Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a633030303a3a2f33362d3336203d3e20323637393432.roa
File:                     323830343a353539303a633030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier:          P96r1vceq3GjaRmPNoGTWI0/ZBPYwfGvtyi8C8diZA0=
Subject key identifier:   7D:01:FA:EC:F8:63:A3:9C:D2:5F:8C:D0:DA:84:42:B9:D6:A6:35:5E
Certificate issuer:       /CN=85C66F862139EE972B3DD821117B824DD8B6F9D0
Certificate serial:       1611F67D1DF733D82E91EA402165ED4183FCF6EC
Authority key identifier: 85:C6:6F:86:21:39:EE:97:2B:3D:D8:21:11:7B:82:4D:D8:B6:F9:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a633030303a3a2f33362d3336203d3e20323637393432.roa
Signing time:             Thu 04 Apr 2024 00:08:30 +0000
ROA not before:           Thu 04 Apr 2024 00:03:30 +0000
ROA not after:            Thu 03 Apr 2025 00:08:30 +0000
asID:                     267942
IP address blocks:        2804:5590:c000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:11:f6:7d:1d:f7:33:d8:2e:91:ea:40:21:65:ed:41:83:fc:f6:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85C66F862139EE972B3DD821117B824DD8B6F9D0
        Validity
            Not Before: Apr  4 00:03:30 2024 GMT
            Not After : Apr  3 00:08:30 2025 GMT
        Subject: CN=7D01FAECF863A39CD25F8CD0DA8442B9D6A6355E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:39:61:fe:98:7d:7a:50:22:b3:41:0c:6b:9a:
                    5f:64:c3:d5:73:32:f8:8d:2a:ab:33:5f:02:1a:c6:
                    2f:b3:3d:bb:dd:27:f0:36:82:fb:ec:f1:63:76:f0:
                    81:0d:19:83:69:b0:a1:87:f1:aa:1f:08:39:b4:d2:
                    1d:44:d6:44:94:1d:de:e9:fc:8e:03:3e:92:6d:f2:
                    fa:00:58:00:eb:a5:61:7d:6e:df:cc:37:e5:33:63:
                    19:4e:f8:72:4b:51:bb:fa:23:eb:04:05:10:bb:4e:
                    c8:ed:d5:65:b9:98:87:5f:01:19:de:03:b1:91:ec:
                    a4:db:ef:d5:3e:17:35:9d:e6:1e:88:3e:eb:c0:c7:
                    67:c3:aa:35:b9:38:88:a2:37:83:7d:90:0a:36:30:
                    2a:ad:ca:31:98:ba:b1:6a:c5:e1:5b:5e:50:41:95:
                    5f:8b:ed:65:2b:b6:d9:8e:99:ad:02:dc:e6:ca:e0:
                    23:2b:87:ce:e7:27:01:fa:0a:e4:73:c5:7e:48:79:
                    72:b1:00:a2:57:02:73:bf:24:cc:f7:6c:c8:34:d1:
                    f5:1d:0e:b0:7e:03:1a:93:8d:b5:66:bb:eb:76:eb:
                    7a:51:b2:f8:2e:e5:03:91:61:e1:83:3e:38:11:6c:
                    47:64:f6:dc:2a:51:84:97:23:b7:0b:59:05:31:6c:
                    3c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:01:FA:EC:F8:63:A3:9C:D2:5F:8C:D0:DA:84:42:B9:D6:A6:35:5E
            X509v3 Authority Key Identifier:
                keyid:85:C6:6F:86:21:39:EE:97:2B:3D:D8:21:11:7B:82:4D:D8:B6:F9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a633030303a3a2f33362d3336203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2c:3a:1f:d1:38:a9:16:de:82:0a:83:11:35:67:26:1c:d2:be:
         d0:60:8b:be:92:91:f0:2e:fe:c9:f0:6f:a5:78:e5:07:a7:53:
         48:9a:b8:42:c2:37:78:6b:b3:a8:50:5c:2f:f6:3e:88:66:cb:
         62:73:2f:76:80:d2:de:dc:5f:18:17:0b:69:2f:aa:3f:b6:7e:
         a8:ca:4d:8a:77:d3:d7:56:ff:97:ac:4f:44:1e:6f:c2:7d:ab:
         36:38:8c:3a:53:56:44:04:7e:c7:63:ab:ed:ad:fd:cc:e6:d5:
         b2:cb:0c:39:38:80:cc:9c:c0:c0:1a:4e:ee:6e:cf:78:db:9e:
         1f:88:fc:b9:aa:99:6a:75:6d:90:78:da:64:a2:cd:43:98:6b:
         7d:ae:06:e1:e1:c6:19:18:aa:1c:6a:2b:4b:20:b2:cc:96:18:
         7d:38:2c:52:a5:04:84:99:fe:ea:b9:83:ef:4a:b1:4f:cc:a3:
         9e:fe:17:61:84:a3:3d:92:40:70:8a:ea:77:92:95:dd:ed:fe:
         75:58:f2:6e:e1:4f:4f:f1:78:89:6b:03:c4:24:f3:b9:b5:3b:
         74:2b:9f:af:54:b5:5f:5e:2b:6d:b4:4b:df:f3:95:28:2c:04:
         a3:6a:a4:65:ea:f0:32:30:45:9d:1a:86:91:7f:91:f6:1e:1d:
         8e:0f:7d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:48:39 2024 by rpki-client on console-ams.rpki-client.org