Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QHpPujYpdvQTMKwUyqSoaVBTg44Pb78C1ygukQnEiZx/0/323830343a386132633a3a2f33322d3334203d3e20323733363532.roa
File:                     323830343a386132633a3a2f33322d3334203d3e20323733363532.roa (raw, json)
Hash identifier:          5ds42ZtJQfWaDIkaeFyi+T0e0/aKiF7EHajXaeTaHWM=
Subject key identifier:   ED:3E:15:5A:B8:13:F5:33:5D:06:CE:5C:D2:3F:B0:F9:66:4C:95:E0
Certificate issuer:       /CN=2094FC15CEFE8B2207FBCBD0603A31F137B53341
Certificate serial:       6259CD1EF3A168B723C0A863A767A56A5EFDB599
Authority key identifier: 20:94:FC:15:CE:FE:8B:22:07:FB:CB:D0:60:3A:31:F1:37:B5:33:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2094FC15CEFE8B2207FBCBD0603A31F137B53341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QHpPujYpdvQTMKwUyqSoaVBTg44Pb78C1ygukQnEiZx/0/323830343a386132633a3a2f33322d3334203d3e20323733363532.roa
Signing time:             Mon 29 Apr 2024 14:12:58 +0000
ROA not before:           Mon 29 Apr 2024 14:07:58 +0000
ROA not after:            Mon 28 Apr 2025 14:12:58 +0000
asID:                     273652
IP address blocks:        2804:8a2c::/32 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:59:cd:1e:f3:a1:68:b7:23:c0:a8:63:a7:67:a5:6a:5e:fd:b5:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2094FC15CEFE8B2207FBCBD0603A31F137B53341
        Validity
            Not Before: Apr 29 14:07:58 2024 GMT
            Not After : Apr 28 14:12:58 2025 GMT
        Subject: CN=ED3E155AB813F5335D06CE5CD23FB0F9664C95E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e3:69:f7:52:10:0c:c9:6d:59:a2:d9:32:ac:
                    26:00:1d:6b:e2:6c:23:e9:59:60:a0:4a:56:73:0b:
                    1b:50:45:3b:0f:09:69:ce:05:eb:a3:83:b0:6c:fa:
                    96:71:f3:47:07:be:95:89:12:4a:f3:90:a2:af:6a:
                    70:cf:72:99:f9:0d:5c:aa:aa:a2:7b:e2:5b:52:e7:
                    53:35:f7:d8:0e:7b:11:f3:e2:9b:21:2a:98:e0:2a:
                    ab:ec:38:25:21:5c:a7:7d:23:6b:db:e0:05:3b:27:
                    78:81:d6:e6:75:cf:c1:b0:6d:29:1a:30:e2:bb:b2:
                    ae:cf:80:d9:ea:a4:93:00:a5:60:aa:8d:f2:46:76:
                    c9:a0:e3:d4:eb:65:9d:01:b8:46:6a:d9:38:84:9f:
                    3e:96:f7:7e:51:d2:4f:68:05:da:ba:24:cb:cd:80:
                    61:0f:a7:b9:ac:ac:2e:5f:92:67:7d:29:84:d6:30:
                    c1:17:b8:cb:14:7f:ab:fb:e1:7e:d6:3a:e7:ef:d1:
                    3c:36:61:ab:fd:46:ea:84:e1:b5:2d:04:81:3c:fa:
                    d0:e7:f2:24:af:61:7d:dd:3f:1b:c6:f1:28:ad:9f:
                    6a:1a:4a:15:12:7c:6a:bb:e6:ca:c9:b4:25:53:a5:
                    81:5a:9e:27:a1:aa:c3:cb:5d:0e:6c:bd:03:e3:ff:
                    86:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3E:15:5A:B8:13:F5:33:5D:06:CE:5C:D2:3F:B0:F9:66:4C:95:E0
            X509v3 Authority Key Identifier:
                keyid:20:94:FC:15:CE:FE:8B:22:07:FB:CB:D0:60:3A:31:F1:37:B5:33:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QHpPujYpdvQTMKwUyqSoaVBTg44Pb78C1ygukQnEiZx/0/2094FC15CEFE8B2207FBCBD0603A31F137B53341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2094FC15CEFE8B2207FBCBD0603A31F137B53341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QHpPujYpdvQTMKwUyqSoaVBTg44Pb78C1ygukQnEiZx/0/323830343a386132633a3a2f33322d3334203d3e20323733363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:dc:ca:67:0f:eb:97:d2:b8:ea:56:55:3a:b4:96:c3:a7:bd:
         39:05:37:b9:bc:cb:e6:e7:16:d5:28:bf:b6:d8:80:a3:a4:77:
         bc:9f:e5:99:ad:96:57:e9:11:3f:d0:08:b2:c5:f8:31:6b:21:
         76:85:b1:29:cb:e1:f7:38:84:68:f8:22:32:a9:ab:26:e7:c2:
         f8:d3:95:0f:43:8f:33:2c:3b:e0:de:11:00:f4:b1:2c:71:d4:
         c4:a7:2f:67:eb:e9:57:59:7f:9a:4a:48:9f:a9:2f:95:2e:6f:
         08:c0:e7:2b:46:aa:f4:d2:79:ec:74:74:b3:fa:90:fa:c9:81:
         ac:4c:74:91:4c:9b:f7:85:3b:ff:90:3d:d9:47:79:0a:c6:34:
         98:c2:5c:a2:ef:d8:3e:39:6e:2d:5d:e4:2a:19:d0:d2:e0:61:
         b1:ab:a6:55:04:bf:02:53:76:57:d6:28:f8:af:0d:24:58:dd:
         5a:04:6c:ab:12:c0:da:58:1b:71:a9:9c:47:c6:d6:c1:df:48:
         ab:55:56:62:37:ca:21:26:08:dd:cf:35:c1:74:6b:6c:09:1a:
         5b:42:0a:97:6e:c5:b1:16:a5:98:d6:b7:dc:13:27:7f:84:b8:
         14:91:b8:f5:48:c3:97:99:54:e6:c3:78:56:2e:d6:23:f3:a7:
         15:d7:e5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 06:56:26 2024 by rpki-client on console-fra.rpki-client.org