Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a616530303a3a2f34302d3430203d3e20323638373037.roa
File:                     323830343a353938343a616530303a3a2f34302d3430203d3e20323638373037.roa (raw, json)
Hash identifier:          4wdrdNJ9IzjslFZliadev7Mn1YOnDt2WjFQYdB/dxW8=
Subject key identifier:   00:D7:30:C3:E8:E7:89:DC:A3:0A:7B:3F:A8:6B:89:54:01:02:29:73
Certificate issuer:       /CN=03378B7FC1B464DAD1E7EF2D2F20EEE810EBE08F
Certificate serial:       113110C61E7A1E59560F0008B87311B3A5604E1C
Authority key identifier: 03:37:8B:7F:C1:B4:64:DA:D1:E7:EF:2D:2F:20:EE:E8:10:EB:E0:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03378B7FC1B464DAD1E7EF2D2F20EEE810EBE08F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a616530303a3a2f34302d3430203d3e20323638373037.roa
Signing time:             Mon 22 Jan 2024 20:04:13 +0000
ROA not before:           Mon 22 Jan 2024 19:59:13 +0000
ROA not after:            Mon 20 Jan 2025 20:04:13 +0000
asID:                     268707
IP address blocks:        2804:5984:ae00::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:31:10:c6:1e:7a:1e:59:56:0f:00:08:b8:73:11:b3:a5:60:4e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03378B7FC1B464DAD1E7EF2D2F20EEE810EBE08F
        Validity
            Not Before: Jan 22 19:59:13 2024 GMT
            Not After : Jan 20 20:04:13 2025 GMT
        Subject: CN=00D730C3E8E789DCA30A7B3FA86B895401022973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7a:f5:8f:ca:2b:20:26:b9:1c:12:3e:e9:60:
                    81:cf:be:89:b9:41:ab:cd:cf:cd:e6:7c:7c:a4:21:
                    aa:d7:12:aa:f1:07:02:b8:f7:df:11:a8:fb:62:de:
                    96:47:5b:35:eb:28:a1:42:80:3a:5a:19:f7:12:b8:
                    fd:f0:88:ad:16:93:8a:ef:c6:39:71:b0:db:b7:60:
                    27:10:2d:42:e5:f9:68:6e:24:42:f3:90:bd:aa:86:
                    23:0e:97:99:b6:70:78:61:6a:24:ab:7b:54:fe:40:
                    51:50:cf:bc:01:d3:4d:75:46:87:d9:85:06:cc:ff:
                    cf:58:1f:28:79:7c:e5:29:20:09:b7:49:97:34:64:
                    37:83:29:ad:22:08:6b:8d:95:bc:ae:f1:15:4c:bf:
                    bb:21:f5:9c:48:fd:3e:84:9e:72:85:7f:72:21:82:
                    3c:82:8e:a6:95:c4:aa:49:ef:62:49:02:fc:34:30:
                    04:95:22:79:01:6d:78:c8:48:a1:ac:26:fa:ea:dd:
                    9a:7f:b9:88:45:dd:f6:27:e2:af:b6:33:ca:46:cb:
                    53:3b:c4:c8:bc:93:b8:49:3d:8b:a1:86:29:14:c6:
                    29:2d:0b:1c:32:d6:d1:2c:5c:86:7b:d4:28:9f:e6:
                    38:92:c6:57:b8:b9:43:a9:6b:ed:18:0b:4e:1e:ed:
                    90:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D7:30:C3:E8:E7:89:DC:A3:0A:7B:3F:A8:6B:89:54:01:02:29:73
            X509v3 Authority Key Identifier:
                keyid:03:37:8B:7F:C1:B4:64:DA:D1:E7:EF:2D:2F:20:EE:E8:10:EB:E0:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/03378B7FC1B464DAD1E7EF2D2F20EEE810EBE08F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03378B7FC1B464DAD1E7EF2D2F20EEE810EBE08F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a616530303a3a2f34302d3430203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984:ae00::/40

    Signature Algorithm: sha256WithRSAEncryption
         66:be:98:da:dd:74:47:cf:fd:e9:5a:95:39:5f:65:f0:27:9c:
         20:4d:b5:32:12:d8:49:13:1f:bd:1c:29:01:6f:57:61:4f:ad:
         d5:10:d5:b1:ca:70:f7:bc:15:61:ce:f9:60:90:bb:29:a8:92:
         f4:21:86:ad:bc:c4:71:54:f2:02:0d:3c:18:e9:56:af:e7:15:
         74:e4:e1:dd:d1:b3:6c:d5:ad:24:4b:b5:fa:1a:2e:e5:96:f7:
         7f:64:6f:59:f3:02:97:b9:30:ed:0e:db:26:38:e4:c2:3d:ff:
         ce:f7:4c:bf:83:91:39:c7:0b:3a:c9:10:fc:b7:ca:62:b0:ab:
         7c:d0:6d:1e:fa:e4:ab:8c:e4:fc:45:4a:af:38:a7:db:d0:37:
         1b:0a:42:0f:a1:78:9c:a8:1a:60:31:88:5c:d7:76:1c:bb:f5:
         e3:95:60:2b:48:74:85:05:a6:86:4b:cf:98:a2:68:c5:7b:55:
         f5:37:5f:2d:71:0d:7b:bd:4f:0b:a2:01:c0:12:a5:be:b8:fc:
         40:24:98:34:88:f6:4f:7c:db:17:a5:05:26:c5:f6:29:07:b5:
         d0:5e:93:30:a9:6d:1d:f1:7a:51:01:0b:ea:b6:af:55:c4:07:
         2c:45:b7:59:ab:78:d5:28:91:d7:d8:d6:13:9c:27:af:2b:b3:
         f6:ac:de:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 27 07:27:32 2024 by rpki-client on console-fra.rpki-client.org