Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a663030303a3a2f33362d3336203d3e20323637393432.roa
File:                     323830343a353539303a663030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier:          dQ43hM8REHrl6gh7ItEhvd079Xn41nQXr3LIPNjYCHI=
Subject key identifier:   C4:F4:69:CA:49:46:BF:0B:64:C1:91:C4:57:DD:90:08:A6:2E:8B:FD
Certificate issuer:       /CN=85C66F862139EE972B3DD821117B824DD8B6F9D0
Certificate serial:       0938FAC292BCE03C9113FFC2DB0C7E7EDB4282E2
Authority key identifier: 85:C6:6F:86:21:39:EE:97:2B:3D:D8:21:11:7B:82:4D:D8:B6:F9:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a663030303a3a2f33362d3336203d3e20323637393432.roa
Signing time:             Thu 04 Apr 2024 00:08:31 +0000
ROA not before:           Thu 04 Apr 2024 00:03:31 +0000
ROA not after:            Thu 03 Apr 2025 00:08:31 +0000
asID:                     267942
IP address blocks:        2804:5590:f000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:38:fa:c2:92:bc:e0:3c:91:13:ff:c2:db:0c:7e:7e:db:42:82:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85C66F862139EE972B3DD821117B824DD8B6F9D0
        Validity
            Not Before: Apr  4 00:03:31 2024 GMT
            Not After : Apr  3 00:08:31 2025 GMT
        Subject: CN=C4F469CA4946BF0B64C191C457DD9008A62E8BFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3a:bc:15:14:80:52:60:2c:39:eb:fb:8b:a4:
                    f9:b3:91:a1:05:48:45:db:33:03:9c:be:4b:87:8b:
                    9b:8f:98:9a:0c:d9:d4:a6:fc:e4:15:b8:c1:b2:76:
                    26:0c:72:f7:5b:21:60:b8:62:e2:77:e0:58:ec:71:
                    dc:1d:2a:ab:80:73:a9:72:4c:c5:49:38:ce:a1:2b:
                    68:32:fe:51:98:17:e0:0f:41:d1:6e:f6:af:7d:99:
                    de:fc:d1:09:d9:0d:f0:59:c6:5f:61:53:0d:4d:77:
                    c5:7f:ed:fe:b0:6e:f3:c8:5a:b5:f2:4d:ea:2d:cb:
                    9e:4c:02:f9:06:b3:36:19:6a:09:2b:e5:c4:d0:57:
                    27:c6:23:9a:73:01:21:79:8d:90:09:94:31:66:d2:
                    9c:87:ad:e0:ed:d2:0c:ec:55:02:50:e3:d3:a0:46:
                    f3:d7:84:24:bd:de:30:bb:f2:b9:12:14:69:22:9b:
                    30:63:42:d5:02:61:5a:1b:a9:95:8d:c3:e7:d2:21:
                    df:cf:86:b1:01:54:23:f7:30:ae:0f:c0:39:5b:53:
                    a1:12:e8:63:0f:80:0c:69:e0:a3:eb:6c:1a:24:79:
                    da:48:ab:e2:4b:fb:fa:34:0f:2c:ee:2e:de:dc:df:
                    bb:4c:98:c2:38:d2:3b:09:7f:31:9a:4f:c5:fa:29:
                    25:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F4:69:CA:49:46:BF:0B:64:C1:91:C4:57:DD:90:08:A6:2E:8B:FD
            X509v3 Authority Key Identifier:
                keyid:85:C6:6F:86:21:39:EE:97:2B:3D:D8:21:11:7B:82:4D:D8:B6:F9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a663030303a3a2f33362d3336203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b3:56:7f:21:44:cd:17:ff:59:d0:a5:6e:7a:cc:b6:da:82:aa:
         9b:86:15:b2:a3:9f:e3:c0:46:12:c9:31:66:6c:4b:c1:29:07:
         d5:fc:9e:15:b5:55:b0:f1:9f:51:46:3d:1b:a1:40:93:87:82:
         79:f0:02:90:d9:04:78:52:85:60:c4:dd:d8:74:c1:93:b7:a4:
         18:67:8a:f3:72:46:b6:5a:7b:6d:b6:78:2b:29:f9:d9:94:e2:
         26:3d:0a:0c:8c:9c:42:43:8f:91:82:40:0a:45:25:4e:7f:c8:
         18:0e:46:3d:ab:29:9a:52:8f:69:31:82:21:eb:db:0c:91:7a:
         9c:8a:11:7e:c2:1c:24:ce:05:4a:e4:ca:14:72:e2:37:78:14:
         48:9d:1c:c3:98:c9:30:be:d7:7f:91:37:dd:69:ae:26:92:8e:
         06:f7:0a:29:50:6e:1d:41:ad:53:bf:29:ee:dc:54:76:42:23:
         3e:ac:9f:d1:42:09:c9:3c:46:13:87:e4:fc:2f:46:04:c9:eb:
         0f:73:6e:79:9d:83:1d:62:8d:4d:74:f4:d2:b7:91:1c:89:7e:
         74:f0:d6:b4:fc:21:33:99:3a:ad:db:3f:20:c0:71:1e:ad:1e:
         22:7d:ad:9e:84:d3:53:4f:de:45:1f:85:51:67:00:d0:3b:a2:
         19:0c:ca:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:48:39 2024 by rpki-client on console-ams.rpki-client.org