Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a633030303a3a2f33352d3335203d3e20323632353332.roa
File:                     323830343a6563383a633030303a3a2f33352d3335203d3e20323632353332.roa (raw, json)
Hash identifier:          RFN09MgcEeiXq72iHte5q6P2cRzB9ZTfalby2Un1g+o=
Subject key identifier:   B4:F3:48:88:F4:53:B0:0D:B6:5F:ED:82:D6:D9:27:31:B6:D1:90:85
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       01BFED04B6F1E4AFA67F57CB1CF8F89C41F9C8FC
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a633030303a3a2f33352d3335203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:52 +0000
ROA not before:           Thu 04 Apr 2024 14:11:52 +0000
ROA not after:            Thu 03 Apr 2025 14:16:52 +0000
asID:                     262532
IP address blocks:        2804:ec8:c000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:bf:ed:04:b6:f1:e4:af:a6:7f:57:cb:1c:f8:f8:9c:41:f9:c8:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:52 2024 GMT
            Not After : Apr  3 14:16:52 2025 GMT
        Subject: CN=B4F34888F453B00DB65FED82D6D92731B6D19085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ea:1b:35:ce:11:07:46:b8:7d:0e:08:0d:21:
                    12:78:66:a2:15:8a:32:7f:a1:17:e2:4e:e5:fe:af:
                    f6:b6:cf:db:37:4a:d3:0d:be:66:d3:c4:20:4e:1c:
                    cc:89:39:da:91:7b:96:7f:72:e0:4c:89:b6:28:89:
                    0c:16:4d:24:09:98:22:04:2f:f9:1a:ed:18:b2:72:
                    00:3b:b9:d2:64:bd:4a:16:1d:e5:5f:30:16:47:01:
                    ac:f0:5c:5a:46:34:e7:2f:19:b3:59:ac:50:d0:2c:
                    93:0b:f6:49:23:2a:c1:9b:0f:df:62:fd:32:5e:d6:
                    4e:d8:3c:1e:b5:f9:30:36:05:64:ff:d9:9e:d9:aa:
                    bc:6c:be:d8:3d:12:5d:38:f0:97:ca:58:4a:87:f0:
                    2d:d4:72:87:46:d8:de:bb:2c:9a:71:d3:1a:f5:e8:
                    09:1e:b3:73:52:ec:81:32:c2:e9:2f:a0:38:21:fb:
                    b2:14:fd:4a:d7:f9:69:03:05:b1:ca:52:00:f3:9a:
                    a1:e4:44:1a:d3:4d:c9:8b:43:dd:39:f6:49:1e:51:
                    b2:b4:be:41:5a:00:d4:e6:ee:0d:0d:6b:d4:c8:8c:
                    18:b2:b1:c0:b0:6e:70:f2:fd:4d:c2:e6:e0:3e:0f:
                    ac:49:1f:5e:18:f1:26:6d:9c:ff:91:cb:ac:4d:37:
                    ea:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F3:48:88:F4:53:B0:0D:B6:5F:ED:82:D6:D9:27:31:B6:D1:90:85
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a633030303a3a2f33352d3335203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         94:f1:b0:b8:d5:18:7a:f8:9a:74:34:51:d6:0a:85:a9:c4:e2:
         e8:36:4f:51:ff:df:27:34:09:d7:8c:62:b2:44:24:99:58:67:
         2c:6c:77:28:1f:12:3b:b4:82:34:9d:55:b7:75:f3:12:b0:10:
         e8:ac:d9:7d:0d:9e:1b:68:21:0f:45:96:c4:86:9c:f7:c6:02:
         73:3b:26:b1:4f:8a:c0:8f:48:c2:0e:88:68:10:bd:57:cd:d0:
         21:60:1a:50:76:1f:42:34:21:ab:ae:e6:29:94:83:76:22:46:
         1a:ed:85:6e:e1:11:5c:f2:f9:47:ae:0c:dc:97:4d:b0:d3:98:
         7e:70:f5:be:06:69:0b:a0:8b:91:d8:78:7e:c4:d1:2f:e9:54:
         a6:38:71:f7:f5:bb:2d:17:96:0d:8e:4c:e6:bf:09:8f:73:ea:
         a5:11:c0:57:74:c2:c3:3a:7c:d9:fb:b1:95:a8:a9:1f:7c:c1:
         64:47:74:51:1f:f3:3f:8e:d5:93:4d:0d:0f:fc:e2:b9:e5:5b:
         01:50:39:29:0d:5d:65:48:29:8c:0d:00:b6:c6:47:99:f4:da:
         c5:ee:32:1a:54:e5:5f:ba:90:e2:2e:4e:e4:9d:97:af:f1:91:
         50:88:d1:5d:1c:dd:e1:c9:ec:87:9b:82:0e:2d:bd:fa:d9:ff:
         23:0a:5e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org