Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a623030303a3a2f33362d3336203d3e20323632353332.roa
File:                     323830343a6563383a623030303a3a2f33362d3336203d3e20323632353332.roa (raw, json)
Hash identifier:          CrnOokGzc8wD6Zh+nFcQAiE2yv+/p9RPkuzx69hfcnc=
Subject key identifier:   23:33:59:14:37:AB:89:10:72:7C:62:3D:A6:2B:F0:05:F5:DD:31:21
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       2F368525E1FF70997D831CD2B4C74BE6A16D9D55
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a623030303a3a2f33362d3336203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:55 +0000
ROA not before:           Thu 04 Apr 2024 14:11:55 +0000
ROA not after:            Thu 03 Apr 2025 14:16:55 +0000
asID:                     262532
IP address blocks:        2804:ec8:b000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:36:85:25:e1:ff:70:99:7d:83:1c:d2:b4:c7:4b:e6:a1:6d:9d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:55 2024 GMT
            Not After : Apr  3 14:16:55 2025 GMT
        Subject: CN=2333591437AB8910727C623DA62BF005F5DD3121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3c:30:35:8d:c6:7a:54:08:e2:bb:ca:97:1a:
                    2a:cf:36:02:06:e4:a3:2f:e0:e1:5f:9d:84:bf:73:
                    86:26:5a:5d:d3:63:4d:9e:6f:0e:75:33:cb:39:93:
                    af:7c:da:ac:2f:38:4b:c8:23:12:da:6a:73:f6:4b:
                    32:2f:9f:6b:a1:3b:d3:d5:05:1b:cf:6c:d3:63:3a:
                    d7:1c:5a:d9:74:0a:70:42:62:d2:e5:64:8d:4a:89:
                    82:c5:ba:00:df:c4:24:97:08:a2:a6:29:cc:cc:fc:
                    f2:42:96:cf:53:39:8b:09:6b:7d:a4:3f:cc:05:06:
                    58:f0:e3:fd:81:bb:77:c4:9f:0f:e6:dc:f1:e2:a2:
                    b4:6c:f5:e1:df:69:ce:db:a5:31:74:e8:8b:87:5a:
                    94:15:21:77:ab:c9:c5:3d:4b:77:a2:66:33:01:39:
                    0e:52:3a:a3:cc:31:6b:a3:3f:01:15:1d:4c:c9:be:
                    a8:d4:5f:ec:06:65:50:e0:49:eb:0e:24:72:1f:1e:
                    42:95:bd:02:f1:26:53:de:90:32:a7:e1:48:b9:79:
                    bf:e1:1d:83:6b:dd:2d:72:eb:ff:03:11:e3:64:43:
                    94:a4:13:f3:98:e6:da:70:e0:ee:71:58:a5:73:f7:
                    eb:f2:e9:16:51:98:46:17:85:be:14:35:1f:c9:21:
                    73:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:33:59:14:37:AB:89:10:72:7C:62:3D:A6:2B:F0:05:F5:DD:31:21
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a623030303a3a2f33362d3336203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         27:a5:b6:28:cd:21:04:6d:b9:16:40:a2:4f:c8:4e:82:0e:e5:
         3d:0e:5d:79:21:22:44:80:1f:ab:51:5a:f0:37:59:54:5b:5c:
         e3:24:d6:cb:63:b2:c1:71:14:40:9d:2e:25:12:7a:70:d7:5a:
         6f:67:a4:81:85:18:99:70:3b:cc:7e:b6:12:d0:15:73:3d:09:
         3e:40:77:31:0b:c2:9b:dc:7b:ac:ce:fb:2c:de:32:5b:1b:ed:
         32:0a:19:27:87:2d:fd:1f:6b:01:d7:05:60:a5:2f:d8:e6:d6:
         98:b6:46:11:73:62:d4:0b:ff:6f:47:9e:dd:a3:e2:9b:b7:6b:
         00:fb:d8:a0:91:2f:3b:03:ea:4d:ae:1d:5a:16:37:ab:05:8f:
         48:81:ca:88:22:48:ab:67:0d:c1:28:84:63:90:08:5b:e3:d5:
         af:34:2c:56:3a:c3:2d:d9:52:c7:ab:75:06:d3:b3:51:a9:e7:
         30:41:e1:85:e6:2d:c0:eb:06:eb:28:6a:f2:1a:ad:0f:45:82:
         2c:2c:3e:7b:fb:73:31:44:2a:7c:fd:66:fd:41:6d:bc:48:f9:
         69:22:2d:44:10:73:19:07:c0:76:30:37:da:5a:37:52:4c:5b:
         d9:44:34:1a:04:2d:8e:24:ed:d2:bd:14:92:f7:b3:8d:0c:76:
         78:41:94:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org