Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/1/323830343a316539343a3a2f33322d3336203d3e20323634343337.roa
File:                     323830343a316539343a3a2f33322d3336203d3e20323634343337.roa (raw, json)
Hash identifier:          IE5LkEFxbLBI1wXsV2KtCEZ1xO/425qb2jZuh7ybgN0=
Subject key identifier:   8C:B1:1F:93:81:31:A2:2A:B9:48:86:33:F7:99:3C:67:66:39:D6:4C
Certificate issuer:       /CN=86BA241CDEDDD0EB0837151FECC1703934F67367
Certificate serial:       74B98F3B7D82F90FEC93AB0AC9393954E3332FCF
Authority key identifier: 86:BA:24:1C:DE:DD:D0:EB:08:37:15:1F:EC:C1:70:39:34:F6:73:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86BA241CDEDDD0EB0837151FECC1703934F67367.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/1/323830343a316539343a3a2f33322d3336203d3e20323634343337.roa
Signing time:             Mon 17 Jun 2024 01:13:44 +0000
ROA not before:           Mon 17 Jun 2024 01:08:44 +0000
ROA not after:            Mon 16 Jun 2025 01:13:44 +0000
asID:                     264437
IP address blocks:        2804:1e94::/32 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b9:8f:3b:7d:82:f9:0f:ec:93:ab:0a:c9:39:39:54:e3:33:2f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86BA241CDEDDD0EB0837151FECC1703934F67367
        Validity
            Not Before: Jun 17 01:08:44 2024 GMT
            Not After : Jun 16 01:13:44 2025 GMT
        Subject: CN=8CB11F938131A22AB9488633F7993C676639D64C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ed:7a:f3:ec:5b:ed:ac:38:a4:78:6a:7a:cb:
                    ed:74:fc:c7:41:b3:3c:ad:d6:aa:2e:26:e1:8a:a3:
                    ac:28:46:e5:4a:e2:a5:87:72:98:bd:54:1f:9a:5a:
                    84:be:41:3a:9a:06:e6:2e:bf:4a:fe:fb:6e:4e:4a:
                    69:c9:1c:fd:1a:f1:68:cf:3c:ea:a2:27:a8:09:94:
                    18:62:0e:54:61:77:83:0c:35:0e:5f:ca:a6:3e:8a:
                    00:53:11:87:44:79:0a:31:cd:a5:2b:a5:83:e5:d9:
                    fe:5c:5c:28:8e:f0:d1:d5:18:1d:d5:9e:47:e1:86:
                    fd:f2:a3:dd:ed:f8:77:96:fa:d6:70:b3:c3:fc:ae:
                    76:80:50:90:99:3b:ec:4f:38:ff:08:ff:92:aa:fd:
                    74:7a:c3:c3:62:b5:02:1c:30:ac:58:31:b7:00:e3:
                    af:dd:c8:1b:22:cc:d9:bc:e3:fb:8d:23:57:8d:3e:
                    97:33:3a:22:b9:07:96:5a:dc:10:94:81:80:47:7c:
                    92:07:ea:e4:54:94:d4:73:b4:75:c6:59:e1:3d:e8:
                    92:08:57:51:23:82:1b:0f:b1:8a:48:1d:3e:9c:73:
                    10:c1:21:44:1d:79:57:0e:bd:21:0e:03:71:5d:84:
                    db:43:13:23:04:be:d0:cf:a5:17:55:9f:a5:56:dc:
                    e8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B1:1F:93:81:31:A2:2A:B9:48:86:33:F7:99:3C:67:66:39:D6:4C
            X509v3 Authority Key Identifier:
                keyid:86:BA:24:1C:DE:DD:D0:EB:08:37:15:1F:EC:C1:70:39:34:F6:73:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/1/86BA241CDEDDD0EB0837151FECC1703934F67367.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86BA241CDEDDD0EB0837151FECC1703934F67367.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/1/323830343a316539343a3a2f33322d3336203d3e20323634343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e94::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:1f:7d:d0:b8:af:bd:15:7b:49:47:4e:78:2f:c3:56:4a:44:
         f2:02:4b:77:71:1a:f9:a8:d0:2c:76:24:4b:7a:9f:53:04:90:
         13:52:9d:72:c8:2b:21:71:7d:36:57:7e:02:0c:32:72:20:92:
         83:cd:fb:63:16:3c:dd:6b:4b:a1:a1:8b:c6:c1:d8:a6:ed:89:
         7f:5d:60:eb:96:81:5f:7d:c8:c3:97:a7:f4:67:f5:f2:ad:d5:
         dd:77:d7:22:61:27:f8:05:59:32:e7:70:93:2f:45:4f:83:d6:
         90:92:de:9a:cc:d2:11:3f:87:4c:65:df:b2:c4:58:f3:d0:89:
         6e:bf:02:7f:03:74:9b:cd:3c:70:5b:38:7f:e9:b0:2f:0a:f0:
         8e:44:80:70:bc:38:ef:8e:1e:e2:94:2e:1a:e3:bc:83:a9:02:
         bf:fb:0b:34:28:1e:57:e7:4f:6b:db:53:14:ba:3a:7c:fe:64:
         41:9e:1c:f2:ea:fd:af:3b:92:e5:9a:7c:77:8b:68:f1:9e:2e:
         93:65:ba:e8:c8:e5:53:b1:fb:31:6b:b5:c7:1f:fc:dc:7d:d2:
         a9:26:f6:b5:23:6e:ae:bb:c5:10:96:6a:3b:24:7d:6f:a7:94:
         61:57:de:41:d7:6a:0e:43:42:56:26:4e:4b:de:61:10:bf:06:
         6e:ad:0e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 00:30:25 2024 by rpki-client on console-ams.rpki-client.org