Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/323830343a343764343a383030303a3a2f33342d3334203d3e20323637303739.roa
File:                     323830343a343764343a383030303a3a2f33342d3334203d3e20323637303739.roa (raw, json)
Hash identifier:          pqOzJhdd497SNdPwa6JNRcXW5Cp4ltu0Vq21sUsU1K8=
Subject key identifier:   8B:65:DF:C4:9A:46:05:81:B5:CB:26:27:60:BA:34:5F:06:10:D7:E8
Certificate issuer:       /CN=BA61C4911C1A34E84E64B3E9BF2862583819F5BF
Certificate serial:       31AC3EEA8481D850109290FBE0911157591BF8AC
Authority key identifier: BA:61:C4:91:1C:1A:34:E8:4E:64:B3:E9:BF:28:62:58:38:19:F5:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/323830343a343764343a383030303a3a2f33342d3334203d3e20323637303739.roa
Signing time:             Thu 04 Apr 2024 11:09:53 +0000
ROA not before:           Thu 04 Apr 2024 11:04:53 +0000
ROA not after:            Thu 03 Apr 2025 11:09:53 +0000
asID:                     267079
IP address blocks:        2804:47d4:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ac:3e:ea:84:81:d8:50:10:92:90:fb:e0:91:11:57:59:1b:f8:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA61C4911C1A34E84E64B3E9BF2862583819F5BF
        Validity
            Not Before: Apr  4 11:04:53 2024 GMT
            Not After : Apr  3 11:09:53 2025 GMT
        Subject: CN=8B65DFC49A460581B5CB262760BA345F0610D7E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9b:74:54:e6:c3:12:89:dd:01:15:3c:f7:bc:
                    36:05:a8:f1:c5:18:1b:af:40:d1:19:50:41:ca:14:
                    2f:aa:06:75:5e:da:84:55:7c:5b:f1:31:59:7c:38:
                    83:34:54:ad:8d:da:7e:79:b0:bf:43:78:cf:31:69:
                    cb:32:ed:8d:79:2c:b6:d0:5c:ba:53:85:c4:46:37:
                    43:f6:74:52:4a:03:6b:65:a1:f4:b4:08:d7:50:a0:
                    a1:13:4c:90:de:26:89:76:6f:3c:11:f9:ce:6c:62:
                    21:d8:d2:b4:9b:3b:ff:13:22:d7:40:f1:7d:2d:5f:
                    b8:9e:27:4f:80:ee:13:4f:e6:52:94:8d:59:6b:b5:
                    ef:0f:6c:a0:6e:0c:fe:75:bf:d3:84:f3:73:de:2e:
                    76:6a:71:bf:d3:df:a6:00:c3:0a:bc:63:44:a5:20:
                    34:8b:58:fe:4e:0b:a8:a6:b9:63:c5:f8:5c:9a:25:
                    ff:58:fa:b9:67:6b:4d:9c:2d:59:ae:cb:26:78:66:
                    25:2f:a1:f7:29:0f:48:05:b5:b5:d7:12:f3:7c:51:
                    ea:9d:38:aa:a6:e7:c0:7e:44:25:c7:5a:38:68:aa:
                    f1:af:ea:c3:11:f2:54:8d:9c:d3:e6:08:bf:a5:ba:
                    72:7f:23:f8:91:43:80:27:b6:f3:e2:55:13:49:75:
                    a3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:65:DF:C4:9A:46:05:81:B5:CB:26:27:60:BA:34:5F:06:10:D7:E8
            X509v3 Authority Key Identifier:
                keyid:BA:61:C4:91:1C:1A:34:E8:4E:64:B3:E9:BF:28:62:58:38:19:F5:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/323830343a343764343a383030303a3a2f33342d3334203d3e20323637303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47d4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2e:40:44:f3:15:1d:f8:cb:bb:0d:1b:e1:e4:38:e8:68:98:8f:
         ba:69:30:6e:f2:89:03:4d:4e:33:c5:83:88:7a:81:44:af:8b:
         90:ba:74:7b:a7:34:fa:61:b0:b0:96:70:b1:9c:4e:e5:2f:66:
         49:88:f7:89:b4:84:9f:6f:15:94:72:1a:01:8a:0a:54:2d:71:
         34:b5:69:f5:1b:cc:40:45:63:06:c8:9f:ef:25:a1:9e:82:0e:
         bc:e6:6b:a1:8b:c0:b8:fb:83:3c:1c:ca:03:2e:b2:da:fb:fa:
         5b:90:50:c9:f5:d0:13:ee:fe:cb:10:29:5a:cc:79:1d:78:f9:
         ad:e0:4b:ce:55:36:d7:01:dd:33:31:b4:a9:1c:7d:c2:62:91:
         af:a0:35:a4:eb:cf:e6:bc:cf:e6:33:1f:c8:cf:fb:4e:88:f3:
         56:66:81:17:0f:ed:e1:39:71:84:1b:5c:3c:49:63:79:cc:83:
         ab:5c:13:19:ed:ed:93:17:61:aa:c5:9e:0a:3a:32:f3:88:6d:
         cd:6a:95:12:da:87:53:dc:fd:c2:bc:0e:a7:41:06:36:2d:35:
         eb:3f:60:22:8b:2a:5a:68:20:38:be:21:93:e0:14:0b:ef:d6:
         f2:d2:78:ed:e7:73:1e:f6:4f:6e:1f:a5:a9:e9:26:e0:52:2e:
         8c:64:a0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 16:43:14 2024 by rpki-client on console-fra.rpki-client.org