Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/323830343a353538383a3a2f33322d3332203d3e20323637393430.roa
File:                     323830343a353538383a3a2f33322d3332203d3e20323637393430.roa (raw, json)
Hash identifier:          oTsAEZjrir1uCYXVxoykNIv355vhzkMgwao1eyM0XUs=
Subject key identifier:   91:A8:F2:26:2C:30:7E:B4:6B:81:8E:76:E8:9A:44:87:05:99:6B:4B
Certificate issuer:       /CN=7B20C92E66D78742403B4C41E5FC426FBE9D1C6C
Certificate serial:       6DB619D96C8A0FCA2D755185271921AFA198A2E9
Authority key identifier: 7B:20:C9:2E:66:D7:87:42:40:3B:4C:41:E5:FC:42:6F:BE:9D:1C:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B20C92E66D78742403B4C41E5FC426FBE9D1C6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/323830343a353538383a3a2f33322d3332203d3e20323637393430.roa
Signing time:             Sat 07 Sep 2024 15:01:38 +0000
ROA not before:           Sat 07 Sep 2024 14:56:38 +0000
ROA not after:            Sat 06 Sep 2025 15:01:38 +0000
asID:                     267940
IP address blocks:        2804:5588::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b6:19:d9:6c:8a:0f:ca:2d:75:51:85:27:19:21:af:a1:98:a2:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B20C92E66D78742403B4C41E5FC426FBE9D1C6C
        Validity
            Not Before: Sep  7 14:56:38 2024 GMT
            Not After : Sep  6 15:01:38 2025 GMT
        Subject: CN=91A8F2262C307EB46B818E76E89A448705996B4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:80:df:cc:b5:d6:d0:94:19:9e:26:c4:03:27:
                    48:23:c3:bb:fe:39:dd:29:1d:d2:5f:68:fc:8c:ef:
                    2b:2c:16:7f:49:95:ee:15:8f:2d:db:08:30:95:83:
                    43:2c:dd:96:6c:aa:88:52:76:e2:13:fd:63:fa:2c:
                    6a:da:e0:a8:36:a3:92:d8:80:af:47:a5:47:60:66:
                    9f:62:49:e3:64:e3:31:32:09:34:b1:4b:0c:f1:f6:
                    30:a1:a3:b9:5a:41:58:56:bc:0f:b5:af:e5:00:af:
                    b0:d8:6f:8b:30:f9:29:98:d3:1c:c5:0d:28:a3:50:
                    29:58:1c:0e:fb:25:d3:40:2e:26:01:4f:50:51:cb:
                    f7:64:71:7f:1e:1c:de:8c:9f:21:4a:67:32:21:ef:
                    db:ca:86:98:24:d5:85:67:66:d3:11:ba:3f:4b:af:
                    d6:52:30:68:f4:38:f9:fc:78:94:c6:0d:47:46:f0:
                    6a:83:36:da:b7:54:7f:c6:77:32:47:55:eb:34:20:
                    54:3a:96:f5:8f:ee:86:f4:74:85:4b:a4:ec:4c:00:
                    8c:c2:a7:6b:bb:7a:87:96:f4:51:9b:d7:7a:45:7a:
                    95:b2:93:af:a5:e0:83:d7:ce:f6:c7:4f:db:2e:7a:
                    a0:95:5f:d6:6a:01:f7:43:03:cf:55:93:b1:0a:93:
                    29:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A8:F2:26:2C:30:7E:B4:6B:81:8E:76:E8:9A:44:87:05:99:6B:4B
            X509v3 Authority Key Identifier:
                keyid:7B:20:C9:2E:66:D7:87:42:40:3B:4C:41:E5:FC:42:6F:BE:9D:1C:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/7B20C92E66D78742403B4C41E5FC426FBE9D1C6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B20C92E66D78742403B4C41E5FC426FBE9D1C6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/0/323830343a353538383a3a2f33322d3332203d3e20323637393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5588::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:eb:02:4a:a5:f0:c4:30:49:35:71:0b:79:79:9c:73:57:c0:
         29:07:5b:6f:31:2a:a8:4d:22:65:a8:65:76:9e:2a:76:80:ea:
         47:f0:81:2a:da:1d:b9:78:b9:a6:8c:01:04:dc:ce:3e:70:a2:
         eb:61:f7:88:3f:d2:c4:ea:44:f7:0f:7a:40:9c:d3:0c:78:7b:
         f8:6a:74:e1:32:f5:48:68:81:c2:18:65:cb:92:ae:3e:fa:41:
         7f:4d:58:c5:11:da:ac:cb:7e:d4:48:ec:9e:0f:cd:1b:10:da:
         ef:25:18:7f:eb:c1:30:a2:5b:6b:02:a0:62:72:c5:c9:7f:ae:
         e8:b9:49:78:25:8c:2d:96:5a:84:b4:60:4f:18:4c:0e:f4:00:
         84:d3:f6:a5:85:42:26:e5:dc:14:3b:8e:af:cf:7a:16:bd:5c:
         7b:64:c6:3d:cf:b2:ea:eb:6b:fc:76:0f:ce:0f:80:5f:e8:dc:
         ab:c4:b1:23:ef:9e:f4:64:b7:a8:16:a7:2a:a7:af:34:89:d5:
         3f:1f:8d:aa:2f:b8:de:d3:1b:a3:7d:18:d5:04:08:43:7a:97:
         06:31:22:74:fd:9d:47:7d:c0:91:cf:19:6a:be:a6:b0:9b:8f:
         cb:1f:bf:b7:a0:61:92:5b:68:24:d8:ea:31:71:f0:f2:e0:b7:
         7d:c2:80:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:49:10 2024 by rpki-client on console-ams.rpki-client.org