Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/323830343a366465383a613030303a3a2f33362d3336203d3e20323730353633.roa
File:                     323830343a366465383a613030303a3a2f33362d3336203d3e20323730353633.roa (raw, json)
Hash identifier:          jU6N7SQJtG5jsb13zSo5urxE8SpPMe/v8FbTwDldQaI=
Subject key identifier:   A8:85:21:E8:FA:E3:AF:8E:13:E1:E8:B1:E8:07:4C:00:3F:54:A4:E5
Certificate issuer:       /CN=FA2524B15210CD162B5D0FDFF977BCD7934B2D2A
Certificate serial:       6C85C4996BDD546B105A67BDB912858DBD01025E
Authority key identifier: FA:25:24:B1:52:10:CD:16:2B:5D:0F:DF:F9:77:BC:D7:93:4B:2D:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA2524B15210CD162B5D0FDFF977BCD7934B2D2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/323830343a366465383a613030303a3a2f33362d3336203d3e20323730353633.roa
Signing time:             Thu 27 Apr 2023 12:37:25 +0000
ROA not before:           Thu 27 Apr 2023 12:32:25 +0000
ROA not after:            Thu 25 Apr 2024 12:37:25 +0000
asID:                     270563
IP address blocks:        2804:6de8:a000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:85:c4:99:6b:dd:54:6b:10:5a:67:bd:b9:12:85:8d:bd:01:02:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA2524B15210CD162B5D0FDFF977BCD7934B2D2A
        Validity
            Not Before: Apr 27 12:32:25 2023 GMT
            Not After : Apr 25 12:37:25 2024 GMT
        Subject: CN=A88521E8FAE3AF8E13E1E8B1E8074C003F54A4E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:59:f3:e9:24:4d:fb:45:54:03:66:94:e5:b0:
                    e3:c8:9a:27:40:3d:5f:b0:b9:06:60:d9:1d:56:a9:
                    91:56:26:71:dd:07:9e:03:72:ed:03:81:5c:f7:7f:
                    ee:56:b1:8d:05:5f:e4:be:b3:1d:19:08:23:69:7a:
                    1c:24:85:e4:63:97:e1:d2:c5:59:6f:81:78:24:b3:
                    c7:b0:ee:9b:f1:fc:31:d1:5f:b0:cd:00:ac:94:2e:
                    cc:60:8f:9a:11:00:4d:fb:bd:53:6f:a6:f3:79:28:
                    1b:fa:3d:c1:68:f5:d3:0e:11:0d:72:bc:6b:61:6a:
                    4f:e7:5f:74:ea:e7:13:c7:fe:44:08:ec:d3:db:58:
                    9f:81:98:3b:07:3a:a7:85:17:a6:31:93:f7:76:b1:
                    61:da:d6:cf:f5:6b:97:54:c4:c5:3b:83:6b:a0:5c:
                    d1:c7:27:0c:f1:4a:af:5e:0e:21:59:d0:f3:2d:93:
                    ea:0b:c0:93:de:7c:c5:4e:2c:86:b3:6f:2e:b8:1c:
                    f0:61:30:6e:5a:3d:4a:ee:29:80:21:e4:15:a5:26:
                    2d:b8:79:ba:56:3c:8e:fe:57:59:1e:e3:12:69:c2:
                    f7:eb:be:9d:bf:20:21:46:79:d3:10:2e:c7:14:0f:
                    a0:f0:f3:c8:a8:15:74:0a:33:5d:33:a7:0b:e9:06:
                    46:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:85:21:E8:FA:E3:AF:8E:13:E1:E8:B1:E8:07:4C:00:3F:54:A4:E5
            X509v3 Authority Key Identifier:
                keyid:FA:25:24:B1:52:10:CD:16:2B:5D:0F:DF:F9:77:BC:D7:93:4B:2D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/FA2524B15210CD162B5D0FDFF977BCD7934B2D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA2524B15210CD162B5D0FDFF977BCD7934B2D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/323830343a366465383a613030303a3a2f33362d3336203d3e20323730353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6de8:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         84:e0:9e:48:5a:f9:2a:ed:6c:b2:26:18:ba:1f:62:75:74:5f:
         b4:cf:d0:7b:d5:0b:11:45:c4:22:bc:8d:22:98:be:c7:20:97:
         42:a1:1c:37:bd:b2:c0:57:41:41:98:93:b4:ac:af:8d:8e:cd:
         c4:e0:0b:2c:8e:0a:6c:b3:e7:66:0e:79:d3:50:37:4e:f5:4e:
         0a:b1:f0:15:82:32:dc:6e:9c:16:0f:9e:65:6d:a0:15:47:0b:
         67:72:0b:2b:c6:63:2c:f1:bd:6b:c5:26:8d:bd:fc:78:b7:70:
         34:de:0e:02:e6:e7:90:fc:5e:03:4b:d5:f1:7a:56:34:7d:51:
         04:e6:d4:93:1e:10:31:f2:ca:eb:59:30:35:d9:94:37:9a:ae:
         02:42:56:c3:19:8d:34:7a:f5:11:7e:6d:6a:93:8b:98:b3:9a:
         df:2d:1c:d2:dd:ec:14:bd:e6:f0:3e:93:85:ab:d9:4a:e9:99:
         85:a7:ef:d0:02:55:a1:00:37:f0:0c:91:07:ee:e7:23:d9:a4:
         db:ce:71:b3:36:98:e4:33:37:57:a8:81:99:1b:fd:0a:44:98:
         65:05:6a:b7:a7:be:03:83:78:18:54:22:45:24:40:59:7a:19:
         37:71:51:96:10:21:6b:46:aa:e3:36:88:cc:33:d2:c9:75:7f:
         f7:f1:84:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 8 02:47:26 2023 by rpki-client on console-fra.rpki-client.org