Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a613030303a3a2f33352d3335203d3e20323632353332.roa
File:                     323830343a6563383a613030303a3a2f33352d3335203d3e20323632353332.roa (raw, json)
Hash identifier:          OtYWXYk1pFOSNTqszaxyOQobZDn0D6Q0zZeXAE5mu+Q=
Subject key identifier:   B5:E0:CD:21:73:F5:D9:ED:BB:C0:56:E4:EC:F1:EA:36:37:67:2C:44
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       7FD7721F226C15AC7DAECB2FBBC9CDF3FF0109A7
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a613030303a3a2f33352d3335203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:56 +0000
ROA not before:           Thu 04 Apr 2024 14:11:56 +0000
ROA not after:            Thu 03 Apr 2025 14:16:56 +0000
asID:                     262532
IP address blocks:        2804:ec8:a000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d7:72:1f:22:6c:15:ac:7d:ae:cb:2f:bb:c9:cd:f3:ff:01:09:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:56 2024 GMT
            Not After : Apr  3 14:16:56 2025 GMT
        Subject: CN=B5E0CD2173F5D9EDBBC056E4ECF1EA3637672C44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3c:a7:e3:51:43:ac:00:dd:4a:f6:8b:3c:2f:
                    cf:b3:76:ce:d3:3f:a7:49:18:a8:39:38:9f:ec:18:
                    cf:63:c1:e9:3d:81:4c:f5:b8:c5:be:2a:e1:ed:fc:
                    89:6e:00:a8:33:5d:ef:96:c8:76:bb:78:1c:4d:85:
                    e0:79:b6:e4:1b:75:91:f8:05:85:16:89:49:8f:0b:
                    9d:c2:ff:2b:30:3c:b7:f8:e7:05:5f:f4:6d:21:11:
                    62:a4:a6:0c:1d:af:c1:8d:5b:8b:7d:ec:13:50:c3:
                    b6:2b:95:9c:73:cd:30:d1:15:cc:5d:50:c6:17:3c:
                    21:d1:c4:bd:7c:fb:e9:96:be:d1:36:ca:8e:df:19:
                    e7:f5:6f:2a:88:3f:06:d2:9d:21:00:84:4f:f7:fd:
                    34:a2:f7:d8:63:47:65:a2:97:30:fa:72:24:21:59:
                    f3:c0:7f:61:1d:32:f4:62:9c:0d:f1:0a:d0:b4:b8:
                    20:52:d3:3e:8d:94:c4:c9:27:c7:d2:0e:f5:d7:2d:
                    39:e5:62:a9:17:d8:17:4a:c0:11:a7:9a:8e:7e:7e:
                    e5:f9:3f:ab:ca:81:c7:e9:b0:b2:cc:fc:bc:a1:c4:
                    89:bd:a5:46:e2:f1:c7:d6:93:ba:1e:b0:cb:9c:86:
                    58:4d:24:4b:6e:65:b3:48:c7:8f:75:39:c1:15:d0:
                    e6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E0:CD:21:73:F5:D9:ED:BB:C0:56:E4:EC:F1:EA:36:37:67:2C:44
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a613030303a3a2f33352d3335203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         62:b8:fa:36:a0:71:fa:ec:a6:62:5a:27:37:0c:11:51:18:9f:
         a0:a6:e8:b7:64:0d:ac:b2:83:78:cf:c5:dc:c4:9c:0d:39:40:
         f7:b5:d3:1d:f3:0e:7f:ae:fd:25:f9:52:26:ad:38:d9:ec:6d:
         3f:38:03:ee:e7:e7:96:e5:b5:98:83:70:41:fb:0f:1e:c4:1f:
         76:f5:8c:ef:a5:4b:7c:51:78:1a:8c:00:0b:6d:3c:d9:fe:a5:
         15:99:32:da:46:2b:29:7c:7a:e2:c9:0f:1c:c9:b8:19:ab:f5:
         be:0b:83:97:e8:a0:89:f8:b7:48:24:2a:c4:94:13:95:d1:39:
         06:df:8a:9a:7f:f5:e6:d7:2e:d6:0a:5e:ab:8a:b4:0c:0d:68:
         73:3d:c5:e5:48:eb:5d:7c:37:91:b9:08:8e:1c:2c:f9:5e:77:
         2c:e9:09:e2:a7:96:33:d2:52:6e:66:d8:51:e2:63:29:00:82:
         32:2d:de:60:50:e3:a5:e5:1f:52:cb:b4:7b:5e:47:8b:0a:3f:
         ea:09:da:24:fc:d7:5f:56:f3:c9:65:37:82:8a:6f:80:87:79:
         9a:9a:cc:21:fa:f1:17:6a:7b:6f:04:ba:fb:a2:0b:e7:aa:e7:
         81:aa:40:9e:f1:f3:5b:d3:2e:dc:44:b6:e3:ca:8a:1b:1c:59:
         3d:4d:a9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org