Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/323830343a356166343a343030303a3a2f33342d3334203d3e20323638383039.roa
File:                     323830343a356166343a343030303a3a2f33342d3334203d3e20323638383039.roa (raw, json)
Hash identifier:          7yMNAtRHZDcejJTx4ERsANhX4iNCPHg5tNPKNZNF7D8=
Subject key identifier:   FC:0E:C6:51:F7:20:3F:F9:EE:CC:36:76:2C:0B:5B:2A:7A:2C:3B:4B
Certificate issuer:       /CN=B37291E6021BB75C026BEA016CB480944391AEB5
Certificate serial:       53D93A4B79C5F3DA338E20490901C125ECA6B803
Authority key identifier: B3:72:91:E6:02:1B:B7:5C:02:6B:EA:01:6C:B4:80:94:43:91:AE:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B37291E6021BB75C026BEA016CB480944391AEB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/323830343a356166343a343030303a3a2f33342d3334203d3e20323638383039.roa
Signing time:             Tue 20 Aug 2024 14:01:01 +0000
ROA not before:           Tue 20 Aug 2024 13:56:01 +0000
ROA not after:            Tue 19 Aug 2025 14:01:01 +0000
asID:                     268809
IP address blocks:        2804:5af4:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d9:3a:4b:79:c5:f3:da:33:8e:20:49:09:01:c1:25:ec:a6:b8:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B37291E6021BB75C026BEA016CB480944391AEB5
        Validity
            Not Before: Aug 20 13:56:01 2024 GMT
            Not After : Aug 19 14:01:01 2025 GMT
        Subject: CN=FC0EC651F7203FF9EECC36762C0B5B2A7A2C3B4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d1:61:55:65:e2:f1:6a:26:ae:05:10:14:0b:
                    e0:6b:22:66:ff:e0:eb:12:1f:e7:6e:b7:a8:d1:b4:
                    42:23:1c:37:3b:c4:a6:7a:9c:42:77:3f:6e:26:b4:
                    16:c6:de:6d:0d:0d:2c:d9:eb:71:8f:8a:33:12:14:
                    8d:cd:70:33:60:b4:10:20:5f:34:af:d2:4f:9f:77:
                    36:47:10:0e:e2:4a:f5:b0:15:ca:45:90:b7:98:2b:
                    2d:01:1d:83:7c:f0:c2:ac:e3:4e:b4:b5:cb:a6:77:
                    0f:b1:e3:6c:56:6f:53:78:40:31:0e:05:0d:30:e6:
                    a8:f5:b3:11:7c:ca:d1:e7:3c:aa:e3:4b:6c:38:c4:
                    7b:77:cd:fb:8b:c6:2a:2a:5b:5a:ac:0c:71:ec:bf:
                    49:0f:87:7d:2e:c1:76:39:ea:07:e9:26:70:d5:5a:
                    51:9c:9b:a5:78:ce:22:64:57:87:05:a4:46:40:cf:
                    17:b1:c6:36:0f:32:e6:52:95:c7:05:8b:8e:f8:bb:
                    d2:14:17:b5:e0:7f:5a:62:96:87:27:41:c9:e7:22:
                    34:df:5b:1d:04:6c:c3:63:1b:7f:2c:85:01:82:c8:
                    54:5a:28:d1:06:a2:e6:76:df:ea:23:a7:33:cc:1d:
                    0a:ac:4b:a3:94:18:80:c3:64:fa:af:fd:1e:fe:13:
                    46:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0E:C6:51:F7:20:3F:F9:EE:CC:36:76:2C:0B:5B:2A:7A:2C:3B:4B
            X509v3 Authority Key Identifier:
                keyid:B3:72:91:E6:02:1B:B7:5C:02:6B:EA:01:6C:B4:80:94:43:91:AE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B37291E6021BB75C026BEA016CB480944391AEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B37291E6021BB75C026BEA016CB480944391AEB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/323830343a356166343a343030303a3a2f33342d3334203d3e20323638383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5af4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         58:be:73:d9:8a:a9:cb:ff:34:da:f2:22:6b:1d:98:e7:53:c1:
         16:de:c0:23:7a:1e:f0:e7:f6:34:cb:8d:fe:bd:0b:80:5d:a1:
         a0:25:4c:48:9f:72:1c:a0:3a:9d:6e:65:22:fd:63:59:71:c0:
         33:34:7d:25:96:cd:d9:0e:05:71:bd:f2:f1:76:7c:78:c5:87:
         97:9e:93:27:9b:97:ad:7a:af:d4:e9:ee:cc:5d:a0:d2:10:46:
         8e:a9:78:fc:4c:1c:49:1f:2b:eb:0a:c1:fc:08:af:e7:e5:44:
         4a:16:f4:f2:77:b7:a2:26:8a:de:4e:ed:aa:9e:55:6b:9a:06:
         4f:48:cb:70:29:14:88:0e:f9:9d:18:37:66:7c:47:38:5b:2d:
         51:04:96:7e:16:74:ab:da:41:ba:bc:20:a1:55:81:ff:58:02:
         0a:41:79:f2:5e:2a:b0:0b:18:ef:6e:7a:80:e1:b1:64:1b:12:
         0d:67:e8:0a:0f:c9:a5:a0:aa:ef:48:e6:dd:3b:50:00:de:26:
         b6:83:c1:9c:eb:6d:73:4c:ca:87:17:cf:a8:94:24:83:7e:87:
         0d:8c:40:6d:4f:a0:3c:79:9a:0c:b6:76:b0:25:62:27:c5:26:
         52:b3:75:0e:04:e7:aa:61:2b:cd:72:2f:7e:f3:ed:2e:b2:72:
         23:39:96:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 06:55:41 2024 by rpki-client on console-fra.rpki-client.org