Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/1/323830343a336639343a383030303a3a2f33332d3333203d3e20323632343532.roa
File:                     323830343a336639343a383030303a3a2f33332d3333203d3e20323632343532.roa (raw, json)
Hash identifier:          YQTite9OaEhQeCGZETZ+SFVqkjNabQHCqhD4L5SPnsQ=
Subject key identifier:   E1:D6:30:CA:18:69:70:88:CE:D7:F9:CA:EB:EB:24:A1:41:11:00:EB
Certificate issuer:       /CN=B5992D2AF10FB81ABCBCF02AD76969468B11F0F2
Certificate serial:       2F63A03F77EECBD1E991D279788C07C95DB002AA
Authority key identifier: B5:99:2D:2A:F1:0F:B8:1A:BC:BC:F0:2A:D7:69:69:46:8B:11:F0:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5992D2AF10FB81ABCBCF02AD76969468B11F0F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/1/323830343a336639343a383030303a3a2f33332d3333203d3e20323632343532.roa
Signing time:             Thu 04 Apr 2024 06:29:07 +0000
ROA not before:           Thu 04 Apr 2024 06:24:07 +0000
ROA not after:            Thu 03 Apr 2025 06:29:07 +0000
asID:                     262452
IP address blocks:        2804:3f94:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:63:a0:3f:77:ee:cb:d1:e9:91:d2:79:78:8c:07:c9:5d:b0:02:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5992D2AF10FB81ABCBCF02AD76969468B11F0F2
        Validity
            Not Before: Apr  4 06:24:07 2024 GMT
            Not After : Apr  3 06:29:07 2025 GMT
        Subject: CN=E1D630CA18697088CED7F9CAEBEB24A1411100EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3d:14:0f:ac:9f:0e:76:cc:c6:b1:77:53:8b:
                    da:f4:89:6d:ea:6c:05:ed:78:f1:cf:01:a0:14:ed:
                    b6:0e:64:90:82:04:75:5c:de:e7:61:86:ab:1e:13:
                    94:e0:1c:5b:44:2c:b5:d4:cd:82:7f:ab:ad:56:4f:
                    95:8a:74:0b:f6:20:67:f7:e7:4e:f6:93:e1:4d:49:
                    88:95:56:89:34:de:2a:05:a4:f7:2b:51:77:5a:3c:
                    75:a2:44:7b:c9:4b:67:48:cf:03:b1:9f:63:94:d8:
                    af:d6:67:e8:28:de:04:fd:bc:29:b9:0c:cb:dc:be:
                    99:76:77:86:65:0e:1e:75:c8:39:e0:1c:67:f4:92:
                    55:bf:da:a0:89:7b:3a:95:4a:cc:b3:47:dd:00:da:
                    24:a2:9b:7b:b3:0a:2f:20:0d:a7:ef:97:c0:4f:6d:
                    a5:97:8e:22:7b:a9:fe:02:8c:c5:75:a7:81:b5:74:
                    1b:bf:f9:97:9c:26:23:0f:f9:09:be:40:be:18:ef:
                    3f:e0:37:62:ad:38:83:79:8d:37:5e:36:c3:7e:10:
                    62:bd:4e:e5:4e:31:33:26:43:72:62:fd:3f:48:33:
                    e8:f2:7b:1a:08:9a:ed:84:f4:6d:0e:9a:dc:99:2c:
                    ac:ab:27:26:10:40:81:8a:03:8b:a9:10:86:7a:2b:
                    09:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D6:30:CA:18:69:70:88:CE:D7:F9:CA:EB:EB:24:A1:41:11:00:EB
            X509v3 Authority Key Identifier:
                keyid:B5:99:2D:2A:F1:0F:B8:1A:BC:BC:F0:2A:D7:69:69:46:8B:11:F0:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/1/B5992D2AF10FB81ABCBCF02AD76969468B11F0F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5992D2AF10FB81ABCBCF02AD76969468B11F0F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/1/323830343a336639343a383030303a3a2f33332d3333203d3e20323632343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f94:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         60:c3:c8:c7:ef:54:4d:52:0b:c4:7f:4b:a5:1a:25:44:3a:99:
         65:a6:bd:ae:18:0b:13:73:d6:db:cb:7b:54:4d:a3:5f:21:f1:
         6f:df:86:42:bb:8a:28:08:20:50:9f:95:d0:6c:61:c3:e1:05:
         63:c8:29:99:d0:c5:9c:91:a0:ec:7d:ae:e6:fb:89:5a:0d:6a:
         61:ee:cc:d8:7e:69:a3:42:b8:4b:76:f8:f0:7a:46:b3:72:7a:
         76:b0:85:f7:1e:d3:0d:30:8b:11:04:14:07:2d:04:ff:2a:77:
         b9:9b:20:45:15:92:bf:61:b4:5b:6b:ce:66:02:55:6e:03:4f:
         02:c0:a0:9c:0d:d3:2c:9b:e9:b7:bc:df:33:e7:b5:c0:eb:3e:
         e7:32:2d:0c:3b:12:95:fa:74:3d:41:3b:c1:24:28:3f:2c:ac:
         6e:ac:0c:ea:f1:08:ee:0e:03:bd:a3:ea:44:90:5c:72:91:d2:
         0d:7c:dc:9b:5c:3a:b5:43:88:28:04:05:71:2c:e0:28:98:9b:
         8e:78:4c:93:9f:9d:80:b6:39:21:b9:fb:e8:1b:56:95:13:1e:
         7e:19:55:05:10:8d:c7:3a:67:a5:69:0c:b6:9f:79:08:3a:54:
         e6:28:1c:a0:23:4c:26:fb:21:5e:2f:19:2f:ff:fd:0e:e2:cf:
         c2:90:f4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 02:39:20 2024 by rpki-client on console-fra.rpki-client.org