Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/323830343a343764343a663030303a3a2f33362d3336203d3e20323637303739.roa
File:                     323830343a343764343a663030303a3a2f33362d3336203d3e20323637303739.roa (raw, json)
Hash identifier:          xlAVfH184S1exbOq6hak0SNL/SFbuFZgE7eP+4DslME=
Subject key identifier:   91:A9:85:EA:83:0B:8F:25:53:DB:26:5F:BF:B9:B7:34:F0:6B:FC:8C
Certificate issuer:       /CN=BA61C4911C1A34E84E64B3E9BF2862583819F5BF
Certificate serial:       0B0839C308AC3DBFB51646B921115B5A31E267FB
Authority key identifier: BA:61:C4:91:1C:1A:34:E8:4E:64:B3:E9:BF:28:62:58:38:19:F5:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/323830343a343764343a663030303a3a2f33362d3336203d3e20323637303739.roa
Signing time:             Mon 15 Apr 2024 18:26:38 +0000
ROA not before:           Mon 15 Apr 2024 18:21:38 +0000
ROA not after:            Mon 14 Apr 2025 18:26:38 +0000
asID:                     267079
IP address blocks:        2804:47d4:f000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:08:39:c3:08:ac:3d:bf:b5:16:46:b9:21:11:5b:5a:31:e2:67:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA61C4911C1A34E84E64B3E9BF2862583819F5BF
        Validity
            Not Before: Apr 15 18:21:38 2024 GMT
            Not After : Apr 14 18:26:38 2025 GMT
        Subject: CN=91A985EA830B8F2553DB265FBFB9B734F06BFC8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fe:e4:08:f4:3d:40:d5:aa:39:ab:26:91:a8:
                    99:7c:24:1c:c4:7a:6d:69:c8:5d:71:b7:19:7d:6a:
                    a5:7d:d7:c9:c7:6f:0e:5d:26:07:97:8e:87:43:39:
                    bd:57:d0:dc:40:92:8d:dc:94:43:f0:f4:b3:2d:b9:
                    2e:39:7e:24:f6:3b:d9:20:15:30:d4:36:db:34:c1:
                    5f:e4:66:11:84:54:4f:82:28:0d:c0:7a:ed:9c:77:
                    ef:62:04:48:ee:11:d4:07:c9:7c:e6:f2:91:17:a2:
                    06:ae:a1:7a:3f:91:11:17:54:de:45:85:f0:55:34:
                    d7:41:22:29:3c:bf:04:59:f1:c0:a1:94:af:d7:89:
                    73:d3:87:7a:44:77:a0:b2:01:99:8a:b7:5c:cb:b2:
                    c6:6d:1b:e1:af:d3:db:88:e7:29:bf:40:84:ca:0e:
                    47:e8:a5:ee:a7:fa:96:e2:a6:8f:41:8f:57:a6:ff:
                    14:0e:86:ff:44:76:0e:4f:6e:13:9e:a4:aa:a8:2b:
                    dc:e5:f4:e4:7a:96:38:32:a1:15:b6:5e:a6:e4:99:
                    9f:0e:27:1e:e3:d5:c2:56:75:3e:eb:3a:63:a9:cb:
                    ad:ef:5c:06:43:53:9c:79:a5:0f:9a:6c:e1:7e:74:
                    4c:5b:d4:3b:50:06:03:46:78:5e:16:6a:13:7e:e8:
                    f8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A9:85:EA:83:0B:8F:25:53:DB:26:5F:BF:B9:B7:34:F0:6B:FC:8C
            X509v3 Authority Key Identifier:
                keyid:BA:61:C4:91:1C:1A:34:E8:4E:64:B3:E9:BF:28:62:58:38:19:F5:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/323830343a343764343a663030303a3a2f33362d3336203d3e20323637303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47d4:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5e:30:8b:b5:14:ca:bd:36:f4:52:28:a2:0e:1a:c4:87:bb:f4:
         00:7d:75:02:34:08:5b:f1:0e:d1:86:9f:af:23:87:94:b6:ac:
         90:2d:4d:c4:ac:2e:c6:de:91:79:2c:6c:52:77:80:c1:fa:63:
         f2:6b:6a:e0:73:a9:15:0f:d1:0f:28:56:0f:83:fb:db:be:ad:
         34:d0:34:25:87:59:34:18:fc:ea:ec:ac:73:14:2c:b8:ee:0d:
         f6:bc:f5:2a:75:0b:a8:7e:8a:d6:09:8b:4f:fd:bd:7c:c7:3c:
         6b:18:94:55:f6:35:4b:12:c2:f5:7d:74:47:9b:c4:90:44:95:
         a6:6e:95:67:48:0e:7d:97:ab:fd:3f:cf:b5:4a:4c:30:0e:be:
         4a:2b:b5:3b:d1:fa:6a:9f:80:39:6c:c4:e7:a2:e0:15:49:9b:
         56:00:7e:19:ff:4d:40:e0:5e:c0:9b:85:c9:a8:80:94:9d:b2:
         c1:cd:bf:4e:e1:c3:61:7b:49:6c:e7:56:f1:b4:c8:b0:ec:a3:
         23:20:7c:55:9b:6c:88:af:0c:93:9e:98:48:b3:b5:ff:dc:ae:
         56:3e:72:05:5e:31:f2:53:dc:43:02:5b:4e:70:a8:98:4d:3d:
         53:f8:f5:e9:19:2c:93:47:bb:92:83:d9:bc:f2:ac:01:60:13:
         e2:fe:d7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 17:43:49 2024 by rpki-client on console-ams.rpki-client.org