Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/1/323830343a363461633a3a2f33322d3332203d3e20323639343431.roa
File:                     323830343a363461633a3a2f33322d3332203d3e20323639343431.roa (raw, json)
Hash identifier:          HOssDfmVBaPq4JPldhCltVafYDDTUnJZcY9FYEv8Bsg=
Subject key identifier:   BE:70:B1:E5:70:09:DB:B0:B7:9D:CD:5E:30:3B:FE:C1:2A:96:45:6F
Certificate issuer:       /CN=7BDB8E46A577D9E35DC75F64051C0386B874A16F
Certificate serial:       0214322B368237E8E10578C325C545E49E72B15B
Authority key identifier: 7B:DB:8E:46:A5:77:D9:E3:5D:C7:5F:64:05:1C:03:86:B8:74:A1:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BDB8E46A577D9E35DC75F64051C0386B874A16F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/1/323830343a363461633a3a2f33322d3332203d3e20323639343431.roa
Signing time:             Thu 04 Apr 2024 21:51:02 +0000
ROA not before:           Thu 04 Apr 2024 21:46:02 +0000
ROA not after:            Thu 03 Apr 2025 21:51:02 +0000
asID:                     269441
IP address blocks:        2804:64ac::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:14:32:2b:36:82:37:e8:e1:05:78:c3:25:c5:45:e4:9e:72:b1:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BDB8E46A577D9E35DC75F64051C0386B874A16F
        Validity
            Not Before: Apr  4 21:46:02 2024 GMT
            Not After : Apr  3 21:51:02 2025 GMT
        Subject: CN=BE70B1E57009DBB0B79DCD5E303BFEC12A96456F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:61:9f:40:82:92:30:a7:ec:a4:4f:f1:0b:2e:
                    77:09:e9:bd:d7:1e:f8:9f:a3:99:2c:5d:1f:ae:55:
                    fc:21:db:07:10:3f:6c:93:7b:7c:9e:2f:e7:bd:ec:
                    c6:d6:67:cb:fc:2e:65:bf:41:d0:ed:e2:c7:c6:3d:
                    fb:3d:00:f7:7f:71:4c:9c:23:52:59:eb:68:9e:fc:
                    6e:4a:ef:e9:b6:18:70:d5:ef:af:ea:fd:e9:a0:a7:
                    a1:ec:f6:36:f9:63:b3:3e:ac:a0:a9:44:e5:da:f7:
                    ae:97:9b:e4:3f:2b:36:ae:db:9a:69:eb:8f:52:76:
                    6f:42:a1:1f:2f:f1:f4:36:c8:27:31:45:44:28:77:
                    62:ed:75:b1:6f:34:5b:67:0c:bf:5d:08:be:59:8d:
                    cc:fe:36:bc:c6:40:3f:84:c4:a0:83:a5:4e:e9:0e:
                    ea:29:b0:6e:32:d1:b2:de:37:eb:25:fc:3d:e3:e9:
                    de:1f:c7:e5:43:a5:dc:d8:6d:51:7c:21:6f:09:13:
                    18:af:b2:29:6a:08:f5:b4:60:31:2d:6c:b0:c9:76:
                    0b:2e:ed:d7:29:47:08:16:47:c8:b8:33:56:7b:05:
                    29:ec:87:71:42:e2:92:58:af:12:31:d8:7e:63:2b:
                    03:46:0e:82:59:5e:e2:45:a4:2e:d1:1f:ad:b5:b6:
                    ef:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:70:B1:E5:70:09:DB:B0:B7:9D:CD:5E:30:3B:FE:C1:2A:96:45:6F
            X509v3 Authority Key Identifier:
                keyid:7B:DB:8E:46:A5:77:D9:E3:5D:C7:5F:64:05:1C:03:86:B8:74:A1:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/1/7BDB8E46A577D9E35DC75F64051C0386B874A16F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BDB8E46A577D9E35DC75F64051C0386B874A16F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/1/323830343a363461633a3a2f33322d3332203d3e20323639343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:02:7d:70:19:1c:80:38:f7:54:b7:8c:42:46:33:21:8b:ae:
         7d:92:9a:2c:75:4c:bf:bc:66:fa:62:9e:3b:88:0a:8f:37:0d:
         0a:d5:8d:1d:73:8f:80:c9:9c:bc:1d:0a:a5:9d:31:48:f6:ed:
         6a:8d:88:f8:8d:4f:38:0e:9d:94:57:b7:b8:5a:8b:3d:10:21:
         a5:67:6c:3f:40:73:f5:1f:47:e1:d4:2e:0d:7d:a3:ee:1f:43:
         e3:9d:45:64:e6:a0:dc:8d:20:ca:82:31:ef:01:48:a0:bd:91:
         f9:63:36:37:c3:42:f7:e9:8d:c7:05:cd:8b:44:8c:55:ba:6a:
         1d:5f:c5:ff:35:3d:36:4c:f6:4c:60:08:ef:c3:77:e0:60:d2:
         fc:85:6f:24:70:bd:fd:c7:10:2f:19:e3:90:30:34:0c:aa:b1:
         d6:e8:33:6a:93:4f:0e:d5:d6:e1:68:e3:68:c1:f1:e5:85:06:
         43:31:ab:17:67:57:d3:c7:5d:7e:ee:10:70:85:c9:2e:d1:79:
         2b:97:b8:50:4e:87:38:33:39:dc:e4:9e:58:1d:b5:40:9d:2d:
         3f:a2:f4:6f:b6:70:21:11:23:bb:3d:45:3a:c7:ef:d2:2c:10:
         c5:d7:f9:8e:4a:69:83:70:91:79:1f:08:7f:12:92:31:37:ff:
         cb:a0:35:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 03:35:59 2024 by rpki-client on console-fra.rpki-client.org