Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/323830343a353939303a3a2f33322d3332203d3e20323638373130.roa
File:                     323830343a353939303a3a2f33322d3332203d3e20323638373130.roa (raw, json)
Hash identifier:          sXiKMAuMuVek9qh2RO6ztluoJV9j0qhDax7rJuTsSjc=
Subject key identifier:   63:92:5F:1A:CB:44:95:14:03:15:00:D3:5C:1A:E3:34:75:89:14:09
Certificate issuer:       /CN=5847FB25C967B7747A3862CC818403059C9613CB
Certificate serial:       3BEBA9BC2D7B21FF705D70149317012B8F6F76DE
Authority key identifier: 58:47:FB:25:C9:67:B7:74:7A:38:62:CC:81:84:03:05:9C:96:13:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5847FB25C967B7747A3862CC818403059C9613CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/323830343a353939303a3a2f33322d3332203d3e20323638373130.roa
Signing time:             Thu 04 Apr 2024 16:45:32 +0000
ROA not before:           Thu 04 Apr 2024 16:40:32 +0000
ROA not after:            Thu 03 Apr 2025 16:45:32 +0000
asID:                     268710
IP address blocks:        2804:5990::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:eb:a9:bc:2d:7b:21:ff:70:5d:70:14:93:17:01:2b:8f:6f:76:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5847FB25C967B7747A3862CC818403059C9613CB
        Validity
            Not Before: Apr  4 16:40:32 2024 GMT
            Not After : Apr  3 16:45:32 2025 GMT
        Subject: CN=63925F1ACB449514031500D35C1AE33475891409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:78:76:ed:a4:24:d5:88:25:1d:6a:de:f3:8c:
                    ba:bd:44:ef:b2:86:4c:f5:f2:2f:a5:ea:2b:83:71:
                    a6:e2:cd:01:1f:2b:ce:13:47:63:9b:1b:7b:3e:52:
                    8d:74:ac:44:04:cc:c7:7a:47:7e:77:cd:f5:cc:29:
                    49:d5:14:22:01:02:51:1d:15:1d:84:18:0e:32:26:
                    88:36:e2:1b:be:74:8a:96:4c:88:c0:ab:6c:db:e9:
                    1d:59:37:16:a0:9c:cd:4f:3d:51:dd:63:1e:04:c0:
                    9e:48:71:dc:49:2a:6a:d9:b7:0b:e1:15:9e:13:99:
                    f0:f9:5a:b4:7e:16:7b:d4:08:81:97:da:70:43:5b:
                    df:c9:e4:08:d7:87:aa:9a:4c:19:b6:35:40:e2:ab:
                    55:a8:cc:18:2e:41:51:af:37:c4:9c:48:5b:e2:51:
                    01:b8:6c:c0:6f:70:6d:11:48:8c:77:ed:37:e0:83:
                    fa:26:24:ee:19:a2:79:ee:b3:90:8b:82:dc:74:dd:
                    c5:2a:be:2c:c0:97:ec:7c:9a:e1:66:d3:93:3c:f0:
                    75:8f:1c:c2:d3:01:91:7f:d0:22:84:55:11:3a:94:
                    b2:05:6d:f1:fb:84:ce:1e:d1:de:fd:b3:64:38:59:
                    9b:ce:18:e7:c4:00:05:a6:3c:f6:76:20:c2:12:7c:
                    dc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:92:5F:1A:CB:44:95:14:03:15:00:D3:5C:1A:E3:34:75:89:14:09
            X509v3 Authority Key Identifier:
                keyid:58:47:FB:25:C9:67:B7:74:7A:38:62:CC:81:84:03:05:9C:96:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/5847FB25C967B7747A3862CC818403059C9613CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5847FB25C967B7747A3862CC818403059C9613CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/323830343a353939303a3a2f33322d3332203d3e20323638373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5990::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:d0:10:21:3e:5b:09:06:31:02:fa:a4:e2:65:dc:10:18:18:
         fc:9c:f9:f7:e7:78:7d:13:be:1f:07:a2:d5:b1:9e:6a:57:04:
         06:f4:e9:a0:35:20:7c:9d:cc:d2:fa:b8:b5:24:9d:ea:3c:60:
         04:bd:dc:8d:3c:32:e6:1b:3b:96:04:a3:89:ab:a4:d0:d0:39:
         d8:ad:07:ad:c7:76:ed:9f:77:21:4a:de:7b:23:c2:f8:46:e0:
         65:76:23:9d:f9:b4:c4:25:5e:41:af:4f:ea:47:c8:f8:63:24:
         a9:dd:ed:4d:58:e2:50:ed:db:d2:11:8c:b3:79:96:97:cd:53:
         ef:c0:0c:8c:1b:62:9d:a6:09:3b:4e:6a:95:b7:b9:a9:f6:67:
         f7:0c:56:e6:da:88:ea:56:ac:74:9b:a2:eb:75:4d:89:48:bc:
         5f:6c:2c:54:95:89:bc:be:2c:4c:02:12:2c:d0:43:84:12:ad:
         9b:4f:1e:bb:7a:f0:26:b7:b2:67:f7:5b:93:b1:5a:57:c4:9a:
         b7:0f:9a:ef:6d:1d:3b:2f:43:eb:8c:32:e4:17:72:d7:e4:0d:
         f3:a9:c2:d5:09:1b:73:bf:84:5c:6e:71:98:94:f5:6f:0d:e4:
         82:2e:23:48:e6:4b:87:3a:62:d0:02:96:0f:e6:fb:f9:e2:d8:
         18:49:8f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 09:17:56 2024 by rpki-client on console-ams.rpki-client.org