Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a653030303a3a2f33352d3335203d3e20323632353332.roa
File:                     323830343a6563383a653030303a3a2f33352d3335203d3e20323632353332.roa (raw, json)
Hash identifier:          6zAebxQH3A5JDrB+zZMV5GNXnkUKUew+48YuOSS+xLk=
Subject key identifier:   06:12:AB:16:52:BE:5B:91:66:0C:75:B0:DB:F9:E6:B6:95:86:F2:C3
Certificate issuer:       /CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
Certificate serial:       4C3BFB25097473B5F62AD74554D570D9BA615DFB
Authority key identifier: EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a653030303a3a2f33352d3335203d3e20323632353332.roa
Signing time:             Thu 04 Apr 2024 14:16:52 +0000
ROA not before:           Thu 04 Apr 2024 14:11:52 +0000
ROA not after:            Thu 03 Apr 2025 14:16:52 +0000
asID:                     262532
IP address blocks:        2804:ec8:e000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:3b:fb:25:09:74:73:b5:f6:2a:d7:45:54:d5:70:d9:ba:61:5d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC638B459B47B00203A3868D0DF5FF9ADDDB430
        Validity
            Not Before: Apr  4 14:11:52 2024 GMT
            Not After : Apr  3 14:16:52 2025 GMT
        Subject: CN=0612AB1652BE5B91660C75B0DBF9E6B69586F2C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:62:b0:57:80:ae:f8:b1:c9:16:4e:79:0f:fe:
                    10:da:25:28:44:1f:15:0c:7d:f2:f7:04:d7:2e:b3:
                    8a:8b:21:98:7f:5b:fa:81:06:d3:65:eb:6f:8c:b1:
                    6a:fd:b8:8c:9b:64:19:f4:a0:b0:a3:9d:93:7a:52:
                    a2:e7:c4:cf:f1:43:7d:2e:17:43:ac:bd:70:a9:c1:
                    6e:80:21:70:59:2c:47:68:a8:e9:af:5d:e6:6d:d8:
                    4b:37:f2:80:dd:c0:bd:af:e8:66:b0:53:bf:0c:03:
                    71:3d:04:8f:f9:38:83:51:ff:26:2a:25:32:1f:3a:
                    f7:25:67:70:f0:d1:fd:ae:ec:1d:e3:7e:67:33:97:
                    53:5b:14:e5:94:59:dc:47:06:2a:2b:9d:07:9b:a7:
                    d1:6d:86:10:64:68:2c:47:36:a7:92:d6:2b:5a:b1:
                    4d:f4:2e:37:e6:b0:68:25:56:ea:08:7e:3c:0c:7f:
                    fb:13:e7:11:f4:b6:72:d1:b7:1b:2c:8f:b3:6f:98:
                    50:78:c2:c0:78:a3:d0:0b:d0:2d:20:51:28:d9:c8:
                    2a:8e:66:5b:29:0b:b2:c6:28:e9:c4:be:2a:0a:0c:
                    5e:fc:ca:1c:70:46:fb:34:84:35:9c:72:be:66:3b:
                    09:7e:0d:64:f9:96:c0:6c:16:d7:37:f2:51:b8:54:
                    5f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:12:AB:16:52:BE:5B:91:66:0C:75:B0:DB:F9:E6:B6:95:86:F2:C3
            X509v3 Authority Key Identifier:
                keyid:EE:C6:38:B4:59:B4:7B:00:20:3A:38:68:D0:DF:5F:F9:AD:DD:B4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC638B459B47B00203A3868D0DF5FF9ADDDB430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/1/323830343a6563383a653030303a3a2f33352d3335203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         ca:2d:82:4f:52:75:0d:7d:e7:e2:34:77:63:0b:8b:11:b7:1d:
