Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/1/323830343a3637343a3130303a3a2f34302d3430203d3e203238333238.roa
File:                     323830343a3637343a3130303a3a2f34302d3430203d3e203238333238.roa (raw, json)
Hash identifier:          uMXV6oj4phKDKmW9FK7DYSO8oiusVPwg1nWywROXFos=
Subject key identifier:   0F:EA:30:75:12:EA:C9:B5:35:BF:B9:F3:24:C0:ED:18:29:BA:88:31
Certificate issuer:       /CN=EBA754A244A77EAE1927DBA8E3BFFD42967FFCC5
Certificate serial:       118892A77CBC1C9FE562ADE3E1D1CCC64C4BBDD4
Authority key identifier: EB:A7:54:A2:44:A7:7E:AE:19:27:DB:A8:E3:BF:FD:42:96:7F:FC:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBA754A244A77EAE1927DBA8E3BFFD42967FFCC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/1/323830343a3637343a3130303a3a2f34302d3430203d3e203238333238.roa
Signing time:             Fri 05 Apr 2024 00:11:15 +0000
ROA not before:           Fri 05 Apr 2024 00:06:15 +0000
ROA not after:            Fri 04 Apr 2025 00:11:15 +0000
asID:                     28328
IP address blocks:        2804:674:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:88:92:a7:7c:bc:1c:9f:e5:62:ad:e3:e1:d1:cc:c6:4c:4b:bd:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBA754A244A77EAE1927DBA8E3BFFD42967FFCC5
        Validity
            Not Before: Apr  5 00:06:15 2024 GMT
            Not After : Apr  4 00:11:15 2025 GMT
        Subject: CN=0FEA307512EAC9B535BFB9F324C0ED1829BA8831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ad:23:9b:72:1c:49:ba:60:cc:4e:64:16:f2:
                    3c:32:87:e0:da:75:24:70:b7:8a:76:0c:1a:6f:f6:
                    d5:0d:cf:e8:9a:37:c6:56:ef:52:0c:7b:ff:91:1b:
                    fe:3f:dc:89:b7:16:6d:8a:c6:10:65:e6:15:9b:8c:
                    4d:c2:19:4c:16:a3:e5:cb:68:d8:66:b1:da:50:d9:
                    24:15:3e:58:85:22:66:cd:f5:56:a2:5a:2a:fd:e9:
                    ce:f4:42:de:fe:90:c8:3d:f1:dc:ca:80:aa:4a:cb:
                    6e:f0:c9:e5:77:c2:33:ee:01:40:99:0c:5a:5c:d3:
                    97:ba:04:85:04:0e:2d:2a:df:e3:cb:72:1e:ae:5f:
                    0d:18:9b:d8:14:89:9c:1c:26:72:8e:10:57:90:15:
                    d2:f6:d4:08:c8:87:42:9c:d0:0f:32:78:44:a7:df:
                    8e:bc:d1:01:8b:c3:15:a2:c0:60:63:c7:3b:19:c0:
                    22:8f:5b:45:84:4b:3e:e1:80:e8:90:8f:06:60:5b:
                    a4:4d:af:56:80:3d:e4:ab:6c:4a:d1:c3:9a:6d:50:
                    f6:40:d8:1a:b3:1f:39:74:6e:0d:0c:5d:ef:31:b0:
                    e0:72:94:b5:79:31:fa:eb:ef:02:7b:f0:86:d2:09:
                    26:ad:b7:39:51:6d:bf:cc:e8:7d:13:17:15:53:6a:
                    8b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EA:30:75:12:EA:C9:B5:35:BF:B9:F3:24:C0:ED:18:29:BA:88:31
            X509v3 Authority Key Identifier:
                keyid:EB:A7:54:A2:44:A7:7E:AE:19:27:DB:A8:E3:BF:FD:42:96:7F:FC:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/1/EBA754A244A77EAE1927DBA8E3BFFD42967FFCC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBA754A244A77EAE1927DBA8E3BFFD42967FFCC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/1/323830343a3637343a3130303a3a2f34302d3430203d3e203238333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:674:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         50:06:98:03:7e:b9:fc:f6:73:c4:be:f6:36:06:4b:15:e2:1c:
         76:0d:3a:c3:82:12:27:92:ac:0d:45:f3:38:ea:7f:1a:58:49:
         4b:f3:3d:69:fe:5c:5a:3c:9e:3c:9a:55:0f:33:49:d2:b7:e5:
         85:d3:fe:35:f1:ff:dd:5a:26:88:fa:57:61:ce:0a:2c:85:97:
         2d:9b:06:7f:15:d3:4b:7c:cb:75:c6:99:31:b3:b1:dd:60:45:
         a6:7a:a0:7b:4a:c8:bb:16:c9:d2:cf:ec:5b:66:88:19:22:05:
         5b:0f:2d:ce:54:54:1e:b9:8b:59:a6:5e:4e:a2:71:0c:01:af:
         b5:98:7f:cd:b8:03:47:23:e6:7c:84:1a:62:ec:c0:e3:43:9e:
         b3:e0:c6:dc:fb:a5:14:95:72:cb:a7:5e:0e:6d:3c:86:e1:61:
         a8:61:22:35:5c:c1:52:00:50:8b:32:35:fe:3c:86:7f:b5:af:
         8b:4f:f5:06:d8:69:7e:4b:da:43:5a:95:ee:e0:74:a5:f7:29:
         2f:97:69:76:b6:dd:25:dc:a5:c1:00:68:e4:fa:e8:da:a7:86:
         c4:ae:10:6e:c2:01:8b:45:7a:a4:53:13:c0:16:4d:c7:75:55:
         ac:2e:cd:ae:f5:10:f9:16:1d:a7:35:d8:a2:59:a4:c8:a2:fd:
         54:36:30:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org