Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/1/3138392e31342e3230382e302f32302d3234203d3e203238333238.roa
File:                     3138392e31342e3230382e302f32302d3234203d3e203238333238.roa (raw, json)
Hash identifier:          3ls61RpB/JiQf21Tb8wDN6gk01cLJDTfntr+XmayX9U=
Subject key identifier:   80:B6:FF:DC:BA:16:5A:12:55:F3:83:95:F4:9B:33:EA:8A:94:F8:60
Certificate issuer:       /CN=EBA754A244A77EAE1927DBA8E3BFFD42967FFCC5
Certificate serial:       592509773171BFDE3306EB2908E61C95816E1E93
Authority key identifier: EB:A7:54:A2:44:A7:7E:AE:19:27:DB:A8:E3:BF:FD:42:96:7F:FC:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBA754A244A77EAE1927DBA8E3BFFD42967FFCC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/1/3138392e31342e3230382e302f32302d3234203d3e203238333238.roa
Signing time:             Fri 05 Apr 2024 00:11:15 +0000
ROA not before:           Fri 05 Apr 2024 00:06:15 +0000
ROA not after:            Fri 04 Apr 2025 00:11:15 +0000
asID:                     28328
IP address blocks:        189.14.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:25:09:77:31:71:bf:de:33:06:eb:29:08:e6:1c:95:81:6e:1e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBA754A244A77EAE1927DBA8E3BFFD42967FFCC5
        Validity
            Not Before: Apr  5 00:06:15 2024 GMT
            Not After : Apr  4 00:11:15 2025 GMT
        Subject: CN=80B6FFDCBA165A1255F38395F49B33EA8A94F860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:65:b8:23:9d:68:de:60:23:c0:59:e5:84:fc:
                    f4:92:4e:b3:f5:f3:62:47:ba:1c:b9:6b:79:cc:e7:
                    fe:bc:c1:ba:23:f4:76:ce:b7:4d:22:ac:3d:64:6e:
                    f2:31:1e:17:00:e4:c6:aa:db:0c:46:bf:5b:5c:d0:
                    61:81:c0:af:e5:fb:ff:ea:6a:82:e1:47:bc:70:40:
                    b6:43:29:9a:8b:97:a4:d5:ee:56:f5:46:a2:e2:79:
                    a9:42:8e:14:b8:6e:94:d7:3e:aa:6b:83:8e:e3:48:
                    81:3e:6a:e5:27:99:0e:03:e9:3c:1f:1f:d3:21:c0:
                    f9:a5:21:8e:f8:1a:5e:a0:e7:ba:bf:24:c5:83:4b:
                    68:67:91:ae:8e:eb:57:3e:dc:9d:ee:94:27:ad:11:
                    30:5a:72:66:17:e6:e9:ba:c0:39:8f:0d:d2:32:a9:
                    fb:75:d6:e2:d1:fd:2e:de:d7:23:82:12:e0:5d:de:
                    ee:ea:29:ce:3c:21:ae:b0:69:cb:3e:f0:73:a8:ab:
                    94:6a:9c:36:52:64:47:9a:2d:b1:50:97:a7:f2:d1:
                    5e:79:b6:8d:d9:2c:f8:2f:0d:a2:54:ce:03:3b:90:
                    4d:7b:2a:1b:4f:6b:71:3c:f7:31:6e:09:da:e3:2c:
                    71:9d:df:82:10:1e:06:41:80:01:4f:c2:69:f2:99:
                    55:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B6:FF:DC:BA:16:5A:12:55:F3:83:95:F4:9B:33:EA:8A:94:F8:60
            X509v3 Authority Key Identifier:
                keyid:EB:A7:54:A2:44:A7:7E:AE:19:27:DB:A8:E3:BF:FD:42:96:7F:FC:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/1/EBA754A244A77EAE1927DBA8E3BFFD42967FFCC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBA754A244A77EAE1927DBA8E3BFFD42967FFCC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/1/3138392e31342e3230382e302f32302d3234203d3e203238333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a3:90:93:dc:2c:41:09:a3:3e:9f:15:d9:cf:ba:13:d8:1e:88:
         8b:d6:08:44:60:fc:b9:d6:be:e9:b0:c8:ac:f2:e3:00:fd:f5:
         82:31:57:64:23:83:41:ba:d9:cc:3b:f2:94:21:ba:8b:74:36:
         5b:15:be:d2:52:d8:58:ed:88:72:8c:7a:50:e9:3f:a9:27:a5:
         48:8e:42:a6:f7:21:02:5a:cd:f3:61:41:ca:d6:d8:f3:13:ba:
         20:f0:03:a2:17:4f:67:4d:45:77:21:cc:5f:21:67:61:e4:d2:
         f6:f3:a8:31:34:a5:38:c1:b2:5a:82:1b:32:f1:c3:01:f0:f2:
         07:0b:48:90:85:4e:00:8f:c4:27:2c:98:c6:73:b5:f3:58:10:
         b7:61:cc:b7:04:11:b4:a3:9c:63:6e:6e:59:84:8d:d5:e6:65:
         37:22:58:69:49:9d:9b:98:fd:e7:0d:7a:e9:cf:37:c6:26:b9:
         b7:8a:3d:21:db:f6:bc:fb:a2:59:e7:e6:1e:73:90:ec:6c:f4:
         f4:4d:f7:10:c3:03:e5:c2:b3:ce:51:83:a2:64:b2:94:a5:05:
         54:f3:5b:65:bf:ce:dc:63:16:86:c3:a7:fc:8a:85:74:78:6e:
         e3:84:5f:be:ad:43:41:d2:97:3a:4e:14:a5:f7:f7:4c:b5:5d:
         bb:d9:1c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org