Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/323830343a383635343a343030303a3a2f33342d3334203d3e20323732363336.roa
File:                     323830343a383635343a343030303a3a2f33342d3334203d3e20323732363336.roa (raw, json)
Hash identifier:          1JXnGpO1y8CKsZp1GAc+cXn/UrD1COHL5x6M2OLXeoQ=
Subject key identifier:   85:4E:11:92:54:E2:61:68:39:47:74:03:7B:B5:38:83:71:72:21:53
Certificate issuer:       /CN=F2D25CAF9D6EFD512D9AF046D006B09AB12A7951
Certificate serial:       6FE3DC0177F417EC6448160EC3A0C9B8804FEE08
Authority key identifier: F2:D2:5C:AF:9D:6E:FD:51:2D:9A:F0:46:D0:06:B0:9A:B1:2A:79:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2D25CAF9D6EFD512D9AF046D006B09AB12A7951.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/323830343a383635343a343030303a3a2f33342d3334203d3e20323732363336.roa
Signing time:             Thu 27 Jun 2024 12:09:48 +0000
ROA not before:           Thu 27 Jun 2024 12:04:48 +0000
ROA not after:            Thu 26 Jun 2025 12:09:48 +0000
asID:                     272636
IP address blocks:        2804:8654:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e3:dc:01:77:f4:17:ec:64:48:16:0e:c3:a0:c9:b8:80:4f:ee:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2D25CAF9D6EFD512D9AF046D006B09AB12A7951
        Validity
            Not Before: Jun 27 12:04:48 2024 GMT
            Not After : Jun 26 12:09:48 2025 GMT
        Subject: CN=854E119254E26168394774037BB5388371722153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c4:f7:b2:e1:eb:72:eb:84:dc:93:cb:f3:ee:
                    37:c7:79:10:e8:65:03:17:43:34:26:34:1e:b2:e4:
                    b9:ad:4d:b0:3c:e8:78:00:3b:8a:db:cc:ac:45:8a:
                    7c:44:70:34:d4:c3:a8:eb:c0:39:dd:31:e7:69:cf:
                    8b:63:a8:80:af:3f:2a:c8:87:ac:7d:2c:7e:ac:75:
                    ba:d8:0e:73:79:f5:fe:b1:85:3d:c4:b5:9b:ee:c8:
                    26:f1:03:4e:e2:ab:08:36:46:ac:fa:e2:89:60:4e:
                    2f:3a:83:5a:27:3e:c2:2e:51:16:53:03:60:5d:cc:
                    d5:d1:bc:0a:94:1c:a9:b3:3e:e9:0a:7b:21:28:46:
                    c2:5c:b3:76:40:56:49:7b:e1:7a:18:cb:a2:ad:97:
                    2b:6a:bc:e8:f7:d7:8e:24:f5:80:41:50:61:b1:db:
                    4d:87:5d:a3:d1:74:76:17:35:a5:29:1f:e2:86:0a:
                    1d:2e:09:89:7e:64:2c:b0:81:7b:5b:99:7b:d6:f8:
                    61:f6:9c:7f:88:33:a6:ad:cd:41:26:f7:a4:f7:4b:
                    c6:f9:01:38:29:4f:15:54:2c:28:f1:67:59:1a:3b:
                    ee:29:64:3e:af:2b:40:3b:e6:8d:0b:42:91:ad:1c:
                    e3:a0:04:94:51:a7:d1:c9:95:ce:f5:d4:f9:06:5b:
                    37:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4E:11:92:54:E2:61:68:39:47:74:03:7B:B5:38:83:71:72:21:53
            X509v3 Authority Key Identifier:
                keyid:F2:D2:5C:AF:9D:6E:FD:51:2D:9A:F0:46:D0:06:B0:9A:B1:2A:79:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/F2D25CAF9D6EFD512D9AF046D006B09AB12A7951.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2D25CAF9D6EFD512D9AF046D006B09AB12A7951.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/323830343a383635343a343030303a3a2f33342d3334203d3e20323732363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8654:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         33:99:b3:9c:1d:8b:ad:cc:a8:14:02:3e:a6:ba:31:19:a6:e9:
         9e:89:cb:7b:c3:8f:8e:26:92:a0:f1:43:ff:1c:fd:15:9e:85:
         7e:89:80:55:33:a1:10:48:16:3b:36:95:96:e2:c0:84:0c:53:
         16:4f:bc:58:3a:23:ab:4d:ba:20:0c:73:8a:1a:77:ce:05:7e:
         31:42:df:50:4c:59:77:86:dd:2a:ca:d5:ab:7e:97:ef:b1:c0:
         7e:0b:67:a1:88:4f:ec:2f:de:13:aa:c8:f7:82:49:33:15:4a:
         9a:82:cc:9f:f6:66:12:99:d0:0b:b1:34:0a:a2:db:96:31:cf:
         9f:29:c2:82:94:d9:d8:63:68:da:d9:ff:37:30:ca:ea:b7:c1:
         73:e9:5b:23:81:9a:f0:d0:0f:26:99:65:2a:2e:ff:8f:49:c1:
         67:62:e8:1b:dc:2d:96:9c:7c:1f:a7:9a:03:a7:d9:20:b4:dd:
         a7:18:e4:a5:cb:65:bb:67:eb:6d:5b:f6:35:aa:04:a9:da:3e:
         65:ca:c4:b1:f5:6f:3d:08:e1:0b:dc:02:2a:86:ed:1d:15:5f:
         26:f2:b7:0f:b0:87:5d:be:88:06:ca:2a:b3:37:65:8d:c7:9c:
         21:53:ad:5e:65:2d:cd:f1:ba:c6:93:09:f1:8d:4f:4c:0c:95:
         6e:ba:a6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 19 02:37:24 2024 by rpki-client on console-fra.rpki-client.org