Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/0/323830343a356533343a3a2f33322d3334203d3e20323639303138.roa
File:                     323830343a356533343a3a2f33322d3334203d3e20323639303138.roa (raw, json)
Hash identifier:          8PZg1hOUnfCwkXcmc2PnXkmEoLxjyXrMbmmGOX5jiBc=
Subject key identifier:   47:28:58:70:D2:B3:8B:EE:0C:D2:45:BA:E2:B6:D3:B1:32:2B:7A:99
Certificate issuer:       /CN=6468A873ACEBE81402DD4AFEF8F2098C75E0383A
Certificate serial:       162D412518E9A934532F4EF104F90A9041093275
Authority key identifier: 64:68:A8:73:AC:EB:E8:14:02:DD:4A:FE:F8:F2:09:8C:75:E0:38:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6468A873ACEBE81402DD4AFEF8F2098C75E0383A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/0/323830343a356533343a3a2f33322d3334203d3e20323639303138.roa
Signing time:             Thu 18 May 2023 23:09:18 +0000
ROA not before:           Thu 18 May 2023 23:04:18 +0000
ROA not after:            Thu 16 May 2024 23:09:18 +0000
asID:                     269018
IP address blocks:        2804:5e34::/32 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2d:41:25:18:e9:a9:34:53:2f:4e:f1:04:f9:0a:90:41:09:32:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6468A873ACEBE81402DD4AFEF8F2098C75E0383A
        Validity
            Not Before: May 18 23:04:18 2023 GMT
            Not After : May 16 23:09:18 2024 GMT
        Subject: CN=47285870D2B38BEE0CD245BAE2B6D3B1322B7A99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:44:6e:dc:03:ee:b3:29:bb:c4:e0:e4:6a:3d:
                    93:40:2c:da:b4:68:c3:36:76:a5:f1:09:c9:ec:d9:
                    1d:c6:ec:82:57:a1:81:79:1e:53:e4:ce:68:49:fd:
                    bc:bb:22:b8:c8:50:53:87:a5:df:8a:2e:69:29:1d:
                    9e:45:22:23:da:fd:33:66:55:4f:76:65:d0:57:25:
                    cb:38:6e:e0:5b:70:73:14:05:22:e8:cb:23:e8:eb:
                    91:11:b3:14:fd:0a:64:2c:16:af:a5:c4:ad:7b:5c:
                    85:7a:2a:d0:cb:2b:8b:b6:ba:ad:83:6e:d6:aa:a0:
                    cf:95:53:79:88:07:b4:c7:c7:af:c7:30:c4:e1:7f:
                    2b:d0:d8:76:cd:39:1a:88:52:97:ad:0b:fd:ec:2a:
                    19:ec:32:c7:19:c9:f9:74:00:a8:c6:63:01:f0:5c:
                    59:e5:a9:69:88:15:e9:39:06:41:f8:48:3f:c5:d6:
                    c0:33:41:7e:1c:5d:db:29:3d:c9:0d:16:b6:d6:dd:
                    d8:dc:d5:d9:19:b0:e3:d7:e3:e9:03:32:60:09:b4:
                    75:55:78:89:c5:cd:9a:9b:14:df:87:fc:6a:ef:7c:
                    22:92:3f:42:66:f7:00:14:c5:78:63:6c:3c:69:f4:
                    1a:05:52:81:53:99:e4:a1:8c:4e:fe:8d:b9:0a:68:
                    05:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:28:58:70:D2:B3:8B:EE:0C:D2:45:BA:E2:B6:D3:B1:32:2B:7A:99
            X509v3 Authority Key Identifier:
                keyid:64:68:A8:73:AC:EB:E8:14:02:DD:4A:FE:F8:F2:09:8C:75:E0:38:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/0/6468A873ACEBE81402DD4AFEF8F2098C75E0383A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6468A873ACEBE81402DD4AFEF8F2098C75E0383A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/0/323830343a356533343a3a2f33322d3334203d3e20323639303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e34::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:79:fa:fb:b4:97:5a:aa:c3:f3:40:60:72:76:71:8d:00:9c:
         d3:ec:c2:d6:91:35:44:aa:d8:44:6f:07:7f:b5:b8:ac:d0:ec:
         63:35:31:58:b9:b4:54:f5:8c:b5:e2:34:5b:94:f7:80:53:5c:
         02:e7:f9:f9:73:14:69:7d:5f:c9:5c:67:e9:fc:e6:44:51:d9:
         55:e8:45:3d:4b:a6:87:4d:1f:4b:cd:81:ed:64:90:93:b1:d9:
         c2:01:04:18:a3:ab:50:9f:27:e8:ee:b6:a2:93:96:7e:d8:73:
         31:46:64:12:30:ce:a3:6b:19:2f:8e:65:51:5c:28:75:6e:64:
         2b:22:cf:2d:2a:ca:1f:78:e4:90:88:4c:30:24:3c:83:06:07:
         0f:a6:63:d1:05:78:d5:55:20:04:59:b3:21:3f:33:3f:7a:99:
         dc:b1:e9:dd:84:d9:7a:8c:55:f3:45:e1:de:70:8e:fc:bf:ac:
         22:f2:a8:37:fb:03:c2:d3:d8:45:3f:e6:3e:2c:91:bd:1a:fc:
         43:0e:4c:0d:54:57:1b:c3:1c:0d:ab:30:ff:b6:5d:25:7f:9c:
         5c:f7:26:b8:4d:87:e2:55:0a:35:6f:85:da:cd:b2:08:0f:de:
         9d:68:b6:bd:98:34:fc:63:25:4a:be:71:d7:bd:ec:58:cc:ea:
         1a:8b:cc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 18 04:19:33 2024 by rpki-client on console-fra.rpki-client.org