Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a3a2f33332d3334203d3e203238333630.roa
File:                     323830343a31343a3a2f33332d3334203d3e203238333630.roa (raw, json)
Hash identifier:          cQ0dXavvR1XQk9ZwGn7lMp2FgNDio3I1k/+yj0cX6z4=
Subject key identifier:   35:41:03:73:B2:86:56:A0:AA:68:A5:96:60:08:97:4C:2B:04:71:CA
Certificate issuer:       /CN=06A6703BF770768B2EF441F46345E46D1CF107A6
Certificate serial:       757DD203FF615639AC5B7DD1E51FE13977EF335E
Authority key identifier: 06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a3a2f33332d3334203d3e203238333630.roa
Signing time:             Mon 12 Aug 2024 20:01:58 +0000
ROA not before:           Mon 12 Aug 2024 19:56:58 +0000
ROA not after:            Mon 11 Aug 2025 20:01:58 +0000
asID:                     28360
IP address blocks:        2804:14::/33 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7d:d2:03:ff:61:56:39:ac:5b:7d:d1:e5:1f:e1:39:77:ef:33:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06A6703BF770768B2EF441F46345E46D1CF107A6
        Validity
            Not Before: Aug 12 19:56:58 2024 GMT
            Not After : Aug 11 20:01:58 2025 GMT
        Subject: CN=35410373B28656A0AA68A5966008974C2B0471CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9d:62:1e:32:cc:4f:a3:7c:ba:e2:ef:08:35:
                    1b:6c:20:8c:e4:0d:eb:ad:cb:f0:6c:09:9e:1c:38:
                    82:27:4f:2e:0c:07:ef:b9:6c:25:c9:39:15:ef:f7:
                    53:17:da:f4:37:3a:07:90:b6:68:21:bc:2e:83:30:
                    22:7f:33:fc:aa:4f:37:13:70:0d:07:4c:9a:74:1a:
                    29:a9:bd:30:98:18:20:63:90:b0:d2:c4:3f:d8:e4:
                    a2:fa:d5:36:03:51:14:5f:aa:aa:48:c5:64:e9:0c:
                    a8:1a:dc:22:92:af:1d:57:08:2d:90:ff:8e:5c:d0:
                    41:34:72:50:f0:72:77:1c:7d:19:1c:38:cb:8a:7c:
                    5e:50:4c:bd:8f:45:ba:4d:cf:04:d4:13:a6:a7:ff:
                    77:00:d5:5f:fb:f7:10:91:1f:a0:90:6c:d5:85:bd:
                    fc:15:2f:b0:ed:fd:f7:98:6f:ec:9c:ae:01:7c:a4:
                    74:55:33:d1:75:4b:e5:79:e9:ec:76:b9:a6:d7:29:
                    54:c3:4c:8b:9b:50:fa:95:1f:1a:a2:cb:ac:d4:79:
                    cf:7a:c0:e4:31:bb:8d:80:93:c2:e8:81:00:57:d4:
                    92:8c:59:ed:d2:a4:eb:7b:ea:4c:a1:3b:40:dc:58:
                    66:b9:2d:d2:95:40:e4:73:cc:26:46:fa:da:85:a3:
                    37:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:41:03:73:B2:86:56:A0:AA:68:A5:96:60:08:97:4C:2B:04:71:CA
            X509v3 Authority Key Identifier:
                keyid:06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/06A6703BF770768B2EF441F46345E46D1CF107A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/323830343a31343a3a2f33332d3334203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14::/33

    Signature Algorithm: sha256WithRSAEncryption
         5a:c3:88:7a:49:e8:4c:ff:42:47:3c:65:a9:0b:1f:8c:a9:3f:
         9d:7c:dd:c6:c9:98:0c:55:44:ec:41:c2:d8:55:39:03:72:30:
         48:3a:a6:63:d4:4d:80:19:83:2d:13:a7:2a:c3:83:3d:b3:15:
         96:c1:90:2e:4c:0a:e4:6f:3f:2c:eb:6c:89:4d:aa:8d:17:0a:
         32:2c:12:86:24:16:6b:55:8c:2c:ee:df:6d:62:9e:b6:a3:12:
         b2:ca:06:be:90:51:2d:a4:3c:bc:66:5a:9a:0f:79:55:44:9f:
         b1:2e:a4:8e:26:0a:59:32:11:96:b3:32:0d:f7:e2:6d:ac:e1:
         21:b3:60:18:a0:2d:67:70:11:67:c8:14:2d:36:d4:86:e3:3a:
         02:42:19:61:a7:b1:29:65:65:40:f7:cc:70:51:b7:41:87:4f:
         32:2d:9b:33:67:dc:5e:6a:e4:2c:5c:bd:8a:75:82:80:0f:a0:
         b3:ba:2e:76:8e:9a:27:59:c3:ad:a2:79:85:76:88:f0:52:67:
         bf:25:7f:8e:10:41:33:b4:f3:ea:22:e1:44:26:16:72:cb:aa:
         f5:f8:19:eb:97:31:87:b4:a3:0e:9d:80:8e:19:f2:93:76:39:
         75:c4:08:75:2e:4a:5e:2c:a8:76:fd:eb:6b:65:cb:96:cb:51:
         69:0b:65:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 09:45:28 2024 by rpki-client on console-ams.rpki-client.org