Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a343030303a3a2f33362d3336203d3e20323637393432.roa
File:                     323830343a353539303a343030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier:          BZN5bWtTr1RJF+f68fxOhc/JgMPP3Z92NGEzHYVsouQ=
Subject key identifier:   27:0E:17:11:FB:E0:9A:4E:ED:AF:F3:65:F1:7A:58:AF:D5:99:AF:8B
Certificate issuer:       /CN=85C66F862139EE972B3DD821117B824DD8B6F9D0
Certificate serial:       21AE91DC2877F6BA0B67377CA4F2577760D8ADB7
Authority key identifier: 85:C6:6F:86:21:39:EE:97:2B:3D:D8:21:11:7B:82:4D:D8:B6:F9:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a343030303a3a2f33362d3336203d3e20323637393432.roa
Signing time:             Thu 04 Apr 2024 00:08:31 +0000
ROA not before:           Thu 04 Apr 2024 00:03:31 +0000
ROA not after:            Thu 03 Apr 2025 00:08:31 +0000
asID:                     267942
IP address blocks:        2804:5590:4000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ae:91:dc:28:77:f6:ba:0b:67:37:7c:a4:f2:57:77:60:d8:ad:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85C66F862139EE972B3DD821117B824DD8B6F9D0
        Validity
            Not Before: Apr  4 00:03:31 2024 GMT
            Not After : Apr  3 00:08:31 2025 GMT
        Subject: CN=270E1711FBE09A4EEDAFF365F17A58AFD599AF8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:99:9d:db:60:14:a8:f5:d2:e3:1b:8c:84:ce:
                    fb:f6:92:2e:bd:64:83:ed:e3:b5:20:e3:41:8d:08:
                    fa:f4:b3:57:51:78:20:67:97:da:4f:81:f0:6c:54:
                    8b:44:dd:ee:ab:f8:88:9a:25:b5:b8:bc:84:2b:f6:
                    f4:ab:88:4f:51:70:3e:62:fe:29:8b:55:71:29:a6:
                    92:fd:18:56:f5:83:51:bd:14:f8:c2:09:46:22:74:
                    71:80:ba:33:93:37:1f:ce:ba:f6:7f:f1:a0:f0:f6:
                    03:10:6d:73:89:c3:d9:0d:03:8e:0a:6e:81:26:c9:
                    73:3a:62:f6:01:8e:2e:d6:13:62:24:2f:51:bc:5e:
                    3d:9e:4b:0e:40:ef:79:e4:6a:47:2c:87:f2:9d:e5:
                    65:ec:ea:03:69:74:4a:1e:8f:1c:ef:ab:f2:e7:cb:
                    21:7e:64:a2:08:d3:1b:e5:37:50:64:77:3f:cb:9b:
                    4e:a3:f3:59:8f:e8:a7:40:54:b2:63:42:cf:fa:18:
                    7a:38:a0:43:5b:2e:38:e8:d2:29:06:de:83:8f:dc:
                    5f:5d:8b:e0:e4:bd:f8:2d:87:83:00:2d:8a:6b:b9:
                    49:64:f2:38:3d:13:1f:ce:32:ba:34:d4:6d:eb:74:
                    1b:c8:24:ff:7f:df:f3:e9:22:97:64:4d:79:2b:69:
                    16:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0E:17:11:FB:E0:9A:4E:ED:AF:F3:65:F1:7A:58:AF:D5:99:AF:8B
            X509v3 Authority Key Identifier:
                keyid:85:C6:6F:86:21:39:EE:97:2B:3D:D8:21:11:7B:82:4D:D8:B6:F9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a343030303a3a2f33362d3336203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         00:d9:e9:75:1d:d7:14:bf:40:3d:f2:b4:42:5a:45:64:40:c4:
         36:7c:a3:4a:c1:a0:77:8a:06:68:86:ac:64:9b:cd:3f:87:6d:
         79:ef:c9:81:08:8e:95:29:36:b9:17:c4:31:7e:99:ad:1d:a4:
         87:28:58:fb:e6:87:b6:c0:97:b7:12:bc:14:0c:10:d5:6d:a3:
         c5:5b:fb:96:c0:ad:9f:75:79:70:ea:36:eb:ae:a3:41:47:d7:
         d8:14:97:24:fb:c6:ae:2d:ea:f5:45:41:16:de:42:0f:12:55:
         b6:57:cb:85:79:34:ae:4f:c5:05:08:79:ad:ff:98:95:d0:ab:
         ec:02:b1:82:5a:d6:27:72:d8:6c:0d:8d:39:71:36:09:db:99:
         ab:9c:8e:c9:6e:8e:c7:21:0e:f1:2b:a5:90:f3:cd:bb:0b:0a:
         97:6a:10:a9:e0:09:9c:98:7c:8c:fd:30:12:95:28:63:b2:a1:
         65:cc:7b:33:45:1a:3c:21:d5:de:a0:5d:ce:47:6b:46:e3:ec:
         da:93:94:7d:8c:c8:7e:8d:e2:1e:13:26:47:bd:bf:92:2e:65:
         ec:5a:dd:df:1d:dd:c1:52:08:e4:c9:33:b6:47:74:d6:40:1d:
         3b:cb:be:cb:a4:68:38:af:80:d9:b4:02:f8:00:82:0f:57:b0:
         cf:28:cd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 18:19:04 2024 by rpki-client on console-fra.rpki-client.org