Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a633030303a3a2f33342d3334203d3e20323632353332.roa
File:                     323830343a6563383a633030303a3a2f33342d3334203d3e20323632353332.roa (raw, json)
Hash identifier:          8r6EY7Pfv3BYQDzGrGkdobpy2UBLt5T/t3nhzmNFUA0=
Subject key identifier:   97:06:54:EA:C7:94:66:AD:7F:28:F2:F5:BB:0E:A0:0E:20:DF:E5:35
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       173762D00C76BB7748C1FC67D938064047ED818F
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a633030303a3a2f33342d3334203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:50 +0000
ROA not before:           Thu 04 Apr 2024 14:11:50 +0000
ROA not after:            Thu 03 Apr 2025 14:16:50 +0000
asID:                     262532
IP address blocks:        2804:ec8:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:37:62:d0:0c:76:bb:77:48:c1:fc:67:d9:38:06:40:47:ed:81:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:50 2024 GMT
            Not After : Apr  3 14:16:50 2025 GMT
        Subject: CN=970654EAC79466AD7F28F2F5BB0EA00E20DFE535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ce:e0:f0:4d:a1:6a:b4:a1:53:b7:b0:d6:9c:
                    ca:c1:b9:7e:fe:a8:27:74:2b:42:11:6a:2c:b1:64:
                    46:b4:88:98:4f:3f:44:73:62:19:16:8f:01:23:e0:
                    bf:90:39:eb:ea:d9:04:03:e4:b3:56:cb:80:e4:cf:
                    6b:70:67:3f:d1:ff:8c:92:00:f1:ff:53:5e:54:5a:
                    74:f9:78:19:01:14:21:9c:20:0b:94:01:27:28:02:
                    b3:87:e4:33:44:d3:f8:be:ac:04:55:98:d5:43:54:
                    f0:32:c3:e8:8a:3e:b1:11:b1:d7:06:8f:d6:48:b7:
                    c7:c4:f6:b9:f2:35:bc:b4:ab:3d:31:9e:40:bd:dc:
                    59:01:eb:e1:11:63:df:4e:48:08:42:41:8e:d6:e2:
                    68:e5:4d:e7:d5:5c:a6:18:22:c1:7c:9f:fc:f3:99:
                    e8:74:2e:f7:74:de:4a:af:b3:2a:ef:f2:0e:d2:5e:
                    08:be:09:fc:26:8d:24:61:04:5d:45:46:42:be:cd:
                    61:89:d7:0c:93:62:46:6d:97:ba:2e:50:ba:74:8e:
                    57:df:4d:d4:af:29:86:a8:bd:6a:58:9f:71:d0:19:
                    68:25:a2:fa:f4:c6:ec:4c:4c:4f:99:57:67:7c:bc:
                    5b:c1:6d:2f:a5:81:cb:f4:99:52:73:a6:cd:fa:7e:
                    da:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:06:54:EA:C7:94:66:AD:7F:28:F2:F5:BB:0E:A0:0E:20:DF:E5:35
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a633030303a3a2f33342d3334203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         09:0d:8b:41:fb:77:d2:cb:00:17:ae:04:3a:f5:79:d7:4b:68:
         40:59:6c:69:02:5a:60:91:97:eb:56:07:e0:a4:74:5b:f9:63:
         53:65:ca:b0:7b:aa:1b:82:c3:ad:61:80:bb:89:de:0a:a2:da:
         71:88:0c:a3:7f:90:94:56:a9:af:f2:f8:f7:a2:35:39:f0:65:
         ea:ca:97:99:f7:66:97:88:11:53:43:0a:a4:b9:a5:39:84:9d:
         18:e5:47:85:d4:3c:15:2a:32:0c:f7:59:93:23:49:e5:f4:b0:
         45:bc:e8:98:7e:b4:d4:f8:a8:3f:80:86:97:f9:1d:13:a8:4b:
         45:6e:53:22:2d:86:60:b3:0c:78:63:ee:1e:6a:21:28:f0:5a:
         dc:35:63:f5:55:fb:e4:d4:df:6b:50:68:dd:67:81:a8:55:1f:
         3a:63:33:05:5a:88:ca:fb:2a:fd:62:88:7e:77:49:93:79:c9:
         33:26:38:62:fc:70:74:d9:76:57:91:53:3b:3c:dd:93:a2:96:
         49:58:87:8d:de:e9:8e:54:59:e8:fe:d6:89:eb:eb:12:48:cb:
         76:e7:32:36:f2:e4:a8:79:8b:a4:37:16:31:e4:1c:88:1e:61:
         8a:7c:c2:5d:7b:a8:19:82:d0:3c:9d:a9:b8:10:62:d3:19:12:
         f8:3a:30:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org