Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/1/323830343a3637343a3a2f33322d3333203d3e203238333238.roa
File:                     323830343a3637343a3a2f33322d3333203d3e203238333238.roa (raw, json)
Hash identifier:          WlYmIsbGAaeQRp6GiTMuDh2vZ6Yh5S6XbX8r0L9Mu3Y=
Subject key identifier:   4D:1C:2A:47:77:E1:41:08:0C:54:0D:16:28:56:2E:3D:2C:C0:69:E4
Certificate issuer:       /CN=EBA754A244A77EAE1927DBA8E3BFFD42967FFCC5
Certificate serial:       712F142DCE8F4174F703DA78B47BD146DA2AA1B8
Authority key identifier: EB:A7:54:A2:44:A7:7E:AE:19:27:DB:A8:E3:BF:FD:42:96:7F:FC:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBA754A244A77EAE1927DBA8E3BFFD42967FFCC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/1/323830343a3637343a3a2f33322d3333203d3e203238333238.roa
Signing time:             Fri 05 Apr 2024 00:11:14 +0000
ROA not before:           Fri 05 Apr 2024 00:06:14 +0000
ROA not after:            Fri 04 Apr 2025 00:11:14 +0000
asID:                     28328
IP address blocks:        2804:674::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:2f:14:2d:ce:8f:41:74:f7:03:da:78:b4:7b:d1:46:da:2a:a1:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBA754A244A77EAE1927DBA8E3BFFD42967FFCC5
        Validity
            Not Before: Apr  5 00:06:14 2024 GMT
            Not After : Apr  4 00:11:14 2025 GMT
        Subject: CN=4D1C2A4777E141080C540D1628562E3D2CC069E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:93:78:a4:25:10:4f:3c:6e:ff:08:e3:e2:70:
                    8d:62:ca:11:64:78:b4:cf:5c:27:3c:0a:b7:91:7c:
                    d0:9d:14:d5:d4:d4:a5:eb:b7:a8:1d:e8:bb:08:67:
                    bd:0e:95:65:7e:66:4b:d4:85:38:12:d0:2e:d7:54:
                    a4:1a:85:c7:f8:83:07:4f:db:74:69:60:91:8e:d9:
                    9f:56:ba:ce:e6:3f:5f:45:92:e6:3a:f5:cb:96:ce:
                    a6:c2:1e:ac:6b:9c:37:91:6a:d4:71:50:cc:01:b9:
                    3e:7f:f2:a1:f1:0d:82:f8:10:69:ad:e8:57:cd:df:
                    5c:ea:e3:07:8d:12:4e:24:0c:5b:a1:5c:43:63:b5:
                    ed:41:7f:61:8a:63:6c:98:a3:ff:77:84:cc:30:44:
                    7d:5b:66:79:27:32:02:86:52:c3:5f:be:c0:42:01:
                    ab:24:e5:07:c4:ce:ee:21:a9:6f:05:6f:5f:d9:7d:
                    b7:cb:5b:21:5c:98:80:12:81:27:30:bc:f4:f4:fc:
                    a0:d4:62:b8:6c:09:84:3d:0f:0f:30:de:e0:a9:1e:
                    ae:57:ed:9d:a3:27:e6:f6:4f:2e:88:e3:ff:fe:b2:
                    eb:7c:8a:43:9f:f4:d6:70:b6:f2:14:8e:18:f9:2c:
                    9a:00:9d:86:3a:72:09:e3:49:b8:8f:ae:08:75:fd:
                    6a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1C:2A:47:77:E1:41:08:0C:54:0D:16:28:56:2E:3D:2C:C0:69:E4
            X509v3 Authority Key Identifier:
                keyid:EB:A7:54:A2:44:A7:7E:AE:19:27:DB:A8:E3:BF:FD:42:96:7F:FC:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/1/EBA754A244A77EAE1927DBA8E3BFFD42967FFCC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBA754A244A77EAE1927DBA8E3BFFD42967FFCC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/1/323830343a3637343a3a2f33322d3333203d3e203238333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:674::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:cf:0c:e6:1c:c4:19:3b:5b:38:74:25:b6:35:68:ef:3b:39:
         5b:40:4a:6b:54:eb:c6:31:cf:7a:58:5f:d2:6c:e1:34:cb:9e:
         5c:2f:c1:de:22:b6:c9:5d:2d:28:1b:ba:ec:33:52:ea:3d:ce:
         32:20:12:c6:5a:ff:19:99:93:6b:88:30:19:ec:46:c0:9c:9f:
         09:f4:47:52:a8:f0:1c:a1:0f:01:b4:64:d9:fe:bf:f3:8b:c1:
         aa:ef:a6:bd:99:d9:be:ca:e6:cf:6a:f3:c6:4b:54:d2:14:42:
         e0:0d:25:19:d9:85:d7:8b:28:75:f0:95:da:27:1e:f7:ef:4c:
         09:42:3f:79:a5:64:17:ad:00:ea:8c:ef:5f:39:b4:6f:11:0c:
         f3:25:2b:f9:24:d9:a2:bf:af:68:07:de:08:25:73:2c:12:5b:
         95:f5:3a:71:78:fb:ff:e4:ac:55:cd:eb:4a:56:96:0a:55:db:
         68:3e:9a:0d:48:8c:d3:0a:af:eb:a5:b2:19:1e:54:db:53:1d:
         38:94:7c:f1:8a:a1:01:93:2d:00:d7:a5:63:38:58:d7:06:50:
         3b:72:6d:b2:5d:fb:ac:2f:bb:05:cf:40:ff:cb:a9:f0:9f:5f:
         24:5b:6d:e8:a4:dc:70:0d:11:30:9f:48:0a:c7:22:0b:83:14:
         d0:a9:6d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org