Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/1/323830343a326161343a3a2f33322d3332203d3e20323634303836.roa
File:                     323830343a326161343a3a2f33322d3332203d3e20323634303836.roa (raw, json)
Hash identifier:          Ixx6C2k1yVOqFOn7Eb4KF96wBnXxU235wsq9LF5qakM=
Subject key identifier:   69:3F:30:97:E9:28:3A:88:E4:40:31:5A:F4:E8:7F:0F:F6:4B:42:FD
Certificate issuer:       /CN=2F962990D08F38EAEAD892BB35125EE477497FD2
Certificate serial:       66D9E69266C2B8CBC139DFC94E218C5B1868AF61
Authority key identifier: 2F:96:29:90:D0:8F:38:EA:EA:D8:92:BB:35:12:5E:E4:77:49:7F:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F962990D08F38EAEAD892BB35125EE477497FD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/1/323830343a326161343a3a2f33322d3332203d3e20323634303836.roa
Signing time:             Thu 04 Apr 2024 01:39:39 +0000
ROA not before:           Thu 04 Apr 2024 01:34:39 +0000
ROA not after:            Thu 03 Apr 2025 01:39:39 +0000
asID:                     264086
IP address blocks:        2804:2aa4::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d9:e6:92:66:c2:b8:cb:c1:39:df:c9:4e:21:8c:5b:18:68:af:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F962990D08F38EAEAD892BB35125EE477497FD2
        Validity
            Not Before: Apr  4 01:34:39 2024 GMT
            Not After : Apr  3 01:39:39 2025 GMT
        Subject: CN=693F3097E9283A88E440315AF4E87F0FF64B42FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:23:f7:4f:ee:a8:63:2c:92:23:8f:69:68:94:
                    0a:7f:4a:01:3d:02:65:22:8b:4e:c8:65:52:70:84:
                    7b:be:5b:52:ab:56:03:a1:be:4c:ae:e3:9f:46:26:
                    00:be:17:87:4c:64:f8:aa:38:e9:5e:8c:54:b9:7c:
                    37:e5:cb:76:46:73:ee:5c:0c:13:63:61:7c:72:be:
                    79:18:73:9d:a7:08:8b:5f:39:c3:23:40:31:cd:b6:
                    d3:6b:d4:c1:b7:2f:db:c0:63:39:3d:c4:ce:7d:1c:
                    36:5e:34:18:89:12:70:cd:b0:36:cc:e2:5c:b6:fe:
                    f9:36:de:42:41:66:10:ac:01:9b:87:42:63:ab:3f:
                    dc:a7:52:45:16:de:4b:53:49:d7:9a:bc:d0:15:df:
                    63:bb:3c:1b:63:37:04:11:7e:f8:90:9e:aa:f8:25:
                    7f:a9:85:d5:b8:93:51:62:07:96:1c:21:3f:21:88:
                    24:4a:b3:38:98:c4:3c:95:d3:09:61:d8:f9:6e:33:
                    f7:87:6c:85:21:23:76:56:14:4b:d0:2f:b4:4c:f5:
                    5a:8f:bb:45:e6:55:bd:0f:87:a2:46:29:fe:e1:1c:
                    80:5a:bb:f5:ff:52:83:96:f3:f7:1f:f6:2e:b8:39:
                    92:95:9b:31:38:67:1a:87:29:26:16:ec:4b:49:92:
                    0e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3F:30:97:E9:28:3A:88:E4:40:31:5A:F4:E8:7F:0F:F6:4B:42:FD
            X509v3 Authority Key Identifier:
                keyid:2F:96:29:90:D0:8F:38:EA:EA:D8:92:BB:35:12:5E:E4:77:49:7F:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/1/2F962990D08F38EAEAD892BB35125EE477497FD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F962990D08F38EAEAD892BB35125EE477497FD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/1/323830343a326161343a3a2f33322d3332203d3e20323634303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2aa4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:b9:1b:78:d6:b5:04:12:3f:bb:26:62:83:21:cf:c2:21:3b:
         09:b1:17:9b:b6:5e:b1:2a:50:d7:57:7d:53:2e:ca:88:20:a7:
         3d:39:a7:3d:8a:22:f3:c0:cf:95:23:8e:3e:43:4c:23:1e:94:
         1c:c9:45:99:32:7d:cc:5d:ab:58:96:6f:d3:df:8f:7f:dc:99:
         24:6b:1c:70:fb:50:a0:52:83:80:7a:34:be:66:3f:65:17:4b:
         1e:19:88:23:c9:a8:8e:b4:59:82:5f:1b:4d:68:a6:ff:90:10:
         91:fe:40:56:aa:2e:ad:2a:1c:27:d1:2c:d6:95:1b:c4:20:63:
         0f:e6:70:c9:04:77:14:0f:37:c9:04:94:49:64:bb:40:c4:28:
         2a:ec:55:9b:19:34:6b:43:ae:c0:5b:70:f2:dd:20:4e:64:07:
         78:12:b3:f3:c6:f1:b0:6c:cf:45:67:08:ee:01:de:7d:19:f2:
         1f:b3:70:76:14:52:05:a6:87:63:bf:59:84:20:9e:e3:cd:7e:
         f8:e5:f9:e6:1a:fa:90:a4:6b:bf:a3:2d:89:67:aa:18:26:59:
         b9:78:a8:63:f9:2f:46:7d:1a:96:e6:e5:28:84:dc:4c:e5:e6:
         f0:1c:5f:a8:14:3f:50:27:98:b6:e1:8d:cc:10:9a:01:b9:5d:
         81:05:cb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 21:53:29 2024 by rpki-client on console-fra.rpki-client.org