         7c:a5:93:b5:5b:c6:25:3c:42:7f:c2:50:f6:40:50:88:30:7a:
         be:67:1c:4b:d4:5a:84:b1:cf:59:d5:8b:3a:9c:63:f3:4b:eb:
         fc:a7:d2:96:0d:79:f7:9e:ba:7b:2e:45:91:d7:00:ae:ed:4d:
         3f:d1:9f:3f:e3:62:f2:68:ce:ec:f2:c4:4f:48:f4:27:76:76:
         c3:c8:c2:ee:32:87:52:66:dc:1f:3b:97:d8:f6:b9:2c:a2:89:
         51:35:0c:3a:44:71:b4:53:30:d9:e4:26:14:f9:61:4f:36:78:
         7d:d7:4d:67:c1:14:0b:b2:6a:29:31:c1:aa:6d:3b:6c:e9:bf:
         c0:32:97:e9:79:b0:f8:f1:5a:80:54:4d:e3:25:c6:ea:6f:03:
         61:73:a2:44:41:16:19:9c:25:b5:41:77:82:af:24:ff:f1:86:
         1f:a1:74:d0:80:97:06:1d:09:64:85:60:2a:fe:e2:7a:0c:d8:
         8c:c5:aa:79:95:d8:3d:39:e9:e2:ad:56:06:61:3d:49:e2:79:
         0e:ad:a6:8c:3c:49:2b:77:d9:7a:1b:e7:7d:9b:46:d0:32:a6:
         bb:2d:bc:12:b3:c7:e3:34:70:12:f6:76:73:da:cc:57:4a:69:
         66:1d:d5:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTDv7JQl0c7X2KtdFVNVw2bphXfswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUVDNjM4QjQ1OUI0N0IwMDIwM0EzODY4RDBERjVGRjlB
REREQjQzMDAeFw0yNDA0MDQxNDExNTJaFw0yNTA0MDMxNDE2NTJaMDMxMTAvBgNV
BAMTKDA2MTJBQjE2NTJCRTVCOTE2NjBDNzVCMERCRjlFNkI2OTU4NkYyQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChYrBXgK74sckWTnkP/hDaJShE
HxUMffL3BNcus4qLIZh/W/qBBtNl62+MsWr9uIybZBn0oLCjnZN6UqLnxM/xQ30u
F0OsvXCpwW6AIXBZLEdoqOmvXeZt2Es38oDdwL2v6GawU78MA3E9BI/5OINR/yYq
JTIfOvclZ3Dw0f2u7B3jfmczl1NbFOWUWdxHBiornQebp9FthhBkaCxHNqeS1ita
sU30LjfmsGglVuoIfjwMf/sT5xH0tnLRtxssj7NvmFB4wsB4o9AL0C0gUSjZyCqO
ZlspC7LGKOnEvioKDF78yhxwRvs0hDWccr5mOwl+DWT5lsBsFtc38lG4VF/xAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUBhKrFlK+W5FmDHWw2/nmtpWG8sMwHwYDVR0j
BBgwFoAU7sY4tFm0ewAgOjho0N9f+a3dtDAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGtxVVhZcUpWRWs5dG15bTQxUXB0ZmVSdGpnazNpS3o0eGVRNXZIaVA1
dFYvMS9FRUM2MzhCNDU5QjQ3QjAwMjAzQTM4NjhEMERGNUZGOUFERERCNDMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VFQzYzOEI0NTlCNDdCMDAy
MDNBMzg2OEQwREY1RkY5QUREREI0MzAuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hrcVVYWXFKVkVrOXRteW00MVFwdGZlUnRqZ2szaUt6NHhlUTV2SGlQNXRWLzEv
MzIzODMwMzQzYTY1NjMzODNhNjUzMDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNl
MjAzMjM2MzIzNTMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUoBA7I4DANBgkqhkiG9w0BAQsFAAOC
AQEAyi2CT1J1DX3n4jR3YwuLEbcdfKWTtVvGJTxCf8JQ9kBQiDB6vmccS9RahLHP
WdWLOpxj80vr/KfSlg159566ey5FkdcAru1NP9GfP+Ni8mjO7PLET0j0J3Z2w8jC
7jKHUmbcHzuX2Pa5LKKJUTUMOkRxtFMw2eQmFPlhTzZ4fddNZ8EUC7JqKTHBqm07
bOm/wDKX6Xmw+PFagFRN4yXG6m8DYXOiREEWGZwltUF3gq8k//GGH6F00ICXBh0J
ZIVgKv7iegzYjMWqeZXYPTnp4q1WBmE9SeJ5Dq2mjDxJK3fZehvnfZtG0DKmuy28
ErPH4zRwEvZ2c9rMV0ppZh3VwA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org