Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/323830343a346536303a3a2f33322d3332203d3e20323638323537.roa
File:                     323830343a346536303a3a2f33322d3332203d3e20323638323537.roa (raw, json)
Hash identifier:          8QzXB6SXeB2OujVvmZ4Nv4sqRkGrfD0GX/3VeSHwJaA=
Subject key identifier:   AA:00:39:50:53:00:1C:AD:FA:F9:C7:77:D8:C9:E7:22:AB:A9:40:80
Certificate issuer:       /CN=57678057080E52061A1CA6E454ADEB9345B4646B
Certificate serial:       5DCB494C7FFBD9F59559821A3C79F42AADA18EB5
Authority key identifier: 57:67:80:57:08:0E:52:06:1A:1C:A6:E4:54:AD:EB:93:45:B4:64:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57678057080E52061A1CA6E454ADEB9345B4646B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/323830343a346536303a3a2f33322d3332203d3e20323638323537.roa
Signing time:             Fri 30 Aug 2024 17:50:10 +0000
ROA not before:           Fri 30 Aug 2024 17:45:10 +0000
ROA not after:            Fri 29 Aug 2025 17:50:10 +0000
asID:                     268257
IP address blocks:        2804:4e60::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:cb:49:4c:7f:fb:d9:f5:95:59:82:1a:3c:79:f4:2a:ad:a1:8e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57678057080E52061A1CA6E454ADEB9345B4646B
        Validity
            Not Before: Aug 30 17:45:10 2024 GMT
            Not After : Aug 29 17:50:10 2025 GMT
        Subject: CN=AA00395053001CADFAF9C777D8C9E722ABA94080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d0:fc:df:0b:51:24:f8:9d:8c:4c:84:d4:3c:
                    b1:c6:4d:46:5b:5e:e4:74:40:09:54:30:e1:db:37:
                    e3:60:40:1e:0e:a7:21:b4:3a:26:fc:d2:ad:37:b5:
                    8c:a8:fa:33:ea:3d:a4:3d:68:38:92:eb:de:ce:5f:
                    6f:35:26:68:1f:7d:46:a0:97:7c:cd:5a:39:c0:1c:
                    96:2e:54:eb:74:c2:24:e6:9f:59:fc:89:a5:11:ac:
                    db:91:16:22:62:33:64:70:c0:d6:c0:a3:45:d7:01:
                    66:3f:96:2b:ad:52:c9:4d:95:cc:34:2a:46:26:6b:
                    76:be:2a:e7:82:19:8a:56:63:85:04:1f:e9:bc:73:
                    68:a4:f4:9a:8e:86:bf:d8:27:d1:c9:9a:06:08:b1:
                    ac:fb:b7:95:42:0c:39:35:ca:8a:50:34:15:77:f2:
                    23:37:9d:d2:ff:8a:30:85:a5:50:9b:97:78:a7:40:
                    2f:13:9e:1c:8f:db:17:87:ab:36:9d:b9:ca:57:9c:
                    55:11:27:e8:5c:ec:15:2a:23:c9:f5:6b:24:2a:a7:
                    54:9d:c9:36:c3:1f:ce:73:31:59:f3:a8:b5:07:77:
                    7b:39:40:bd:f7:0e:bf:c9:e1:36:d1:e5:72:7f:76:
                    d2:91:05:5c:1d:85:35:55:9b:7a:67:eb:4d:55:7d:
                    7c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:00:39:50:53:00:1C:AD:FA:F9:C7:77:D8:C9:E7:22:AB:A9:40:80
            X509v3 Authority Key Identifier:
                keyid:57:67:80:57:08:0E:52:06:1A:1C:A6:E4:54:AD:EB:93:45:B4:64:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/57678057080E52061A1CA6E454ADEB9345B4646B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57678057080E52061A1CA6E454ADEB9345B4646B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/323830343a346536303a3a2f33322d3332203d3e20323638323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:f3:7c:f9:60:15:ed:e4:1b:7f:e4:b7:1d:bc:90:fe:3e:36:
         9c:6e:50:88:63:6a:77:fd:10:88:bf:59:dd:5d:9b:ba:f5:0c:
         b7:50:f4:5e:b2:54:cc:20:17:2f:c0:85:06:76:a3:79:1d:64:
         94:3c:fb:5b:ef:93:ea:1f:ec:f4:c3:63:74:89:62:1e:e4:b8:
         7d:f8:29:c4:0c:a5:e8:08:c2:cf:30:6a:9d:ca:da:6f:9e:34:
         37:5c:9d:47:1a:87:ce:4e:aa:f0:96:11:da:59:57:96:f1:38:
         27:69:6a:5e:b2:2f:26:0d:93:52:38:ff:22:be:36:0b:46:45:
         25:1a:54:10:77:3c:ab:cc:30:b1:d4:aa:ed:7a:37:48:fa:c3:
         37:68:e8:30:c4:5c:00:8d:50:b3:78:38:cb:d9:02:00:b4:56:
         fd:af:58:7f:a7:0a:55:cd:20:35:05:ee:0f:5f:1f:68:5f:fb:
         48:d0:20:b3:54:b0:65:08:ef:14:3c:c8:0b:09:38:cd:03:66:
         49:02:8f:6e:d3:89:16:0e:40:b4:64:23:c9:8c:7c:88:95:5d:
         dd:5d:e8:f4:a4:08:69:8f:f2:b7:9c:f8:ae:73:00:4a:8c:bf:
         53:3f:02:b2:fe:27:b2:b1:11:3f:f4:e6:59:53:84:0e:a8:db:
         cc:3f:95:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 19:48:30 2024 by rpki-client on console-ams.rpki-client.org