Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a313064633a383030303a3a2f33342d3334203d3e20323633363532.roa
File:                     323830343a313064633a383030303a3a2f33342d3334203d3e20323633363532.roa (raw, json)
Hash identifier:          fTfPcejVp7mCQj5eDuRlbQ7ozeVbAOzbeb1sW7ASFL4=
Subject key identifier:   76:2A:3A:14:28:35:F8:8C:A2:CE:7B:71:26:AE:5B:B5:30:97:84:4C
Certificate issuer:       /CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
Certificate serial:       4445D14C047D60032B2F6AB0470C7B2EF0A6C159
Authority key identifier: 4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a313064633a383030303a3a2f33342d3334203d3e20323633363532.roa
Signing time:             Mon 29 Jul 2024 15:58:48 +0000
ROA not before:           Mon 29 Jul 2024 15:53:48 +0000
ROA not after:            Mon 28 Jul 2025 15:58:48 +0000
asID:                     263652
IP address blocks:        2804:10dc:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:45:d1:4c:04:7d:60:03:2b:2f:6a:b0:47:0c:7b:2e:f0:a6:c1:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
        Validity
            Not Before: Jul 29 15:53:48 2024 GMT
            Not After : Jul 28 15:58:48 2025 GMT
        Subject: CN=762A3A142835F88CA2CE7B7126AE5BB53097844C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d8:ad:cf:f1:e4:54:48:2a:e8:1f:07:9c:53:
                    44:b2:3b:1e:4f:ed:da:c4:cf:1e:59:ec:c7:f0:2c:
                    0c:42:74:d5:2a:05:4b:f3:07:e0:2f:d7:a5:ce:55:
                    83:a4:32:fb:76:d9:f4:c4:f7:1c:1b:98:c5:d1:3a:
                    c9:53:39:80:e5:33:36:14:66:21:db:44:fb:ac:34:
                    cc:41:81:44:98:90:2d:93:63:e3:6a:5a:89:d3:d4:
                    b5:47:1d:5e:29:f0:2e:37:08:b7:ec:19:47:30:7f:
                    08:e5:a1:82:58:1e:67:cf:b8:d4:21:4a:31:eb:23:
                    ce:06:51:46:41:0e:0a:6a:dd:65:eb:3b:26:fa:fc:
                    f9:b3:2d:44:bd:41:ce:ba:51:24:9e:c9:fd:ea:95:
                    31:a1:c2:f2:12:e1:11:75:37:4c:ea:51:00:53:44:
                    97:1f:15:fd:52:9b:a2:d2:f3:97:d8:5b:9d:f5:b6:
                    4e:a3:e2:7a:24:0e:79:89:df:3a:39:fc:66:3b:b6:
                    d5:c5:74:16:64:eb:bf:1e:99:14:e0:f6:f6:d1:3d:
                    3f:2d:cf:f4:8b:a8:93:27:8b:5d:be:96:dd:49:74:
                    c0:04:06:8a:87:f1:33:b0:82:04:8e:8d:58:a1:9e:
                    93:03:ee:dc:6e:a7:a7:1d:95:ef:fb:f8:51:69:b4:
                    2e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2A:3A:14:28:35:F8:8C:A2:CE:7B:71:26:AE:5B:B5:30:97:84:4C
            X509v3 Authority Key Identifier:
                keyid:4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a313064633a383030303a3a2f33342d3334203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10dc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0e:b3:a9:de:99:ce:fc:ab:e8:e5:34:84:29:c8:f3:dc:3b:d0:
         cf:2d:22:f7:25:42:a6:b6:66:2f:4a:31:40:ca:94:f0:4f:65:
         31:82:45:f7:1f:99:f0:13:74:79:2f:76:a6:9d:74:3d:86:b2:
         6d:3f:85:f8:1a:87:fa:09:5e:21:c2:f8:66:1e:ab:3c:69:59:
         ee:ba:c6:2e:3e:a6:dc:68:bf:51:06:00:53:9d:f8:09:2f:ec:
         4a:81:36:b2:6e:6d:c8:ac:78:cb:04:83:6b:88:1f:0d:1a:59:
         24:1f:bd:dc:fe:c3:c0:e2:9c:97:f6:3a:9f:92:23:49:21:aa:
         79:7f:f2:e4:e7:ca:c8:9f:d0:99:05:0b:82:5b:47:58:93:61:
         8b:0f:7b:16:9f:8a:02:d7:2f:ff:cc:5a:e8:93:e5:71:25:f5:
         74:82:70:24:0d:07:90:79:bd:c0:b6:22:dd:e6:f0:3c:cb:6e:
         77:4c:3e:67:57:a3:cd:3d:f5:24:72:5f:53:ea:62:39:8d:ed:
         dc:43:68:be:e8:13:ec:cd:1b:d3:e6:22:4c:c1:bb:89:7d:59:
         0a:32:96:81:4e:f4:86:08:24:0d:7b:9a:74:87:5f:1d:81:d5:
         55:14:58:41:ff:c8:ed:fa:82:cd:46:c9:77:04:86:c8:5d:17:
         59:1b:a3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 20:21:28 2024 by rpki-client on console-ams.rpki-client.org