Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a313064633a3a2f33322d3332203d3e20323633363532.roa
File:                     323830343a313064633a3a2f33322d3332203d3e20323633363532.roa (raw, json)
Hash identifier:          hUbE5ouSHYPZzuRD2wxbpHBJnOY6MuOwg1n0ZDkLuE0=
Subject key identifier:   19:DE:35:26:7B:B9:23:FD:2F:B9:E5:BD:31:F9:E1:82:1B:DD:C1:8C
Certificate issuer:       /CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
Certificate serial:       56DB1F8572AF948F4A108C9B02CBA2A0A546066C
Authority key identifier: 4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a313064633a3a2f33322d3332203d3e20323633363532.roa
Signing time:             Mon 29 Jul 2024 15:58:48 +0000
ROA not before:           Mon 29 Jul 2024 15:53:48 +0000
ROA not after:            Mon 28 Jul 2025 15:58:48 +0000
asID:                     263652
IP address blocks:        2804:10dc::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:db:1f:85:72:af:94:8f:4a:10:8c:9b:02:cb:a2:a0:a5:46:06:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
        Validity
            Not Before: Jul 29 15:53:48 2024 GMT
            Not After : Jul 28 15:58:48 2025 GMT
        Subject: CN=19DE35267BB923FD2FB9E5BD31F9E1821BDDC18C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d0:aa:7e:1e:8a:d5:24:09:b9:ce:4b:10:d7:
                    0f:f8:b1:0b:5a:28:35:86:f0:e7:3a:b5:a5:f4:e4:
                    d6:36:36:6f:db:c9:61:3d:fc:8e:c0:cf:5b:cf:89:
                    2d:7c:23:d4:1c:75:98:2f:8b:d5:b5:e5:3d:ed:2d:
                    07:6f:1e:15:36:ad:b5:4f:3e:d8:9f:c6:e1:7e:27:
                    b7:97:b7:a9:35:8e:5d:e1:f9:1f:81:9e:a9:3b:3a:
                    07:28:87:e4:f2:84:79:43:c3:49:11:16:13:6d:b1:
                    41:35:88:58:ca:1b:13:2b:0b:ef:2f:db:ce:50:00:
                    45:91:a2:ad:31:fe:6f:cf:56:3c:9c:e5:f5:5c:82:
                    79:b4:8a:02:3a:12:44:c0:59:9c:80:c1:78:59:2c:
                    19:2e:6c:d1:f9:5f:fd:2f:67:08:0a:13:63:04:12:
                    01:5b:0a:9c:40:bf:1d:49:4d:57:f4:68:ca:65:a9:
                    bd:ae:e0:6a:59:56:7f:cb:2c:b2:8a:51:76:a6:fe:
                    46:af:c5:b3:dc:d7:ba:2c:57:38:69:1a:77:64:2f:
                    42:c9:b2:96:0f:3a:80:87:85:68:52:54:7e:e9:89:
                    5e:f7:ee:66:6b:da:67:4a:5f:fd:76:0c:ff:b5:d2:
                    9c:3a:f8:50:14:4d:77:aa:f3:f4:11:8c:3a:cf:30:
                    a6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DE:35:26:7B:B9:23:FD:2F:B9:E5:BD:31:F9:E1:82:1B:DD:C1:8C
            X509v3 Authority Key Identifier:
                keyid:4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a313064633a3a2f33322d3332203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:52:6c:b9:ad:58:1a:db:90:ee:9b:be:c5:d1:88:4e:d8:49:
         82:e1:92:27:2c:2d:9b:b9:5e:db:be:6b:7f:11:5a:3b:de:b3:
         eb:0e:0c:80:47:6f:7c:50:51:f8:43:97:8c:ea:88:89:92:28:
         d9:0d:3e:c3:f8:71:49:da:93:dd:fb:df:3a:6f:43:b1:dd:f4:
         81:a6:08:68:ee:df:a8:f1:dd:a2:ff:ef:83:76:05:bd:61:4c:
         c2:1c:be:f3:c5:06:6c:e5:1f:8c:06:99:95:a8:7c:d4:e7:84:
         0e:41:df:da:29:ff:2f:79:ed:a2:11:d3:72:94:be:a2:c6:0b:
         88:e2:f9:df:39:84:7b:54:e2:63:5f:7f:c1:4a:7a:a4:08:b5:
         fd:39:e9:02:0c:63:b5:9a:d3:04:a3:15:ad:6b:1e:1a:40:8f:
         43:63:3b:34:6c:f5:27:4d:c5:47:c7:fe:ff:39:cb:1a:98:c8:
         11:ed:31:f2:bf:88:f6:d9:20:8e:d6:a6:5d:6c:89:98:92:a8:
         fe:3a:6e:19:e7:a4:b1:2e:f7:94:7f:d4:5d:58:47:20:f1:7f:
         07:e4:15:ac:47:5b:84:89:4a:2e:00:dc:fc:d4:c7:7b:81:d7:
         24:76:94:71:11:3f:04:62:02:d0:6e:a2:29:c6:14:8b:49:2f:
         33:3c:ba:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 21:29:17 2024 by rpki-client on console-fra.rpki-client.org