Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/2/323830343a313631383a3a2f33322d3536203d3e20323633323637.roa
File:                     323830343a313631383a3a2f33322d3536203d3e20323633323637.roa (raw, json)
Hash identifier:          xac0fOTBvjYEBR7ITZHpLKHIeEwVQERMXKqpCgAHJGM=
Subject key identifier:   E3:B3:13:BA:30:63:90:71:05:49:D9:D2:9A:BC:CA:8E:10:00:7F:DE
Certificate issuer:       /CN=925B8F8224E56C52328DBA2BF6E15ED609A821E4
Certificate serial:       711DE345716DAF94B927B270856B2B62DAF784B6
Authority key identifier: 92:5B:8F:82:24:E5:6C:52:32:8D:BA:2B:F6:E1:5E:D6:09:A8:21:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/925B8F8224E56C52328DBA2BF6E15ED609A821E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/2/323830343a313631383a3a2f33322d3536203d3e20323633323637.roa
Signing time:             Thu 04 Apr 2024 17:49:29 +0000
ROA not before:           Thu 04 Apr 2024 17:44:29 +0000
ROA not after:            Thu 03 Apr 2025 17:49:29 +0000
asID:                     263267
IP address blocks:        2804:1618::/32 maxlen: 56

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:1d:e3:45:71:6d:af:94:b9:27:b2:70:85:6b:2b:62:da:f7:84:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=925B8F8224E56C52328DBA2BF6E15ED609A821E4
        Validity
            Not Before: Apr  4 17:44:29 2024 GMT
            Not After : Apr  3 17:49:29 2025 GMT
        Subject: CN=E3B313BA306390710549D9D29ABCCA8E10007FDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:96:88:ad:15:15:1e:b3:77:63:a5:51:68:2a:
                    c5:65:00:c2:ed:8a:0a:af:27:a9:5d:1e:69:41:ae:
                    ac:bc:06:37:dd:b2:5e:63:37:03:69:f0:01:72:d3:
                    85:13:57:09:26:06:b2:cd:23:eb:08:35:b5:f8:63:
                    73:75:86:85:53:ec:f3:7c:09:64:82:32:c5:e5:95:
                    78:dc:ce:ed:0e:50:66:fc:f1:9c:2b:f7:a6:c6:5a:
                    f4:90:43:f1:a9:4e:13:73:72:5f:c4:71:2e:cf:28:
                    f7:85:40:7a:6b:48:a2:52:43:46:87:fb:74:f1:2a:
                    b7:7c:13:22:5a:c6:14:41:37:0d:e9:a9:fb:73:d2:
                    c7:04:97:80:ab:c3:15:0a:8c:f3:de:68:dd:16:1f:
                    64:f6:d1:81:9f:ca:e7:74:e8:f2:0b:66:68:bf:01:
                    0f:f7:86:65:74:1a:80:48:12:73:13:f2:95:2e:b0:
                    24:e9:ba:5f:4e:e1:fb:ad:bd:79:f1:c6:50:df:9e:
                    15:89:b2:01:78:32:7f:ab:36:db:4e:a2:12:f3:d6:
                    f8:39:78:f7:cf:2b:92:6f:0e:e7:40:c9:be:f4:6c:
                    a1:97:c4:bb:9a:a6:31:e4:e5:c3:ae:b4:3d:c3:5d:
                    fd:4b:e2:01:e9:c9:63:8f:3d:3d:4a:6e:75:62:30:
                    2d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B3:13:BA:30:63:90:71:05:49:D9:D2:9A:BC:CA:8E:10:00:7F:DE
            X509v3 Authority Key Identifier:
                keyid:92:5B:8F:82:24:E5:6C:52:32:8D:BA:2B:F6:E1:5E:D6:09:A8:21:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/2/925B8F8224E56C52328DBA2BF6E15ED609A821E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/925B8F8224E56C52328DBA2BF6E15ED609A821E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/2/323830343a313631383a3a2f33322d3536203d3e20323633323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1618::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:e8:b6:65:8c:8a:1c:d1:bc:5f:c7:de:1b:90:49:22:2e:1d:
         44:4b:69:03:67:f5:de:ee:26:cb:8a:ae:c6:61:4a:52:89:4c:
         86:f5:d2:b6:1f:9c:5d:97:98:b8:56:92:83:53:82:15:57:df:
         4d:d9:06:84:86:77:62:5a:02:59:f0:07:e2:39:1a:be:22:ff:
         ea:84:03:4d:15:82:3f:5a:a4:93:2c:b6:26:38:f2:57:8d:41:
         3a:fe:a0:05:a5:53:39:1c:57:e3:23:97:bc:20:69:5a:2a:a7:
         9b:32:02:94:f9:55:e6:e3:42:30:7c:2a:2c:df:5c:32:43:bd:
         09:45:7c:15:4f:3d:07:a6:53:1e:50:a4:e4:af:2b:0a:a7:74:
         d4:0c:81:e4:c5:db:ce:91:af:a7:69:2e:3d:9c:f2:ef:62:2e:
         92:03:62:3c:2c:48:e3:8f:e1:e0:47:a5:49:18:70:25:38:c5:
         c2:e7:ce:60:dd:dc:f2:4d:fd:d8:ef:dc:7b:4b:e1:49:72:45:
         1a:e1:ab:46:8d:15:ba:fb:08:ca:b4:55:6f:2d:5a:71:9f:1a:
         fa:39:42:a2:bb:bb:32:2d:6d:7b:aa:a9:09:af:d2:12:b3:58:
         3d:7c:d1:e7:1b:9f:e4:6c:50:65:62:2c:da:a7:4a:ff:2a:b9:
         26:ec:a6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 19:06:58 2024 by rpki-client on console-fra.rpki-client.org