Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/1/323830343a3637343a383030303a3a2f34302d3430203d3e203238333238.roa
File:                     323830343a3637343a383030303a3a2f34302d3430203d3e203238333238.roa (raw, json)
Hash identifier:          FsUcG5Or3I3paugagNVyukfiYIyYISVZ64pF4NA8434=
Subject key identifier:   64:D0:B6:82:0B:C4:BA:EA:21:C2:CB:9F:97:B3:0C:DF:B8:11:51:86
Certificate issuer:       /CN=EBA754A244A77EAE1927DBA8E3BFFD42967FFCC5
Certificate serial:       72CEA3EF1511E4B03C643853F6A0336F3153260F
Authority key identifier: EB:A7:54:A2:44:A7:7E:AE:19:27:DB:A8:E3:BF:FD:42:96:7F:FC:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBA754A244A77EAE1927DBA8E3BFFD42967FFCC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/1/323830343a3637343a383030303a3a2f34302d3430203d3e203238333238.roa
Signing time:             Fri 05 Apr 2024 00:11:14 +0000
ROA not before:           Fri 05 Apr 2024 00:06:14 +0000
ROA not after:            Fri 04 Apr 2025 00:11:14 +0000
asID:                     28328
IP address blocks:        2804:674:8000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ce:a3:ef:15:11:e4:b0:3c:64:38:53:f6:a0:33:6f:31:53:26:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBA754A244A77EAE1927DBA8E3BFFD42967FFCC5
        Validity
            Not Before: Apr  5 00:06:14 2024 GMT
            Not After : Apr  4 00:11:14 2025 GMT
        Subject: CN=64D0B6820BC4BAEA21C2CB9F97B30CDFB8115186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5c:06:57:ad:0b:4c:19:9c:1d:9d:e1:8a:89:
                    98:ab:96:a9:f2:38:57:6a:13:60:6e:d6:6f:ee:70:
                    d2:4a:d8:01:26:da:cd:a0:55:cf:cc:98:09:b3:c8:
                    84:d3:e3:46:4b:76:73:a1:db:0c:2e:cb:f5:d6:6e:
                    b5:b3:01:f3:cd:00:3f:c8:59:3f:65:f3:a6:bf:c1:
                    c0:34:44:0c:61:75:a4:49:90:e2:6d:79:ae:06:2b:
                    c5:ff:52:13:15:0c:09:fc:a2:dd:d7:21:33:b9:5b:
                    a1:cb:0b:8c:8a:0b:51:a5:a4:c1:11:3d:ca:0c:33:
                    2b:36:2c:29:b1:60:77:a1:9e:c5:6d:be:9c:b2:63:
                    6f:03:d2:54:e8:ef:2d:2f:ed:bb:55:ea:11:a3:0e:
                    f2:f5:72:e8:ce:a8:0b:a2:8c:ec:62:1c:51:48:55:
                    95:e2:40:68:c2:58:87:2e:a2:74:d2:fb:6c:10:19:
                    c0:2c:da:9b:b6:8b:30:eb:53:89:ca:f6:45:ae:ff:
                    fd:0c:66:46:35:bb:ff:8b:7e:da:49:1c:84:49:45:
                    71:5c:8e:2e:a6:98:99:6d:e2:b6:5e:b1:9c:6e:96:
                    0d:d7:28:8e:43:ee:8c:ef:c6:75:71:e0:ac:d1:b0:
                    e5:92:d2:a4:96:46:bc:4c:3b:59:b4:90:ee:5c:2e:
                    f4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D0:B6:82:0B:C4:BA:EA:21:C2:CB:9F:97:B3:0C:DF:B8:11:51:86
            X509v3 Authority Key Identifier:
                keyid:EB:A7:54:A2:44:A7:7E:AE:19:27:DB:A8:E3:BF:FD:42:96:7F:FC:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/1/EBA754A244A77EAE1927DBA8E3BFFD42967FFCC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBA754A244A77EAE1927DBA8E3BFFD42967FFCC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/1/323830343a3637343a383030303a3a2f34302d3430203d3e203238333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:674:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         07:d6:f5:0b:b4:d2:aa:60:a2:8e:aa:97:68:5f:bf:a7:4d:0d:
         db:d0:65:67:d0:aa:2e:80:99:b2:50:10:ed:27:c8:83:3f:c1:
         4f:f1:aa:d6:78:c1:65:4d:10:2d:54:fb:9e:4b:52:94:90:24:
         f3:8c:02:df:46:d1:7a:7c:a1:72:85:e7:29:5f:2b:17:dc:1a:
         46:1b:9d:89:68:b8:16:b3:4a:bc:e8:47:12:cd:f7:5e:95:7a:
         b8:a4:d0:8c:56:6c:ac:9f:e9:88:5d:90:d2:45:2d:a9:8d:a2:
         28:3b:10:c0:5d:57:f8:01:35:a3:55:9a:ae:46:7e:61:db:e1:
         69:32:c8:ee:84:79:bf:c3:ad:de:64:dc:39:31:c7:d0:1c:df:
         93:18:18:47:ee:e6:52:0c:19:07:91:5a:23:ad:03:b5:ab:a3:
         2b:28:90:db:51:c4:a0:73:f3:ba:3b:53:46:95:39:61:21:e2:
         e7:70:47:b8:8a:8d:4c:6f:dd:53:cb:be:17:4d:ff:0d:df:5a:
         2a:fb:a8:f0:1d:a9:8d:06:14:d2:75:76:ef:fd:60:6c:c8:2e:
         c6:11:75:bf:62:be:5c:3c:f0:9d:2e:ac:86:8d:05:e8:fb:53:
         58:2f:e0:1d:70:10:4f:26:d8:0e:bf:b3:40:44:9e:84:7d:c4:
         fa:79:65:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org