Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/323830343a343630303a3130303a3a2f34382d3438203d3e20323636393631.roa
File:                     323830343a343630303a3130303a3a2f34382d3438203d3e20323636393631.roa (raw, json)
Hash identifier:          ZKMV/ygWGqdVLna0OaflFdkgKDuXbmXPKmmK1NeUpTM=
Subject key identifier:   B7:52:6F:B9:A3:63:2E:B2:32:A8:BC:D6:59:E0:27:F6:E1:77:5E:91
Certificate issuer:       /CN=8CAB92C74DF089822CDFC1C4950554C8B66C1FD2
Certificate serial:       5F12D6A8C795F214FFE0E8783015AA2D481CF73A
Authority key identifier: 8C:AB:92:C7:4D:F0:89:82:2C:DF:C1:C4:95:05:54:C8:B6:6C:1F:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAB92C74DF089822CDFC1C4950554C8B66C1FD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/323830343a343630303a3130303a3a2f34382d3438203d3e20323636393631.roa
Signing time:             Thu 06 Jun 2024 23:53:05 +0000
ROA not before:           Thu 06 Jun 2024 23:48:05 +0000
ROA not after:            Thu 05 Jun 2025 23:53:05 +0000
asID:                     266961
IP address blocks:        2804:4600:100::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:12:d6:a8:c7:95:f2:14:ff:e0:e8:78:30:15:aa:2d:48:1c:f7:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CAB92C74DF089822CDFC1C4950554C8B66C1FD2
        Validity
            Not Before: Jun  6 23:48:05 2024 GMT
            Not After : Jun  5 23:53:05 2025 GMT
        Subject: CN=B7526FB9A3632EB232A8BCD659E027F6E1775E91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c7:bd:65:e1:18:56:bb:ec:aa:70:7c:99:40:
                    9b:2d:72:3b:f5:63:32:46:94:6f:28:f4:8e:4f:da:
                    84:35:73:55:d8:57:15:7c:2f:1a:97:34:33:79:31:
                    61:d5:07:cb:dd:92:4c:d5:2f:9a:9f:46:58:e5:2a:
                    1a:ba:5a:00:28:df:44:87:5e:44:1e:88:58:ac:b9:
                    41:cc:ff:be:11:43:c5:62:7c:c7:a8:c2:f2:58:69:
                    d3:1d:a1:cf:a5:b1:d2:bc:41:10:b5:17:12:3a:b8:
                    e6:be:13:a0:1c:89:86:f8:f3:37:e8:c2:6f:3b:7f:
                    88:6d:53:2d:25:f3:ee:b1:40:c1:e1:b6:fb:13:e5:
                    30:86:28:f1:3b:d5:54:7d:07:c5:4a:cf:68:cb:36:
                    46:d4:97:45:43:b6:fa:e2:4d:be:03:00:33:94:e9:
                    43:72:49:a7:2a:89:9a:1f:ea:22:73:60:31:0e:8d:
                    f0:19:9e:91:63:60:43:6c:dc:00:65:bc:f9:fe:87:
                    b4:36:07:3e:2b:40:0c:6e:f2:ef:17:3f:c9:8c:83:
                    cb:34:fb:d1:ff:48:b4:f8:b2:eb:29:4b:28:fb:a3:
                    1c:70:f2:90:bd:e2:5b:c2:b1:c5:16:13:55:26:ec:
                    53:02:61:fc:b8:28:b2:f2:be:83:71:a0:04:97:33:
                    05:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:52:6F:B9:A3:63:2E:B2:32:A8:BC:D6:59:E0:27:F6:E1:77:5E:91
            X509v3 Authority Key Identifier:
                keyid:8C:AB:92:C7:4D:F0:89:82:2C:DF:C1:C4:95:05:54:C8:B6:6C:1F:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/8CAB92C74DF089822CDFC1C4950554C8B66C1FD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAB92C74DF089822CDFC1C4950554C8B66C1FD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/323830343a343630303a3130303a3a2f34382d3438203d3e20323636393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4600:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:2a:f1:91:e7:2b:ef:55:63:2d:4c:94:1d:cf:5c:c3:96:c5:
         d2:b1:0e:eb:d0:e2:d1:2c:68:0d:d9:e9:be:52:c7:37:10:ef:
         62:d4:cf:1e:c4:12:08:fa:5f:b1:75:79:9d:a4:82:10:37:cc:
         81:e3:e1:b7:85:ce:6b:eb:ab:f5:2c:49:aa:57:93:35:22:04:
         89:db:17:8d:f4:36:db:42:78:ee:3f:bc:6b:83:7d:84:1a:92:
         04:b3:fd:68:83:6f:80:5a:b6:4e:9e:33:26:cb:d2:22:94:76:
         51:77:88:e9:6e:a8:b3:d6:ad:ab:5c:1a:25:e3:c1:1b:21:38:
         c8:d2:ac:05:95:7e:7b:73:10:5b:23:f4:17:3e:50:a3:69:52:
         ed:1d:8b:92:0b:b8:4c:d1:ee:a6:17:59:9e:fc:da:aa:ff:14:
         e6:58:2e:b1:9b:6f:86:fe:76:b6:84:96:f0:c2:9c:25:2f:69:
         88:b8:f4:ff:b3:bd:bf:ad:65:80:dc:a5:45:b6:e4:11:5a:27:
         d7:6b:25:73:f1:26:8f:d0:5a:1b:3e:b3:4d:87:1c:6f:32:69:
         44:33:e6:6f:76:9b:a5:a7:20:5b:48:97:3f:81:87:b1:81:d2:
         95:70:09:04:7f:ad:c0:a0:00:11:2e:6f:b3:e8:e6:ac:cf:92:
         9b:96:c0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 19:46:36 2024 by rpki-client on console-fra.rpki-client.org