Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/323830343a386163303a3a2f33342d3334203d3e203532383230.roa
File:                     323830343a386163303a3a2f33342d3334203d3e203532383230.roa (raw, json)
Hash identifier:          71+k/skWUtILQuPmay4NlEClmv7gqCv/utv/oBcxKe8=
Subject key identifier:   7E:10:06:40:25:27:F4:5A:CA:31:CD:53:7D:4A:2F:54:0D:4F:63:00
Certificate issuer:       /CN=194EBF500C3C6464A9EE3927E505491359266331
Certificate serial:       5E49FC319F2DDD7FD2E4C6B6C09CD0CC80B8266F
Authority key identifier: 19:4E:BF:50:0C:3C:64:64:A9:EE:39:27:E5:05:49:13:59:26:63:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194EBF500C3C6464A9EE3927E505491359266331.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/323830343a386163303a3a2f33342d3334203d3e203532383230.roa
Signing time:             Tue 05 Sep 2023 12:39:46 +0000
ROA not before:           Tue 05 Sep 2023 12:34:46 +0000
ROA not after:            Tue 03 Sep 2024 12:39:46 +0000
asID:                     52820
IP address blocks:        2804:8ac0::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:49:fc:31:9f:2d:dd:7f:d2:e4:c6:b6:c0:9c:d0:cc:80:b8:26:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194EBF500C3C6464A9EE3927E505491359266331
        Validity
            Not Before: Sep  5 12:34:46 2023 GMT
            Not After : Sep  3 12:39:46 2024 GMT
        Subject: CN=7E1006402527F45ACA31CD537D4A2F540D4F6300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a6:36:3e:4e:00:76:3b:33:a6:a8:1c:27:89:
                    0d:94:cb:6d:57:fe:51:54:2b:b9:56:7c:3d:c9:60:
                    cc:e7:88:07:fe:b2:f6:c3:ed:5d:0d:cb:81:ce:81:
                    35:d1:28:96:38:69:6d:9b:9e:ef:6f:b6:89:1a:3b:
                    64:3e:c5:b2:27:4a:fb:f7:d6:95:cf:48:66:3d:16:
                    c0:42:2b:99:5f:42:d2:ef:32:f4:81:5c:5f:ce:e0:
                    3d:d6:44:80:10:b8:14:75:f6:77:bc:81:59:68:1e:
                    e5:d1:df:d7:26:b0:2e:05:36:fa:8a:1b:34:c7:6b:
                    a7:1f:82:c6:1f:4a:59:82:64:4b:86:e0:a8:f5:6b:
                    00:78:65:da:8e:5f:49:d2:a4:81:45:36:dc:f6:68:
                    5c:eb:b1:c3:82:fb:13:b8:be:19:ee:62:b1:fc:bb:
                    3a:cb:c4:5a:8a:05:6c:5d:39:06:ec:4b:4a:89:be:
                    0b:4a:c9:3a:04:63:28:1d:5c:3b:80:1a:39:c2:6f:
                    0f:3b:0c:b0:73:91:70:8f:b9:1f:69:73:92:99:a7:
                    3a:a3:4a:4e:d9:5b:a9:cf:54:9c:d8:34:c6:af:73:
                    97:60:68:2f:e4:4f:85:1e:66:6d:2d:f7:1a:af:59:
                    b4:34:a5:65:cf:c8:d6:a3:a5:3c:d8:c1:05:90:6a:
                    4f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:10:06:40:25:27:F4:5A:CA:31:CD:53:7D:4A:2F:54:0D:4F:63:00
            X509v3 Authority Key Identifier:
                keyid:19:4E:BF:50:0C:3C:64:64:A9:EE:39:27:E5:05:49:13:59:26:63:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/194EBF500C3C6464A9EE3927E505491359266331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194EBF500C3C6464A9EE3927E505491359266331.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/323830343a386163303a3a2f33342d3334203d3e203532383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ac0::/34

    Signature Algorithm: sha256WithRSAEncryption
         1f:46:68:18:14:31:ea:94:db:7d:80:34:08:82:42:90:87:3b:
         a2:d7:98:3c:2b:18:48:6a:59:04:29:d2:c9:65:a1:70:c3:f2:
         74:1b:ad:53:55:2f:83:47:dd:45:fa:49:a6:65:f9:47:18:e7:
         69:fc:39:e5:65:00:d2:52:51:67:60:92:39:21:fc:a3:92:23:
         78:cf:bc:f5:3f:00:4d:26:04:2d:f4:47:45:59:95:e5:1f:f6:
         d0:6f:61:48:ab:19:c6:90:68:59:d1:8f:f4:bf:bc:7a:07:94:
         f1:0c:97:fb:44:f5:25:5f:99:83:35:37:bf:71:2e:c1:1c:4a:
         97:1f:cd:2e:64:eb:a9:64:b0:19:12:36:d1:24:ea:46:87:0e:
         d9:d6:8b:8d:bd:f7:a3:04:3e:31:f0:8e:29:56:17:1d:97:1b:
         f5:b0:65:59:ed:db:32:0e:9e:a9:b9:19:fa:b0:8d:c1:3a:3b:
         3a:b8:14:63:b1:53:b9:79:0f:3b:ca:fe:9f:14:64:18:8d:5f:
         30:22:24:dd:97:74:14:d2:f3:11:4c:d5:a7:04:10:fa:55:39:
         3f:aa:23:e1:2e:c3:19:41:34:47:4e:f6:d7:1d:ea:7d:99:da:
         3e:e2:63:b2:80:39:13:46:9f:74:a7:cf:aa:13:9c:2f:db:82:
         88:2b:83:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 04:46:53 2024 by rpki-client on console-fra.rpki-client.org