Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/1/323830343a343130343a3a2f33322d3336203d3e20323635393938.roa
File:                     323830343a343130343a3a2f33322d3336203d3e20323635393938.roa (raw, json)
Hash identifier:          KBjHRfL71XIN35AMWcE5fcNcnHUuL1YL94fJEnXX1uw=
Subject key identifier:   76:3D:B9:09:48:05:01:1E:86:27:0B:30:E8:8E:A6:8C:86:0C:D7:22
Certificate issuer:       /CN=FFD8CEEB1DF478F715D7FD8AA7F660F39267D5F4
Certificate serial:       4C2E2F8F6F54B9BEA091C3CE81DEA847C0AB805B
Authority key identifier: FF:D8:CE:EB:1D:F4:78:F7:15:D7:FD:8A:A7:F6:60:F3:92:67:D5:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD8CEEB1DF478F715D7FD8AA7F660F39267D5F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/1/323830343a343130343a3a2f33322d3336203d3e20323635393938.roa
Signing time:             Thu 04 Apr 2024 07:24:27 +0000
ROA not before:           Thu 04 Apr 2024 07:19:27 +0000
ROA not after:            Thu 03 Apr 2025 07:24:27 +0000
asID:                     265998
IP address blocks:        2804:4104::/32 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:2e:2f:8f:6f:54:b9:be:a0:91:c3:ce:81:de:a8:47:c0:ab:80:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFD8CEEB1DF478F715D7FD8AA7F660F39267D5F4
        Validity
            Not Before: Apr  4 07:19:27 2024 GMT
            Not After : Apr  3 07:24:27 2025 GMT
        Subject: CN=763DB9094805011E86270B30E88EA68C860CD722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:70:b3:c6:da:14:85:bb:8f:33:e3:8e:ef:bd:
                    25:03:57:f7:8c:50:07:05:4c:d5:4e:d9:85:c0:4c:
                    83:a7:a0:9d:c3:81:f2:07:a8:6b:f7:1b:f3:5e:c4:
                    f8:93:18:f6:1f:6f:73:5f:6d:ef:80:5e:68:73:e7:
                    e2:ee:19:54:f0:73:95:2d:5d:47:97:50:82:38:73:
                    2f:0a:67:7a:5a:34:93:1e:dd:68:c9:07:28:ef:b9:
                    38:32:f0:46:78:c0:39:57:dc:7f:89:4a:61:2d:da:
                    f3:a3:d1:92:dd:16:fa:13:f3:38:17:80:ed:c2:15:
                    7b:76:2c:9d:5e:9c:01:a8:46:38:23:78:7d:66:b2:
                    b9:aa:ae:ad:14:89:a0:14:24:0e:6f:fb:63:33:76:
                    23:47:f2:f3:1a:51:06:9b:09:33:df:79:8e:66:ae:
                    86:dc:ee:9a:70:de:b9:30:63:6e:1a:8f:0b:c3:32:
                    13:af:70:bf:80:6c:3b:15:81:39:9d:4f:78:f8:4c:
                    73:a4:b4:90:cd:24:60:b8:a5:4a:2a:05:2d:3e:40:
                    8c:c1:5e:f2:9f:65:64:8e:9e:f0:78:54:ee:fe:93:
                    6e:f1:35:e7:cd:b0:ee:83:3f:35:4a:0b:72:8a:7e:
                    c3:27:d4:55:99:41:3e:e5:b1:af:53:30:76:dc:6b:
                    8b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3D:B9:09:48:05:01:1E:86:27:0B:30:E8:8E:A6:8C:86:0C:D7:22
            X509v3 Authority Key Identifier:
                keyid:FF:D8:CE:EB:1D:F4:78:F7:15:D7:FD:8A:A7:F6:60:F3:92:67:D5:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/1/FFD8CEEB1DF478F715D7FD8AA7F660F39267D5F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD8CEEB1DF478F715D7FD8AA7F660F39267D5F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/1/323830343a343130343a3a2f33322d3336203d3e20323635393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4104::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:45:c8:6c:dc:ff:86:8a:f7:13:97:df:05:02:29:a3:9b:b2:
         ef:ba:78:f2:81:a8:a1:4c:d9:70:f6:5c:73:c7:cd:c8:62:fe:
         4b:43:47:15:97:ec:99:83:dd:5b:b5:59:d3:b2:ff:b3:15:80:
         0a:ca:1b:2d:e5:8b:d0:cc:a7:b6:8e:9a:bb:bc:d0:0c:35:f1:
         86:85:38:90:a2:29:53:20:c3:71:8b:d4:54:0a:0f:50:ac:b2:
         75:76:e8:5f:fb:69:06:70:78:55:b5:ce:c6:ce:da:a1:ed:1f:
         20:94:8e:8c:4a:85:cf:6a:9c:41:df:89:59:1c:7e:23:c1:ac:
         6d:91:c1:ea:77:94:29:9c:0b:b9:63:c1:66:cf:24:f8:c9:6d:
         23:05:ea:35:bc:0d:07:82:04:f3:30:be:2e:57:7f:d0:f8:b1:
         2e:f2:37:ba:32:5e:51:2f:80:4c:e2:e3:ef:fe:02:49:96:20:
         2e:75:30:d9:01:32:b2:07:14:d5:11:e8:0b:11:68:f2:fd:d7:
         81:2e:37:99:f0:37:0c:ee:65:c6:6f:dd:af:86:9d:ff:8b:19:
         be:74:0c:0c:d8:73:8c:92:f6:4e:30:0f:fb:69:b2:78:09:67:
         d3:c2:b0:19:9b:32:76:93:69:74:62:78:bf:27:e8:b5:f6:b6:
         a3:f3:39:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 16:21:48 2024 by rpki-client on console-ams.rpki-client.org