Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/1/323830343a346462303a3a2f33322d3332203d3e20323638323133.roa
File:                     323830343a346462303a3a2f33322d3332203d3e20323638323133.roa (raw, json)
Hash identifier:          b8N96wzmgKYn4WuZbIC2z3OwFUmRsXhd99nBW6zFAFU=
Subject key identifier:   00:57:1B:DE:D5:84:D7:41:7D:D8:A2:29:99:72:94:1D:A5:E0:47:24
Certificate issuer:       /CN=B617F48A1128769A4C93EA7BD53E7201359F4AAA
Certificate serial:       7245F5528F7AA81184BB14DB4EE026689DD6E827
Authority key identifier: B6:17:F4:8A:11:28:76:9A:4C:93:EA:7B:D5:3E:72:01:35:9F:4A:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B617F48A1128769A4C93EA7BD53E7201359F4AAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/1/323830343a346462303a3a2f33322d3332203d3e20323638323133.roa
Signing time:             Wed 05 Jun 2024 18:33:46 +0000
ROA not before:           Wed 05 Jun 2024 18:28:46 +0000
ROA not after:            Wed 04 Jun 2025 18:33:46 +0000
asID:                     268213
IP address blocks:        2804:4db0::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:45:f5:52:8f:7a:a8:11:84:bb:14:db:4e:e0:26:68:9d:d6:e8:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B617F48A1128769A4C93EA7BD53E7201359F4AAA
        Validity
            Not Before: Jun  5 18:28:46 2024 GMT
            Not After : Jun  4 18:33:46 2025 GMT
        Subject: CN=00571BDED584D7417DD8A2299972941DA5E04724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:89:41:27:89:0f:f7:ee:cf:3a:4d:54:ac:a2:
                    e2:62:f9:eb:5b:f0:66:12:49:6f:ef:5c:c9:ec:9a:
                    13:8f:16:d9:a1:4e:80:79:ca:14:63:3c:43:16:67:
                    ee:1c:bc:24:f1:1d:0f:b5:ad:69:d7:19:12:76:74:
                    7c:e7:1e:34:c3:e4:3b:5c:ec:b3:25:51:99:95:d9:
                    33:0a:57:73:fb:fa:e0:f8:79:64:f7:79:1e:ed:93:
                    84:ed:b0:70:a2:07:e1:11:29:d9:8a:bf:78:d4:0a:
                    9d:2f:4f:fb:31:ae:2c:bb:5a:e2:ec:05:dd:2a:9e:
                    95:69:34:8d:c7:3d:9e:07:42:39:5d:35:da:e6:4a:
                    9d:91:cc:45:6c:3c:48:73:42:d1:f7:13:26:3d:da:
                    27:80:64:99:b7:9a:80:5d:ef:a8:48:4a:ef:3b:51:
                    8e:5f:50:0f:0c:61:d6:3c:51:63:2f:3c:f1:e9:65:
                    dc:91:3f:73:00:b1:82:f4:46:fb:0b:63:99:6d:e5:
                    ba:fd:0d:13:fa:52:db:bc:a9:06:5a:29:da:75:85:
                    68:bb:67:41:b9:77:8a:30:28:cd:c2:ec:98:8e:4a:
                    e2:7a:3d:a3:81:5b:dd:b8:d9:c2:b7:20:8e:c1:7d:
                    c6:84:52:61:f5:4a:bb:bf:7a:2c:98:8f:a5:72:2b:
                    2c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:57:1B:DE:D5:84:D7:41:7D:D8:A2:29:99:72:94:1D:A5:E0:47:24
            X509v3 Authority Key Identifier:
                keyid:B6:17:F4:8A:11:28:76:9A:4C:93:EA:7B:D5:3E:72:01:35:9F:4A:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/1/B617F48A1128769A4C93EA7BD53E7201359F4AAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B617F48A1128769A4C93EA7BD53E7201359F4AAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/1/323830343a346462303a3a2f33322d3332203d3e20323638323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4db0::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:64:f5:e4:98:3c:57:89:fd:3a:8d:d2:15:9c:86:9e:7c:52:
         5c:75:66:0b:a1:c3:6f:2a:bd:ce:ad:6c:df:2b:bb:f5:14:d2:
         ce:e6:49:c9:6e:80:f1:d9:76:8c:35:6e:c0:cf:8f:c6:0f:1c:
         e2:b3:bc:f8:47:ef:46:44:a2:f0:ac:10:12:df:68:29:26:e2:
         6d:b4:db:83:90:5a:48:cc:d1:55:8d:c1:88:e0:c5:94:e2:7a:
         54:3c:0f:85:e2:e2:d4:aa:44:15:fb:1b:38:25:a6:43:3a:39:
         ae:e4:27:43:f8:34:06:4c:cb:1f:14:e3:a4:7e:a5:d7:34:f1:
         ca:f8:2a:d4:11:32:16:10:4e:86:4f:81:ff:db:9d:68:21:5b:
         64:a8:54:b4:0b:0c:16:95:ac:fa:02:87:e7:6c:a5:5d:03:8a:
         92:05:7b:d4:fe:54:66:06:b5:6f:96:34:1b:9b:86:7a:09:50:
         d6:34:52:69:46:86:e2:b7:08:e3:b4:8e:15:30:ea:27:66:85:
         67:e8:9d:a5:9f:32:2c:63:32:22:db:52:31:4b:07:7c:99:eb:
         6b:1e:9e:8d:a0:bd:ec:28:4e:cd:ec:04:6e:8f:d1:34:68:2a:
         47:a3:63:bf:3c:66:cb:d9:a9:6b:0e:38:63:71:b1:83:a6:41:
         f6:fd:2e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 08:21:54 2024 by rpki-client on console-fra.rpki-client.org