Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/1/323830343a326664383a383030303a3a2f33342d3334203d3e20323634393135.roa
File:                     323830343a326664383a383030303a3a2f33342d3334203d3e20323634393135.roa (raw, json)
Hash identifier:          eux7/SD/o4TNLh5uKN8s60RDdUNH6SDfwD/rKe3kEG0=
Subject key identifier:   C5:D8:60:06:7C:BB:53:5F:0D:3E:1C:91:54:22:9B:E4:6C:CB:79:B4
Certificate issuer:       /CN=998C1B9397A86CDEC286CEC4DB5E599D5429D1EF
Certificate serial:       6F83A18F0725A4BACF5DFCD4FF5826C6E926C26C
Authority key identifier: 99:8C:1B:93:97:A8:6C:DE:C2:86:CE:C4:DB:5E:59:9D:54:29:D1:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/998C1B9397A86CDEC286CEC4DB5E599D5429D1EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/1/323830343a326664383a383030303a3a2f33342d3334203d3e20323634393135.roa
Signing time:             Thu 04 Apr 2024 13:14:18 +0000
ROA not before:           Thu 04 Apr 2024 13:09:18 +0000
ROA not after:            Thu 03 Apr 2025 13:14:18 +0000
asID:                     264915
IP address blocks:        2804:2fd8:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:83:a1:8f:07:25:a4:ba:cf:5d:fc:d4:ff:58:26:c6:e9:26:c2:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=998C1B9397A86CDEC286CEC4DB5E599D5429D1EF
        Validity
            Not Before: Apr  4 13:09:18 2024 GMT
            Not After : Apr  3 13:14:18 2025 GMT
        Subject: CN=C5D860067CBB535F0D3E1C9154229BE46CCB79B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5a:74:35:1d:b2:5a:7b:cf:5d:c7:29:86:78:
                    51:c1:a1:b4:08:52:36:1d:92:25:94:f7:7d:78:0b:
                    b2:1d:3d:99:56:70:c1:ae:52:cb:22:4a:30:a9:f7:
                    0b:ec:0b:65:69:e1:6e:cf:07:63:5b:eb:6d:f8:29:
                    b5:c5:09:c5:60:8b:8e:dc:6c:b2:64:05:ea:9e:a4:
                    51:b4:08:d4:f8:0d:c2:59:5d:4a:16:36:51:3f:c0:
                    0e:43:73:c1:2f:8a:e9:5f:f6:d1:fc:03:21:53:10:
                    78:60:f5:b1:24:40:14:94:ba:57:6b:17:e4:90:e6:
                    86:8d:97:f9:36:69:44:24:fc:fa:60:c9:62:a2:b9:
                    8f:c0:d2:5d:2c:aa:90:75:45:bc:16:a5:b5:8c:6b:
                    a6:68:db:1f:a2:38:20:31:bf:28:0a:7b:12:1d:9c:
                    3e:d6:1a:91:28:41:0b:66:06:f7:6c:4d:4e:fa:79:
                    2b:dc:83:1c:f2:7d:77:4f:b3:7f:fa:17:5a:10:01:
                    28:8c:e4:81:d1:09:9e:1d:10:15:e1:03:f1:7a:3e:
                    6d:6d:a8:08:ce:26:84:86:41:fe:e2:99:dc:71:c4:
                    e2:5b:33:80:c7:19:5c:b6:d0:65:6c:a9:bb:68:02:
                    f7:b2:2a:93:a9:c2:7c:36:ae:ea:bf:6b:a7:6e:1e:
                    9f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D8:60:06:7C:BB:53:5F:0D:3E:1C:91:54:22:9B:E4:6C:CB:79:B4
            X509v3 Authority Key Identifier:
                keyid:99:8C:1B:93:97:A8:6C:DE:C2:86:CE:C4:DB:5E:59:9D:54:29:D1:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/1/998C1B9397A86CDEC286CEC4DB5E599D5429D1EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/998C1B9397A86CDEC286CEC4DB5E599D5429D1EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/1/323830343a326664383a383030303a3a2f33342d3334203d3e20323634393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fd8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         55:aa:b1:15:11:27:97:a0:ee:ce:19:39:25:c3:24:a9:84:6d:
         8a:1a:12:77:da:06:33:a3:02:42:ba:b0:b5:9d:6c:77:c1:f6:
         15:4d:23:a3:28:3a:a8:8f:0b:d9:e3:69:83:26:06:fc:e8:2c:
         cc:73:dd:41:98:aa:cc:56:b4:2f:d1:a5:3a:4d:b4:65:71:59:
         2b:ea:d6:3b:58:2a:39:ba:e9:34:6a:0b:85:59:86:85:3d:15:
         c7:47:21:cf:4e:d5:fc:d8:cb:b5:6d:2b:01:ba:40:19:dc:6e:
         33:3c:de:46:c0:5c:08:e8:1c:b6:08:14:2f:c9:11:8b:bd:82:
         bf:3a:40:23:16:ca:7d:b8:32:b5:24:d0:bf:94:d8:e2:09:61:
         43:15:79:42:97:ac:4f:f9:ce:5d:ff:0e:e7:d0:30:3b:6f:84:
         82:5b:7a:55:37:78:2d:ea:06:c0:6c:80:3a:f5:81:b0:7b:4d:
         0d:0a:ab:2a:04:a0:63:29:3e:3c:f8:fd:1c:a0:b7:39:71:40:
         fd:d5:ab:4e:b8:7a:80:9f:a6:97:69:68:07:90:10:3e:d4:e6:
         3c:53:33:39:ed:1a:e4:5e:e5:19:97:04:2e:ca:64:d4:50:59:
         38:ea:5a:d6:e1:c2:3e:66:3a:e9:14:27:0a:9d:71:cd:d6:f1:
         48:71:14:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 10:33:28 2024 by rpki-client on console-ams.rpki-client.org