Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/323830343a353465633a383030303a3a2f33342d3334203d3e20323638363738.roa
File:                     323830343a353465633a383030303a3a2f33342d3334203d3e20323638363738.roa (raw, json)
Hash identifier:          zF1MKlBFGBvT5pNj3alu3wc+WR+4Qv2CWiQ+C/dQtjQ=
Subject key identifier:   ED:D1:B4:D1:8F:00:ED:B1:55:BA:B0:E9:57:1A:40:C6:D5:80:BF:39
Certificate issuer:       /CN=E16D74041965C3729D5552BEFB00E767BB091F4E
Certificate serial:       65998DE74B08467BE67DD0E099535042437F0818
Authority key identifier: E1:6D:74:04:19:65:C3:72:9D:55:52:BE:FB:00:E7:67:BB:09:1F:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E16D74041965C3729D5552BEFB00E767BB091F4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/323830343a353465633a383030303a3a2f33342d3334203d3e20323638363738.roa
Signing time:             Thu 04 Apr 2024 07:20:40 +0000
ROA not before:           Thu 04 Apr 2024 07:15:40 +0000
ROA not after:            Thu 03 Apr 2025 07:20:40 +0000
asID:                     268678
IP address blocks:        2804:54ec:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:99:8d:e7:4b:08:46:7b:e6:7d:d0:e0:99:53:50:42:43:7f:08:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E16D74041965C3729D5552BEFB00E767BB091F4E
        Validity
            Not Before: Apr  4 07:15:40 2024 GMT
            Not After : Apr  3 07:20:40 2025 GMT
        Subject: CN=EDD1B4D18F00EDB155BAB0E9571A40C6D580BF39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5b:d1:be:f8:ae:42:26:08:92:bc:4e:fa:88:
                    8f:2c:aa:3b:42:2b:21:95:62:ec:1c:fc:4b:53:09:
                    c4:ce:99:54:bd:df:a9:b9:c9:49:da:1e:23:76:8f:
                    e4:94:2a:18:8b:4e:76:8b:76:10:07:42:86:43:52:
                    95:b0:21:9d:1e:1b:de:75:29:38:5f:fe:47:ce:70:
                    55:9a:92:12:9a:76:7c:79:e9:5f:52:67:2c:de:6d:
                    0a:8e:e9:1f:e8:5b:ac:31:21:50:27:fe:6f:71:89:
                    f2:2a:30:51:1e:f2:0a:73:b8:19:69:37:76:38:c7:
                    af:5d:0d:db:4e:85:e5:23:09:b1:55:f7:55:ff:81:
                    89:56:d2:81:51:83:ae:f9:d3:f4:8e:0c:8d:db:f9:
                    e2:56:72:7f:44:01:40:66:e9:d4:1a:96:58:b3:66:
                    99:80:b3:05:ca:4c:55:3e:05:50:22:33:0c:0c:ec:
                    a3:c8:9e:36:95:b2:52:89:0d:7e:e3:7f:e6:10:a8:
                    a9:f5:50:92:c5:c0:bd:73:eb:58:0a:86:36:66:15:
                    0e:df:bb:2d:a9:78:7b:dd:c8:1a:94:9a:4a:7d:b3:
                    4d:77:3f:c9:f0:67:e1:21:f1:69:6d:65:c4:fd:14:
                    86:4d:ee:a2:4d:7a:48:06:9e:21:ef:d1:02:d3:f4:
                    02:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D1:B4:D1:8F:00:ED:B1:55:BA:B0:E9:57:1A:40:C6:D5:80:BF:39
            X509v3 Authority Key Identifier:
                keyid:E1:6D:74:04:19:65:C3:72:9D:55:52:BE:FB:00:E7:67:BB:09:1F:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/E16D74041965C3729D5552BEFB00E767BB091F4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E16D74041965C3729D5552BEFB00E767BB091F4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/323830343a353465633a383030303a3a2f33342d3334203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54ec:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7a:c9:84:6e:52:d4:fa:7d:70:e4:b3:2a:04:cf:61:77:27:38:
         b6:9b:a5:26:f8:2f:c1:21:28:cb:21:84:2e:89:bd:5a:3d:f5:
         6d:7d:03:3b:5d:4e:41:fb:f6:e4:e9:e5:2b:bb:33:87:47:32:
         2e:4b:01:60:b4:a6:15:5b:df:5d:8f:2d:9c:4b:53:87:92:cf:
         8b:f5:6e:06:3b:61:a8:71:6c:77:03:17:d2:44:5e:47:16:e2:
         df:68:1c:39:0a:b3:70:8b:49:95:86:b2:0c:68:0b:d5:e6:e7:
         84:a9:ab:21:34:21:67:06:0c:7d:a9:5f:6e:01:3f:d6:96:33:
         6b:8e:fc:d4:3a:69:2f:d1:82:dc:65:6b:d1:d3:53:a2:16:00:
         b3:af:83:0f:56:2d:19:52:cf:b8:81:3e:3e:9d:af:cc:d7:27:
         dd:9e:15:65:91:86:2b:5d:28:fa:e4:1b:59:30:65:6b:d0:a8:
         22:0e:d6:c1:3f:91:c3:34:18:12:3c:09:95:db:b0:03:0b:b9:
         6b:08:0f:41:1c:70:85:e0:22:ef:00:95:46:81:8f:ba:17:5d:
         e6:4b:38:5a:ac:03:62:44:19:df:43:1c:d6:73:94:eb:0f:f6:
         48:e3:61:c1:db:14:38:6b:f8:a0:f6:b9:93:7c:ec:9b:07:c9:
         b6:05:24:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 10:21:37 2024 by rpki-client on console-fra.rpki-client.org