Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/1/323830343a313138343a3a2f33322d3438203d3e203631383935.roa
File:                     323830343a313138343a3a2f33322d3438203d3e203631383935.roa (raw, json)
Hash identifier:          47I0jaR6kLYWnB/1NhFW/TXSL1Xd86lO4DKf5eqsurU=
Subject key identifier:   CA:FF:9F:CC:9B:D0:CB:7F:12:2B:6B:98:B8:80:A3:70:49:BB:B5:CB
Certificate issuer:       /CN=94B1D1B54CECAE7340ABB7A57084FCB36EADC9AE
Certificate serial:       25C64A35B9603DA2710C350076E8C005789B9CF9
Authority key identifier: 94:B1:D1:B5:4C:EC:AE:73:40:AB:B7:A5:70:84:FC:B3:6E:AD:C9:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94B1D1B54CECAE7340ABB7A57084FCB36EADC9AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/1/323830343a313138343a3a2f33322d3438203d3e203631383935.roa
Signing time:             Wed 03 Apr 2024 21:37:05 +0000
ROA not before:           Wed 03 Apr 2024 21:32:05 +0000
ROA not after:            Wed 02 Apr 2025 21:37:05 +0000
asID:                     61895
IP address blocks:        2804:1184::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c6:4a:35:b9:60:3d:a2:71:0c:35:00:76:e8:c0:05:78:9b:9c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94B1D1B54CECAE7340ABB7A57084FCB36EADC9AE
        Validity
            Not Before: Apr  3 21:32:05 2024 GMT
            Not After : Apr  2 21:37:05 2025 GMT
        Subject: CN=CAFF9FCC9BD0CB7F122B6B98B880A37049BBB5CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7c:06:61:73:d2:68:bf:83:4c:74:c9:93:42:
                    a0:84:df:6d:d8:a0:0b:5e:60:5b:db:27:8f:cc:79:
                    fb:fb:67:60:52:87:e0:01:56:e9:b1:aa:16:5f:8a:
                    12:4d:27:d2:cb:a9:d4:d8:4b:99:98:4c:b3:e7:bf:
                    88:ca:f9:ec:c7:7a:4c:87:4e:84:15:40:d7:99:48:
                    46:34:64:50:98:e6:37:82:e8:c0:3c:be:2e:f3:84:
                    73:8e:19:7b:0b:e1:fc:4b:00:46:51:ad:16:04:7b:
                    f0:13:93:5d:17:09:59:bf:59:e6:87:53:f6:14:99:
                    2d:86:13:e5:f9:cf:6a:01:1e:1e:04:c5:a3:15:f3:
                    57:d9:06:db:23:9a:ef:a3:8b:48:b5:86:db:b4:de:
                    39:c7:31:3a:a1:1e:37:8e:44:a5:e1:a2:e6:20:6f:
                    94:1a:3e:a7:92:22:ca:48:36:c9:a3:3e:6f:a1:36:
                    2b:b4:dd:ad:ff:9c:82:37:93:94:de:10:c3:e4:87:
                    fe:5f:db:2f:db:7e:dc:e9:c9:89:54:da:e7:05:a0:
                    7d:a8:69:0e:ee:24:48:22:a6:4b:64:c3:33:14:c7:
                    d7:9b:04:5b:60:6f:b6:4e:ce:dd:96:25:2d:b6:3e:
                    29:fc:c4:c7:5d:d7:bf:63:fe:78:37:02:2c:67:59:
                    cb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FF:9F:CC:9B:D0:CB:7F:12:2B:6B:98:B8:80:A3:70:49:BB:B5:CB
            X509v3 Authority Key Identifier:
                keyid:94:B1:D1:B5:4C:EC:AE:73:40:AB:B7:A5:70:84:FC:B3:6E:AD:C9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/1/94B1D1B54CECAE7340ABB7A57084FCB36EADC9AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94B1D1B54CECAE7340ABB7A57084FCB36EADC9AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/1/323830343a313138343a3a2f33322d3438203d3e203631383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1184::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:06:84:97:9a:82:a0:d4:ab:5b:ef:b9:b0:7a:a7:d5:ec:69:
         05:7f:14:54:89:cd:5a:19:dd:18:f5:d3:ed:00:4c:9d:9d:3b:
         ae:7b:7c:8c:06:5d:ae:a6:1f:26:b7:b4:90:e4:2b:b9:09:d9:
         ef:f5:56:c9:d1:79:ce:fc:17:14:5b:cb:f9:6a:ad:1b:fe:34:
         ed:4e:52:26:cb:c5:46:0f:9f:d7:d8:59:1f:92:74:3d:8c:fa:
         34:dc:c0:d8:e4:30:ea:5f:24:2a:95:ca:bc:f2:5a:3a:be:f9:
         1c:e1:4a:8a:f3:7b:23:92:67:6e:19:29:68:5a:ce:bd:b6:3d:
         2a:ef:e3:7e:ca:d2:c7:d2:85:34:f9:4b:45:db:9f:db:be:2d:
         b3:ac:68:36:4b:c4:0c:fb:5c:70:fd:f5:e2:66:69:0e:22:df:
         24:d5:5a:20:76:23:5f:63:4b:bd:2c:d6:b3:5d:97:d6:8c:1b:
         56:eb:48:81:eb:64:84:c5:03:ce:5c:d3:19:1a:63:99:ca:05:
         80:83:33:7c:7d:90:98:4d:7e:cc:89:e8:0a:a7:6f:70:86:a0:
         9b:e5:7c:5e:1f:c7:21:54:8b:bf:09:e4:2d:cd:dd:67:a4:18:
         4e:0b:2e:b2:c7:e5:a1:13:c6:56:2c:9b:3f:0a:57:b0:2b:89:
         cc:63:10:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 19:30:28 2024 by rpki-client on console-fra.rpki-client.org