Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/323830343a343764343a643030303a3a2f33362d3336203d3e20323637303739.roa
File:                     323830343a343764343a643030303a3a2f33362d3336203d3e20323637303739.roa (raw, json)
Hash identifier:          lT6rD+zCaEDSHpyXBPAt8yHaM+T50fLIodaXj8wJmuI=
Subject key identifier:   3F:97:46:5D:40:77:54:BD:CF:16:31:96:C6:E2:2A:62:D6:46:53:4F
Certificate issuer:       /CN=BA61C4911C1A34E84E64B3E9BF2862583819F5BF
Certificate serial:       78885BE5682D01A3FFA72B5F4F536A67E05C953A
Authority key identifier: BA:61:C4:91:1C:1A:34:E8:4E:64:B3:E9:BF:28:62:58:38:19:F5:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/323830343a343764343a643030303a3a2f33362d3336203d3e20323637303739.roa
Signing time:             Mon 15 Apr 2024 18:26:38 +0000
ROA not before:           Mon 15 Apr 2024 18:21:38 +0000
ROA not after:            Mon 14 Apr 2025 18:26:38 +0000
asID:                     267079
IP address blocks:        2804:47d4:d000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:88:5b:e5:68:2d:01:a3:ff:a7:2b:5f:4f:53:6a:67:e0:5c:95:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA61C4911C1A34E84E64B3E9BF2862583819F5BF
        Validity
            Not Before: Apr 15 18:21:38 2024 GMT
            Not After : Apr 14 18:26:38 2025 GMT
        Subject: CN=3F97465D407754BDCF163196C6E22A62D646534F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d6:d9:2f:28:c0:ae:1f:9f:66:f5:aa:fc:11:
                    1f:d9:d9:20:3c:f1:b3:ee:00:06:f7:71:6e:0e:6b:
                    f1:c6:3e:2b:5b:65:8f:f1:fa:63:f7:9a:9e:bd:df:
                    96:dd:c0:0f:95:32:38:44:b5:86:36:bd:c8:11:23:
                    c3:63:c7:82:9f:96:b7:ba:80:e9:00:c6:d6:56:ed:
                    6c:12:4a:61:1b:87:3e:d6:5e:97:60:ca:5b:16:4e:
                    99:22:e7:c4:6b:1d:9a:81:eb:55:94:1f:35:b7:9f:
                    cc:0c:c3:bd:69:3f:ef:76:54:33:e9:0c:02:60:f6:
                    1f:fb:fa:28:05:17:d8:84:f7:2f:66:63:15:da:21:
                    9e:1e:74:4a:73:3b:fd:a2:a9:e2:a7:96:2e:e9:cb:
                    81:6e:c2:d4:cc:cf:cb:93:cb:b9:e4:20:d4:7c:8c:
                    fc:92:6d:62:0f:89:23:f0:36:83:a8:9b:f3:bb:41:
                    f2:ea:3e:a0:1f:e1:67:75:53:92:ab:74:57:66:80:
                    a7:73:2b:c7:78:72:f2:13:7b:2f:01:5e:a0:53:3a:
                    65:f1:16:1c:d1:d7:7a:30:db:3d:45:1a:3e:f1:60:
                    1a:28:71:2d:15:e0:73:78:ab:08:be:b5:c1:7b:f7:
                    41:67:93:fe:58:40:55:19:88:14:b7:ae:1e:6a:74:
                    60:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:97:46:5D:40:77:54:BD:CF:16:31:96:C6:E2:2A:62:D6:46:53:4F
            X509v3 Authority Key Identifier:
                keyid:BA:61:C4:91:1C:1A:34:E8:4E:64:B3:E9:BF:28:62:58:38:19:F5:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/323830343a343764343a643030303a3a2f33362d3336203d3e20323637303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47d4:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         05:53:33:f2:e8:9c:96:23:d8:74:54:61:48:16:d8:b6:f6:8c:
         78:0e:3c:73:ca:53:94:52:92:ff:1f:a8:fa:6b:de:dc:71:0a:
         66:21:3f:0f:25:4c:73:8a:e3:c6:d6:79:39:72:5b:e0:18:68:
         f6:0d:78:19:84:bd:f3:5d:3a:24:f6:00:8c:a0:6b:d0:73:29:
         ff:e1:7b:c8:02:dc:bd:2e:3e:6f:9e:d4:47:66:af:97:6a:37:
         04:87:17:48:d5:de:02:a8:03:88:d7:ee:4c:4d:f3:34:fd:b7:
         ee:20:3b:7c:03:64:62:41:89:6c:85:26:8d:6c:ea:b1:53:7f:
         f8:78:3d:1b:70:07:30:dc:9d:e5:74:09:1d:47:74:90:00:60:
         38:d7:d4:8a:a6:f0:e3:30:f8:45:2f:99:e6:7a:4b:44:db:35:
         e6:06:89:ca:10:59:e7:ea:aa:69:38:be:03:db:99:e8:36:f8:
         ac:09:69:bc:c8:e2:9a:31:41:56:6e:ed:69:7f:1c:cc:54:70:
         45:6e:58:08:82:f2:d5:c5:96:3e:a2:77:a7:a5:bf:59:3f:4d:
         f6:91:90:72:ae:da:5c:fd:9e:aa:cb:95:6e:1b:d9:e3:7c:e1:
         0b:55:fe:c4:da:cf:95:82:33:0b:5f:19:b7:c0:02:62:0e:17:
         5b:cb:d4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 16:43:14 2024 by rpki-client on console-fra.rpki-client.org