Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a633030303a3a2f33362d3336203d3e20323632353332.roa
File:                     323830343a6563383a633030303a3a2f33362d3336203d3e20323632353332.roa (raw, json)
Hash identifier:          nC6Q6f042RUweVvk4JJIROviwcCzbfKZFfa3fs5ZCWk=
Subject key identifier:   B8:DB:CE:03:83:38:3F:97:D9:F1:C7:40:B2:07:13:98:5A:F5:88:CF
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       512526B6D4ACC15A95BFE8A4B4F5DE7C5A7A740B
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a633030303a3a2f33362d3336203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:55 +0000
ROA not before:           Thu 04 Apr 2024 14:11:55 +0000
ROA not after:            Thu 03 Apr 2025 14:16:55 +0000
asID:                     262532
IP address blocks:        2804:ec8:c000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:25:26:b6:d4:ac:c1:5a:95:bf:e8:a4:b4:f5:de:7c:5a:7a:74:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:55 2024 GMT
            Not After : Apr  3 14:16:55 2025 GMT
        Subject: CN=B8DBCE0383383F97D9F1C740B20713985AF588CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7d:0a:08:b7:af:3e:c7:c2:3a:46:8b:e0:4a:
                    e8:25:8a:d3:e5:e2:8c:d3:be:fc:d5:1d:9a:62:2c:
                    01:3c:cd:63:04:f1:65:6d:27:19:33:51:f9:2d:04:
                    26:ab:0e:dc:f8:1e:aa:50:39:84:95:da:cf:8b:e7:
                    90:12:74:5e:da:45:aa:4e:d4:50:52:fa:0a:94:9c:
                    ff:58:1e:38:7f:8e:12:e3:17:77:98:c0:9e:17:22:
                    09:fc:c9:f7:82:86:cd:24:f9:91:34:1a:72:b7:17:
                    d3:09:eb:96:5b:52:1d:5b:90:58:1a:97:c5:72:6e:
                    cd:02:97:aa:f4:07:a2:e9:a3:bc:f0:fb:75:9e:48:
                    6e:c0:a0:b2:70:f1:bd:ce:51:89:9b:b2:e0:f0:6f:
                    73:bf:bc:0d:71:88:f8:0b:13:f7:c1:00:11:d1:67:
                    a6:98:72:bd:04:4d:b3:25:67:42:c9:8a:63:c4:86:
                    9e:28:39:ed:d8:55:6f:3e:1b:bc:36:48:1d:5d:1d:
                    98:a9:a3:6b:29:2f:f8:6b:ab:ba:22:85:95:97:4c:
                    63:a4:9c:50:b1:9c:98:13:0d:4c:95:a4:2c:b2:99:
                    db:39:ca:44:b5:71:f8:5a:07:98:e0:2a:e5:c3:84:
                    25:bb:60:9b:97:3e:85:4e:b3:bc:49:97:77:9d:06:
                    32:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DB:CE:03:83:38:3F:97:D9:F1:C7:40:B2:07:13:98:5A:F5:88:CF
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a633030303a3a2f33362d3336203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c7:c0:66:27:1b:9c:10:48:c5:21:75:92:71:69:59:de:f1:35:
         67:02:fd:46:17:b2:c3:f1:81:a2:f9:ec:41:dc:f2:97:66:d9:
         80:07:a8:f7:e9:75:5c:37:d1:20:87:18:2f:61:5d:a4:66:ca:
         02:9b:53:28:a1:8d:42:b4:c4:d2:1b:e8:e2:9f:7e:85:d7:6f:
         5c:8b:a2:f8:9b:00:95:cd:6d:1f:4e:2e:cb:e1:04:9c:c2:f1:
         e0:dc:d1:dc:07:d6:29:c0:5d:bc:ff:fd:53:be:e0:8b:2c:04:
         69:5f:ea:a9:07:73:6b:d4:aa:e2:97:0e:ea:fc:57:91:43:f1:
         dc:ea:62:0f:76:18:ef:f8:cf:48:71:a5:9a:5a:08:5e:af:aa:
         9c:bf:82:9a:ae:77:97:cd:39:e2:77:5c:d5:d9:c6:85:2d:fd:
         56:36:b4:fc:c6:f3:0a:e9:db:e6:d4:71:2e:92:82:d8:33:61:
         13:00:f7:15:4b:c2:de:b2:90:3a:67:c4:76:3e:0b:f4:8a:8c:
         98:b3:8c:d1:bb:94:1b:51:ab:52:64:94:28:d5:4e:3d:d7:5d:
         89:4f:a0:c1:33:4d:e3:52:07:01:33:5b:83:2f:31:29:33:42:
         bb:e7:f6:37:c3:6c:d2:ea:aa:a1:ca:e1:54:8d:44:e9:19:e2:
         cd:ad:e4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org