Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/323830343a356166343a633030303a3a2f33342d3334203d3e20323638383039.roa
File:                     323830343a356166343a633030303a3a2f33342d3334203d3e20323638383039.roa (raw, json)
Hash identifier:          hkbNxa7AcgkkHtDbfOFyoUmLlJ3HGHhipzcFAlqzWmA=
Subject key identifier:   AD:A6:E7:BC:35:28:C7:7E:8E:81:A3:AF:50:AD:56:93:00:D6:16:0B
Certificate issuer:       /CN=B37291E6021BB75C026BEA016CB480944391AEB5
Certificate serial:       792930F2CA1A2C213711DC5BAED10CCED2BB4E75
Authority key identifier: B3:72:91:E6:02:1B:B7:5C:02:6B:EA:01:6C:B4:80:94:43:91:AE:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B37291E6021BB75C026BEA016CB480944391AEB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/323830343a356166343a633030303a3a2f33342d3334203d3e20323638383039.roa
Signing time:             Tue 20 Aug 2024 14:01:08 +0000
ROA not before:           Tue 20 Aug 2024 13:56:08 +0000
ROA not after:            Tue 19 Aug 2025 14:01:08 +0000
asID:                     268809
IP address blocks:        2804:5af4:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:29:30:f2:ca:1a:2c:21:37:11:dc:5b:ae:d1:0c:ce:d2:bb:4e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B37291E6021BB75C026BEA016CB480944391AEB5
        Validity
            Not Before: Aug 20 13:56:08 2024 GMT
            Not After : Aug 19 14:01:08 2025 GMT
        Subject: CN=ADA6E7BC3528C77E8E81A3AF50AD569300D6160B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1f:6f:4f:b5:2e:3b:cf:10:d5:8d:bb:c2:76:
                    47:a7:a3:c4:c3:4f:8a:75:4c:1f:8a:51:a2:c9:d2:
                    65:8b:95:cf:df:92:cc:b7:2b:98:1e:fa:97:9f:19:
                    9b:49:39:6f:f7:2b:30:43:73:0e:d7:99:be:6e:3c:
                    2f:ee:1c:dd:40:f8:ef:21:d7:6f:1d:db:b0:3e:ea:
                    68:ba:43:ef:7f:05:84:61:a2:09:33:e8:a8:9b:01:
                    23:ba:3e:13:7a:3e:b8:3d:8d:1f:78:8b:92:33:b5:
                    00:10:3f:fa:e1:ef:ea:fa:77:10:42:74:6c:70:c9:
                    ad:bd:73:67:24:10:48:8e:26:02:58:c4:f7:a5:06:
                    c2:53:a6:95:3d:d9:28:55:0f:6f:1e:88:b3:fc:f8:
                    3c:27:e1:af:e5:02:32:7c:ac:fe:d6:42:f9:72:d8:
                    8e:e4:92:db:23:3d:7d:3d:53:5a:1e:18:8e:64:c6:
                    de:1e:42:54:0d:eb:90:89:e8:6c:48:ec:7f:a4:90:
                    57:83:69:c0:cf:a3:24:5b:da:36:4b:7f:7c:50:9b:
                    3c:fc:95:d6:50:a4:6d:79:c2:a8:ee:d4:2e:75:01:
                    54:a4:63:66:06:89:e9:3a:4d:48:11:91:64:7e:a9:
                    05:af:02:ca:a5:2e:05:3e:04:93:3c:bb:10:77:b7:
                    df:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A6:E7:BC:35:28:C7:7E:8E:81:A3:AF:50:AD:56:93:00:D6:16:0B
            X509v3 Authority Key Identifier:
                keyid:B3:72:91:E6:02:1B:B7:5C:02:6B:EA:01:6C:B4:80:94:43:91:AE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B37291E6021BB75C026BEA016CB480944391AEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B37291E6021BB75C026BEA016CB480944391AEB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/323830343a356166343a633030303a3a2f33342d3334203d3e20323638383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5af4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3a:17:54:de:0c:f1:83:72:62:e8:b2:1c:0a:46:e7:5b:1c:fc:
         53:4e:1f:5b:94:9e:30:ae:8b:35:57:1b:e9:c4:09:1a:7b:14:
         42:ef:eb:ea:75:9b:8f:a6:bd:5d:64:c2:e3:31:15:d0:a1:28:
         ad:70:65:1c:19:15:1a:94:61:10:8a:ff:52:a1:72:71:e0:87:
         4e:2d:31:d3:77:4d:eb:26:b1:12:61:96:32:2a:d0:7a:70:01:
         f6:5c:a8:1d:93:ea:b8:32:7f:d6:10:d5:39:4e:b1:c6:cc:65:
         b4:75:2a:fa:f0:af:90:9d:ba:a2:27:db:af:3d:8a:8a:3b:2d:
         67:cf:09:50:5d:ec:d4:6b:f7:26:f1:64:65:f1:07:34:d2:98:
         1e:37:1e:56:35:ee:53:2f:b4:c2:13:19:91:05:90:49:0a:12:
         45:06:f5:09:bf:f4:6c:ee:64:5e:ac:53:44:2e:78:ba:c6:12:
         ce:e8:d1:e5:a6:5b:50:70:69:13:24:4a:b4:d3:0c:5c:17:97:
         9c:ac:e8:57:bc:99:50:88:46:05:cb:e9:1b:10:2b:e2:0f:e9:
         03:c2:0c:6e:c9:27:e7:0d:c1:c6:d5:04:17:ce:6e:8c:33:eb:
         67:f1:1a:58:31:b3:43:04:08:38:34:30:3c:71:43:1b:da:20:
         5f:9f:3f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 06:54:33 2024 by rpki-client on console-ams.rpki-client.org