c9:ef:a7:
                    6a:fe:1f:52:4d:10:fc:97:75:ec:0f:b0:9c:d4:3d:
                    ec:82:f7:ed:00:ae:f1:bd:e4:99:6a:2e:ff:0d:7e:
                    ec:e1:6b:ea:0f:bd:32:32:8d:a2:2d:40:93:2e:6c:
                    21:0c:01:94:59:4a:f6:e4:e6:0c:0e:60:ad:49:a1:
                    4f:e9:5c:a1:b6:a4:dd:79:58:5c:4a:aa:08:7f:a2:
                    d0:e2:a3:e7:d1:d0:23:23:86:36:e9:b3:92:f9:5d:
                    49:ef:55:11:0e:9b:97:f4:06:b8:d8:91:b8:c5:d6:
                    a7:5e:80:e0:6b:3a:a3:cd:1d:01:55:ff:31:1d:d9:
                    37:0b:9b:2b:1a:f6:58:a9:b1:e3:e6:cc:77:5a:36:
                    c1:bb:af:6c:6d:f6:fe:f9:37:6e:0c:ed:df:28:34:
                    24:fe:7e:59:d7:05:dc:67:61:78:15:4a:37:bd:e5:
                    74:37:43:83:13:99:8e:f9:9e:b6:2e:d0:d1:68:63:
                    29:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:41:A6:26:59:12:84:00:95:AC:0F:4C:6A:1D:68:AE:06:3B:4B:EA
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a3a2f33362d3336203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8::/36

    Signature Algorithm: sha256WithRSAEncryption
         63:37:19:4c:5b:00:93:7e:a7:a8:0c:e7:9e:16:d4:88:de:34:
         70:06:4c:87:55:a8:41:d0:9b:03:46:1a:51:5a:e7:5a:4e:f9:
         3e:c9:78:c9:96:e3:f5:b2:33:47:e1:5c:28:93:22:dd:38:7b:
         1c:bf:6d:22:06:b1:e5:41:c2:c5:d5:5f:e8:1d:db:c3:b0:4a:
         91:48:a1:08:67:c0:1b:22:aa:f6:0f:86:64:dc:40:66:cb:9d:
         b1:1a:bd:01:ad:d4:bd:2b:7d:e0:91:ad:0d:b4:48:63:76:4b:
         cf:d1:ee:84:53:f4:91:1e:e0:6d:89:07:7f:ee:ae:3f:cd:d1:
         2e:29:67:7b:7f:11:0f:a6:ad:53:a8:ef:f8:99:59:b6:3a:46:
         9b:78:b5:71:af:a2:e2:91:26:32:22:8e:dc:40:4e:1e:3e:7a:
         97:69:a7:cb:d7:e7:d7:ab:b5:3a:ff:cb:98:a0:f2:47:26:80:
         7d:19:fe:c8:da:0c:99:64:5d:94:65:bb:ed:ee:41:e5:e4:17:
         ca:e6:ff:6a:bf:31:90:95:04:3b:83:ef:c3:5a:2f:70:c7:f5:
         48:d7:9b:7c:7b:43:a9:e1:36:ce:b7:ee:52:8f:eb:bc:cf:55:
         06:46:04:72:c7:e0:79:a3:6a:53:94:99:d4:15:1c:db:d4:56:
         d1:da:39:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org