Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/1/323830343a323330383a3a2f33322d3634203d3e20323634313338.roa
File:                     323830343a323330383a3a2f33322d3634203d3e20323634313338.roa (raw, json)
Hash identifier:          hxySt3IItvaesblwXNT0b0ZSQhXQDDK6fDY2t8qIct4=
Subject key identifier:   03:D0:44:9E:8F:ED:F7:54:E2:DD:A6:81:44:0C:64:3B:3F:2E:4D:72
Certificate issuer:       /CN=26158AB5CD8111DBBD1B9AA2405CC3202FBA3809
Certificate serial:       148DD1634B74726E88147A2288C6DB422E1EF214
Authority key identifier: 26:15:8A:B5:CD:81:11:DB:BD:1B:9A:A2:40:5C:C3:20:2F:BA:38:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26158AB5CD8111DBBD1B9AA2405CC3202FBA3809.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/1/323830343a323330383a3a2f33322d3634203d3e20323634313338.roa
Signing time:             Mon 07 Oct 2024 17:02:59 +0000
ROA not before:           Mon 07 Oct 2024 16:57:59 +0000
ROA not after:            Mon 06 Oct 2025 17:02:59 +0000
asID:                     264138
IP address blocks:        2804:2308::/32 maxlen: 64

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:8d:d1:63:4b:74:72:6e:88:14:7a:22:88:c6:db:42:2e:1e:f2:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26158AB5CD8111DBBD1B9AA2405CC3202FBA3809
        Validity
            Not Before: Oct  7 16:57:59 2024 GMT
            Not After : Oct  6 17:02:59 2025 GMT
        Subject: CN=03D0449E8FEDF754E2DDA681440C643B3F2E4D72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:93:7b:a6:7a:73:7f:cb:cd:1c:fd:4d:a0:d1:
                    5c:8e:6d:ad:56:0f:49:41:4e:01:f5:f4:29:e5:77:
                    1e:b9:62:61:08:8e:08:66:e4:ac:77:26:ae:a6:0d:
                    c5:9e:d5:27:e4:16:a4:e2:aa:e8:6e:0b:75:22:80:
                    5b:1d:5e:f6:60:3a:90:c1:a4:7a:2e:41:d1:cb:9e:
                    7d:67:4f:e9:e1:6f:30:fb:b0:e0:00:74:6d:bc:b7:
                    ad:c9:29:35:0d:0f:d3:47:6c:19:4d:8c:25:74:dd:
                    0a:17:25:96:de:b9:79:9f:22:eb:81:d7:7c:75:98:
                    f5:ac:9d:4b:7f:73:a6:b4:41:06:d8:92:a1:f3:d4:
                    fc:0b:d2:0c:fa:ac:eb:59:1d:00:45:c6:d7:05:e4:
                    a1:3d:d7:13:d6:9d:a5:79:f3:90:8e:03:96:94:aa:
                    61:e1:8a:3f:bd:bb:31:a8:ba:87:ed:6c:de:ad:96:
                    59:3c:32:5e:45:29:c0:03:a3:4b:09:13:d0:3a:3a:
                    ef:45:5b:e6:aa:2c:34:f7:36:04:67:d0:a6:3f:a4:
                    79:40:10:a0:61:b2:46:5a:9c:9c:57:5e:86:bb:03:
                    21:c8:b4:20:51:30:57:c5:be:7b:16:61:ca:88:60:
                    cd:fa:79:73:c4:78:21:b5:76:89:4b:82:85:74:b5:
                    07:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D0:44:9E:8F:ED:F7:54:E2:DD:A6:81:44:0C:64:3B:3F:2E:4D:72
            X509v3 Authority Key Identifier:
                keyid:26:15:8A:B5:CD:81:11:DB:BD:1B:9A:A2:40:5C:C3:20:2F:BA:38:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/1/26158AB5CD8111DBBD1B9AA2405CC3202FBA3809.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26158AB5CD8111DBBD1B9AA2405CC3202FBA3809.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/1/323830343a323330383a3a2f33322d3634203d3e20323634313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2308::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:fe:8e:71:9d:ef:d4:f1:29:57:05:17:8d:35:05:d0:d3:41:
         37:5b:7e:21:62:59:67:d8:a0:39:93:da:85:7d:ca:6c:bb:d9:
         fd:a2:ac:9a:eb:40:60:39:23:02:e5:01:e3:c6:bf:71:e4:3a:
         7a:d6:b6:82:d5:f6:17:d7:41:50:ed:af:dd:31:44:09:38:f0:
         d0:6b:9c:09:78:b6:3f:fb:e2:f7:5b:f5:bc:54:cb:a1:12:40:
         b3:f7:f0:d5:3f:ba:da:e2:8d:28:4d:69:01:99:76:5b:d0:b5:
         86:44:13:6b:b9:c6:70:a3:40:a7:05:f2:e8:34:91:90:a9:b2:
         e3:3a:bd:ac:c7:55:78:7d:5d:fc:5a:e7:dd:a9:42:a9:37:0d:
         dc:54:ff:75:45:98:61:23:52:28:04:6b:73:6f:5c:da:24:bf:
         5d:aa:2b:d8:8d:be:31:79:d8:f5:ad:da:fc:d7:81:8d:89:58:
         61:61:0a:fb:64:62:31:09:3e:b8:d0:70:f6:c9:75:b0:03:dd:
         dd:ce:e6:f7:0b:1b:ca:e0:3a:35:9b:cb:ec:2c:a1:98:51:11:
         52:de:c0:5a:00:55:40:39:2a:45:44:2e:00:ab:60:75:29:7d:
         97:4f:d6:32:1f:64:95:1b:d0:77:f9:82:05:b8:7d:44:fc:33:
         97:55:2a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 09:20:37 2024 by rpki-client on console-fra.rpki-client.org