Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/323830343a356166343a3a2f33342d3334203d3e20323638383039.roa
File:                     323830343a356166343a3a2f33342d3334203d3e20323638383039.roa (raw, json)
Hash identifier:          EYh3GQQrYw/oOdn6JqJUUCq2K8NK+m5TZCokYf6fwgM=
Subject key identifier:   21:CE:BA:A8:B5:B8:C7:43:5B:A5:BA:E5:BA:D3:58:78:09:CA:71:FD
Certificate issuer:       /CN=B37291E6021BB75C026BEA016CB480944391AEB5
Certificate serial:       056DFAF57EDBE8EDDE1E875D439BD09A1EB819B7
Authority key identifier: B3:72:91:E6:02:1B:B7:5C:02:6B:EA:01:6C:B4:80:94:43:91:AE:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B37291E6021BB75C026BEA016CB480944391AEB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/323830343a356166343a3a2f33342d3334203d3e20323638383039.roa
Signing time:             Tue 20 Aug 2024 14:00:47 +0000
ROA not before:           Tue 20 Aug 2024 13:55:47 +0000
ROA not after:            Tue 19 Aug 2025 14:00:47 +0000
asID:                     268809
IP address blocks:        2804:5af4::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:6d:fa:f5:7e:db:e8:ed:de:1e:87:5d:43:9b:d0:9a:1e:b8:19:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B37291E6021BB75C026BEA016CB480944391AEB5
        Validity
            Not Before: Aug 20 13:55:47 2024 GMT
            Not After : Aug 19 14:00:47 2025 GMT
        Subject: CN=21CEBAA8B5B8C7435BA5BAE5BAD3587809CA71FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cd:ca:3b:da:04:c2:2e:2f:28:91:7b:88:2f:
                    39:0e:ce:bf:25:f5:05:1c:24:a3:ef:76:be:95:40:
                    eb:79:ad:46:5b:e9:c7:0c:e5:cc:3e:39:83:73:68:
                    6b:da:f4:59:c4:9c:45:26:a1:10:82:cd:eb:21:e3:
                    9d:3b:2a:6a:c6:54:f0:4e:62:2b:2e:27:02:fe:64:
                    5e:23:a5:20:c4:ee:9b:f3:2c:94:3e:54:e1:4b:95:
                    8c:69:35:59:97:8f:94:bf:02:97:b0:f3:f6:c6:91:
                    2c:ca:e2:d7:14:5b:f0:09:6e:5a:b0:35:0a:bb:fa:
                    8f:f2:8e:a9:72:67:35:8a:a2:2d:85:4b:f8:58:84:
                    18:71:46:4d:ae:cc:d3:35:f4:c3:4b:28:74:2d:3d:
                    7a:0a:81:c0:1a:ff:5d:e7:ee:d0:a4:4c:17:b0:72:
                    b9:c0:5b:d3:98:cc:e6:de:dd:eb:f5:75:4e:90:0d:
                    8f:b6:85:0e:10:59:9e:ff:d7:ad:5c:52:a3:b6:63:
                    1d:76:5c:02:29:46:7f:91:d8:2b:29:fc:bb:be:e6:
                    77:c8:71:18:b3:58:63:4f:93:2a:fe:43:d1:b3:8e:
                    e4:00:89:37:ec:1c:34:d5:00:5c:e3:fc:5a:22:4c:
                    db:e3:ef:c3:48:8f:ef:1c:73:36:65:2f:1f:b2:b0:
                    30:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CE:BA:A8:B5:B8:C7:43:5B:A5:BA:E5:BA:D3:58:78:09:CA:71:FD
            X509v3 Authority Key Identifier:
                keyid:B3:72:91:E6:02:1B:B7:5C:02:6B:EA:01:6C:B4:80:94:43:91:AE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B37291E6021BB75C026BEA016CB480944391AEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B37291E6021BB75C026BEA016CB480944391AEB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/323830343a356166343a3a2f33342d3334203d3e20323638383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5af4::/34

    Signature Algorithm: sha256WithRSAEncryption
         98:71:6e:47:1e:f1:84:65:11:1a:ca:24:00:24:d6:ec:2f:1e:
         a5:ba:ed:16:4b:8c:30:4a:89:0c:df:6c:d1:ef:18:fd:a6:cf:
         3f:c5:38:29:fc:a5:42:b2:d8:1b:b3:17:ee:45:c7:19:15:49:
         c3:a5:0d:5c:68:88:58:60:d3:be:55:9c:91:e8:05:eb:45:a0:
         a9:13:04:53:ed:44:a1:d4:a3:00:e3:8b:1e:99:c9:a1:5f:e4:
         88:df:99:5b:e9:40:e6:37:12:6a:c5:e7:75:36:25:57:6f:b8:
         fa:8f:aa:3e:53:c9:26:83:a0:46:a0:a4:56:10:7a:ed:f1:c7:
         38:33:3d:01:f5:5c:ce:d8:5d:4c:f1:b8:7b:16:54:bd:de:84:
         11:96:c2:6e:a6:ad:07:10:7f:85:7c:98:ac:6a:00:89:a1:59:
         33:10:b8:09:a3:67:50:f7:db:29:c5:81:9d:59:9e:72:78:64:
         e1:32:83:62:50:cc:ab:13:ca:c8:c8:1f:9c:eb:7a:91:36:42:
         9b:96:10:49:6b:c2:30:15:0e:39:44:73:a3:82:e5:3f:97:ef:
         f4:6d:54:df:61:c7:fe:d5:0c:50:18:9a:0b:44:bb:ad:41:c9:
         34:e2:34:de:6d:50:b1:ac:4c:12:9b:0b:59:da:91:84:d6:3e:
         34:f9:2f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 06:55:41 2024 by rpki-client on console-fra.rpki-client.org