Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/323830343a356631343a3a2f33322d313238203d3e20323639303735.roa
File:                     323830343a356631343a3a2f33322d313238203d3e20323639303735.roa (raw, json)
Hash identifier:          14qJixhvtn1S2OojF4M9+KfIWGKLa7cRacwQKODZFMU=
Subject key identifier:   E6:EB:D6:80:C1:93:80:0C:69:E1:69:CC:EB:EE:8A:8A:42:30:00:8B
Certificate issuer:       /CN=CB24609776F5A8FCCAA6FF9FF6D54EA4FC715886
Certificate serial:       42C18DE85963882D902698B2F150B9E8CE6CB07E
Authority key identifier: CB:24:60:97:76:F5:A8:FC:CA:A6:FF:9F:F6:D5:4E:A4:FC:71:58:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB24609776F5A8FCCAA6FF9FF6D54EA4FC715886.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/323830343a356631343a3a2f33322d313238203d3e20323639303735.roa
Signing time:             Mon 13 May 2024 14:06:00 +0000
ROA not before:           Mon 13 May 2024 14:01:00 +0000
ROA not after:            Mon 12 May 2025 14:06:00 +0000
asID:                     269075
IP address blocks:        2804:5f14::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c1:8d:e8:59:63:88:2d:90:26:98:b2:f1:50:b9:e8:ce:6c:b0:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB24609776F5A8FCCAA6FF9FF6D54EA4FC715886
        Validity
            Not Before: May 13 14:01:00 2024 GMT
            Not After : May 12 14:06:00 2025 GMT
        Subject: CN=E6EBD680C193800C69E169CCEBEE8A8A4230008B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:16:5b:f8:13:1b:6e:94:bb:fd:ae:9c:2d:65:
                    64:9c:b2:13:e6:73:c2:bd:13:4e:71:c8:5a:56:5f:
                    f7:94:52:3f:f9:c1:4d:9e:69:a3:93:cd:e5:8f:6d:
                    8c:3a:dd:0f:72:f7:a9:4d:cb:14:a0:6f:e5:79:f4:
                    a6:2b:b4:df:20:b7:21:bb:17:d0:e3:8f:12:4e:a0:
                    54:0a:59:d8:c2:e2:85:4b:b2:34:f3:43:a4:65:1f:
                    95:4e:a8:e3:9b:3d:67:12:b4:cd:ca:b9:d5:f7:e0:
                    a2:bd:42:c2:9f:96:3a:37:1e:48:ac:64:e5:f7:c5:
                    2d:1e:ce:60:a2:fc:dd:81:2c:8e:63:a8:33:1e:7a:
                    c2:6e:73:bf:3f:d2:26:55:95:f2:76:f7:35:72:45:
                    48:74:ac:9f:e8:63:d8:b6:81:b5:8b:d9:34:23:d1:
                    3d:a0:cd:93:0e:09:86:4c:3b:9f:9d:98:bc:d8:52:
                    c5:e2:fe:04:99:a2:61:3c:9f:e6:de:c1:d2:dc:61:
                    67:15:2a:da:70:bb:f5:49:69:28:6f:76:56:2d:7c:
                    a7:19:42:6d:57:67:1a:1a:41:36:09:d6:41:d2:78:
                    36:e0:59:08:9e:54:e1:b5:88:00:77:6f:5d:e6:f1:
                    02:26:67:42:fe:cc:c4:4f:73:50:4b:41:8c:3b:db:
                    d9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EB:D6:80:C1:93:80:0C:69:E1:69:CC:EB:EE:8A:8A:42:30:00:8B
            X509v3 Authority Key Identifier:
                keyid:CB:24:60:97:76:F5:A8:FC:CA:A6:FF:9F:F6:D5:4E:A4:FC:71:58:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/CB24609776F5A8FCCAA6FF9FF6D54EA4FC715886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB24609776F5A8FCCAA6FF9FF6D54EA4FC715886.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/323830343a356631343a3a2f33322d313238203d3e20323639303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f14::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:a7:37:7d:34:13:81:11:e2:88:2a:63:31:d2:8d:ba:ea:2d:
         16:b1:3d:dc:a3:0e:01:36:07:82:9c:69:4f:94:b6:4a:86:ba:
         89:07:94:97:ad:38:50:a8:e7:0d:9c:72:89:a5:53:82:8d:f6:
         90:a5:7b:47:4d:a0:4b:51:6e:2c:5e:6b:8b:1c:e9:90:cf:4c:
         97:bb:12:62:66:af:ec:b5:fa:49:88:78:4e:39:00:cd:2c:bf:
         d5:5f:8b:b8:cb:d7:d5:cb:56:4d:ea:8b:fe:2c:7f:c1:a3:c9:
         45:5f:9b:fb:8c:8f:cf:83:93:8d:a7:77:d8:e4:2e:89:56:3a:
         8c:a9:d8:1e:f8:a6:1b:c2:a7:0d:5e:bf:52:e6:b2:32:b9:70:
         20:04:71:42:f3:66:ea:37:20:42:23:60:ce:89:eb:9b:ab:09:
         12:b9:f6:46:93:e1:c5:55:75:e4:a3:0c:ee:68:41:0c:17:97:
         3e:41:d4:38:32:66:a7:6c:87:66:93:03:85:3b:3b:c8:33:af:
         ab:83:5d:34:b1:18:02:68:33:71:53:fd:86:07:03:0e:c1:aa:
         20:04:54:39:4a:f2:3e:14:34:fa:33:4b:06:b9:16:29:4b:e5:
         b8:75:9c:d6:9d:0f:4f:df:3d:45:09:59:82:a1:93:e1:2a:40:
         36:5f:b9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 10:33:29 2024 by rpki-client on console-ams.rpki-client.org