Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3330303a3a2f34302d3430203d3e20323637333235.roa
File:                     323830343a346262343a3330303a3a2f34302d3430203d3e20323637333235.roa (raw, json)
Hash identifier:          mareyF2ZuypjgZUzpE8/kNZJb13fkCrrzkAwvUNmWQ8=
Subject key identifier:   AA:FC:58:F2:4E:B2:8B:C0:05:67:68:8E:D3:C5:52:C7:64:B5:13:A5
Certificate issuer:       /CN=5FF400439781FE8490A8662BF8C3E0E5C82C89A2
Certificate serial:       46BC079BF1781EA7BF884E78B653A6F30419D99C
Authority key identifier: 5F:F4:00:43:97:81:FE:84:90:A8:66:2B:F8:C3:E0:E5:C8:2C:89:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FF400439781FE8490A8662BF8C3E0E5C82C89A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3330303a3a2f34302d3430203d3e20323637333235.roa
Signing time:             Tue 05 Dec 2023 17:44:44 +0000
ROA not before:           Tue 05 Dec 2023 17:39:44 +0000
ROA not after:            Tue 03 Dec 2024 17:44:44 +0000
asID:                     267325
IP address blocks:        2804:4bb4:300::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:bc:07:9b:f1:78:1e:a7:bf:88:4e:78:b6:53:a6:f3:04:19:d9:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FF400439781FE8490A8662BF8C3E0E5C82C89A2
        Validity
            Not Before: Dec  5 17:39:44 2023 GMT
            Not After : Dec  3 17:44:44 2024 GMT
        Subject: CN=AAFC58F24EB28BC00567688ED3C552C764B513A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9d:60:3e:53:ec:ed:37:4f:82:cd:6e:13:5b:
                    3b:9f:81:95:16:13:af:0c:65:74:70:f8:69:77:0d:
                    7e:89:50:f6:1a:46:e2:5a:ae:7a:9a:46:6a:f1:e9:
                    18:a6:d9:69:54:a2:62:a1:1a:38:e1:18:ff:3e:f6:
                    22:4c:8f:01:24:ee:20:e9:e3:29:0f:bc:51:cd:c8:
                    5c:2b:ee:1a:35:a9:96:c6:97:48:bc:c1:c0:33:97:
                    a0:c8:33:e4:80:fa:3b:f5:c1:12:69:64:27:40:bf:
                    cb:51:2c:18:fa:7e:f3:2e:64:7a:a5:9e:8c:2d:cd:
                    ca:b2:34:d5:d8:81:c4:e4:89:52:99:0c:05:e4:75:
                    a0:e9:5f:85:6b:f4:19:6a:aa:a6:9d:ac:10:96:89:
                    36:29:7a:70:99:06:9c:d3:32:10:33:32:e9:b3:64:
                    ac:67:2c:b8:5b:46:8e:2d:83:33:59:a2:f8:8e:24:
                    a5:a1:59:a6:bc:71:b0:2b:de:80:5f:d4:c9:6a:4c:
                    c2:e8:bc:45:7d:37:e3:34:2d:e6:5b:b7:4c:f7:96:
                    99:f7:fc:8b:c5:64:e6:a4:4e:ef:34:76:3a:8e:6d:
                    32:58:71:d3:e3:3a:52:16:79:c8:8d:b0:bc:bf:fb:
                    b0:45:9e:b8:41:f9:24:2f:65:82:6c:08:8c:24:63:
                    df:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FC:58:F2:4E:B2:8B:C0:05:67:68:8E:D3:C5:52:C7:64:B5:13:A5
            X509v3 Authority Key Identifier:
                keyid:5F:F4:00:43:97:81:FE:84:90:A8:66:2B:F8:C3:E0:E5:C8:2C:89:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/5FF400439781FE8490A8662BF8C3E0E5C82C89A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FF400439781FE8490A8662BF8C3E0E5C82C89A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3330303a3a2f34302d3430203d3e20323637333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bb4:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         84:9c:bb:30:b9:95:84:58:77:fc:7c:f3:2a:58:63:b2:3b:0f:
         d1:55:d5:ff:94:d5:80:a2:3f:ce:16:3d:78:7b:bb:6b:b8:a9:
         b7:ab:22:c6:9b:64:1e:73:0e:a3:f9:c2:0d:bb:b1:77:ff:6d:
         39:af:6a:80:16:1a:0d:37:38:a3:f0:85:96:c5:96:c1:0c:e6:
         df:77:8a:56:37:e1:78:e5:6e:61:1f:42:e2:fe:59:e1:60:34:
         06:8f:d9:a8:00:e3:e3:be:af:39:f0:29:47:cf:aa:6a:c6:5c:
         13:ba:d9:78:f3:46:36:3b:2e:41:14:dc:73:7f:bf:22:92:59:
         09:29:d1:28:37:d9:dd:ae:71:dd:c0:51:dd:50:d9:0c:21:65:
         bf:d6:ca:f6:e1:f8:5b:99:2b:57:4d:3a:4a:86:e3:31:45:59:
         0d:ea:25:3b:e2:b8:cd:a1:f7:aa:a8:11:2e:72:76:88:1e:fa:
         19:f8:49:4e:5e:ad:d4:61:30:a0:07:5c:06:d0:11:5d:97:9b:
         87:6a:78:0e:36:f4:b3:66:4d:38:d0:ce:f0:93:c3:2c:f0:6e:
         3d:63:d1:16:54:bf:00:e1:a3:c5:a3:97:5d:6a:d9:94:82:25:
         17:aa:c1:bf:ee:52:9e:09:eb:8c:e4:bd:40:a6:45:c6:45:38:
         05:49:24:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 22:06:19 2024 by rpki-client on console-ams.rpki-client.org