Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5BbcYXfoxJhunshcs7XguYzRJZ1RzPrmtBtxZvp7gGEK/1/323830343a356165303a3a2f33322d3336203d3e20323638383032.roa
File:                     323830343a356165303a3a2f33322d3336203d3e20323638383032.roa (raw, json)
Hash identifier:          JoR0H7YAm1bHTq5VuYxF6HViiCV/niELZh//T5kDwnU=
Subject key identifier:   D2:0B:0A:35:B1:0E:53:F5:1A:22:F8:78:0A:FD:F1:46:9D:12:D8:15
Certificate issuer:       /CN=D256990B945A612A1ED366DE6B698A125F559753
Certificate serial:       50B4B55060C55B3E3252F324F8FAA41DB3F83925
Authority key identifier: D2:56:99:0B:94:5A:61:2A:1E:D3:66:DE:6B:69:8A:12:5F:55:97:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D256990B945A612A1ED366DE6B698A125F559753.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5BbcYXfoxJhunshcs7XguYzRJZ1RzPrmtBtxZvp7gGEK/1/323830343a356165303a3a2f33322d3336203d3e20323638383032.roa
Signing time:             Thu 04 Apr 2024 03:32:13 +0000
ROA not before:           Thu 04 Apr 2024 03:27:13 +0000
ROA not after:            Thu 03 Apr 2025 03:32:13 +0000
asID:                     268802
IP address blocks:        2804:5ae0::/32 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b4:b5:50:60:c5:5b:3e:32:52:f3:24:f8:fa:a4:1d:b3:f8:39:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D256990B945A612A1ED366DE6B698A125F559753
        Validity
            Not Before: Apr  4 03:27:13 2024 GMT
            Not After : Apr  3 03:32:13 2025 GMT
        Subject: CN=D20B0A35B10E53F51A22F8780AFDF1469D12D815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:54:88:cf:1d:a8:5b:d4:be:09:40:2d:9b:c6:
                    8b:1a:db:31:a4:49:24:5b:e7:aa:98:e8:14:c0:82:
                    cd:1e:8a:a4:a7:7d:3e:14:e1:52:e6:c3:98:cd:a4:
                    5f:fa:4b:7e:46:4a:74:2d:80:da:38:8a:b4:d0:f6:
                    d5:e4:db:35:38:0f:b6:e2:4d:66:a1:c1:fe:91:1a:
                    fc:e4:0e:54:21:e8:14:f6:cb:20:4b:33:49:1d:34:
                    27:65:0f:b6:81:59:01:7b:a2:0e:0a:81:1a:b9:89:
                    df:34:11:91:7c:bb:3c:81:89:2d:2a:a9:6d:35:2f:
                    68:aa:91:3f:7f:b5:2b:e8:65:16:fd:41:5d:b9:b9:
                    2c:30:3e:11:5f:aa:68:40:07:e7:69:87:9d:5e:00:
                    0d:3e:48:a7:ac:0c:fd:a5:5b:e9:50:a8:b2:30:27:
                    f8:bc:eb:06:64:ed:0b:4f:20:c2:d8:fa:e2:ed:27:
                    6e:13:22:ef:fe:80:46:66:4b:53:4b:02:16:47:b3:
                    38:3e:ff:c9:58:d2:ed:b3:70:ec:ae:00:58:9c:9e:
                    f5:41:65:60:27:53:26:b4:d3:87:13:f2:6f:76:01:
                    8d:c8:e0:93:bb:30:b7:2e:27:25:d1:c4:fa:73:10:
                    ac:11:d7:82:86:e7:63:bb:74:6c:01:9f:28:ec:a9:
                    2e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0B:0A:35:B1:0E:53:F5:1A:22:F8:78:0A:FD:F1:46:9D:12:D8:15
            X509v3 Authority Key Identifier:
                keyid:D2:56:99:0B:94:5A:61:2A:1E:D3:66:DE:6B:69:8A:12:5F:55:97:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5BbcYXfoxJhunshcs7XguYzRJZ1RzPrmtBtxZvp7gGEK/1/D256990B945A612A1ED366DE6B698A125F559753.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D256990B945A612A1ED366DE6B698A125F559753.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5BbcYXfoxJhunshcs7XguYzRJZ1RzPrmtBtxZvp7gGEK/1/323830343a356165303a3a2f33322d3336203d3e20323638383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:5c:24:76:8f:e0:91:d6:bc:7a:bf:43:28:b5:58:b6:ff:5b:
         31:c9:62:c6:97:96:a2:e5:5c:95:1e:73:26:8a:d6:28:57:ca:
         55:7a:b7:52:1d:88:45:56:0c:3b:9e:dd:c6:73:d8:df:88:d5:
         ea:f6:ed:7f:6c:cf:7b:bc:50:bf:3b:ca:ce:e6:e6:6b:c8:f9:
         1e:e1:fa:4b:54:f6:cd:f9:36:db:24:a4:f4:72:23:ea:28:8b:
         a5:69:ab:eb:7c:81:c2:6b:52:83:2c:86:3e:c9:3b:84:73:95:
         3a:f4:48:4d:ad:d6:90:ad:b6:3c:07:14:95:f0:79:72:ac:81:
         eb:6c:4f:94:f1:8b:19:f7:6a:04:5a:fe:b8:a5:fb:33:4e:cc:
         7b:7c:ec:b8:98:ec:58:45:3e:db:d3:49:7b:c3:28:a7:43:a9:
         e4:f5:ff:54:35:02:7f:96:e0:2b:e6:c7:4e:39:ac:f2:67:19:
         08:45:df:f0:d9:64:bd:75:6d:06:1a:ab:47:4d:56:02:46:a5:
         63:8f:74:50:f9:3a:d9:6c:fc:a5:1a:b8:9b:12:0c:09:79:6e:
         31:be:bb:06:c2:36:04:cd:b7:75:98:1c:27:93:c0:59:a0:f2:
         57:7f:c1:89:03:c1:a8:60:c6:b7:9b:27:fb:54:9f:e8:26:53:
         1e:ba:a4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 16:21:48 2024 by rpki-client on console-ams.rpki-client.org