Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a313064633a633030303a3a2f33342d3334203d3e20323633363532.roa
File:                     323830343a313064633a633030303a3a2f33342d3334203d3e20323633363532.roa (raw, json)
Hash identifier:          nm8ej/ERgfMKP7nThKuofMcIqaTzMcwTSj+H7PUJ/Fg=
Subject key identifier:   31:01:B0:61:BA:4B:A8:7F:E6:0E:06:AD:5B:D6:41:C6:17:1C:4C:D5
Certificate issuer:       /CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
Certificate serial:       19B1CF61A4008BF81F0CB5261DDC5231484EC751
Authority key identifier: 4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a313064633a633030303a3a2f33342d3334203d3e20323633363532.roa
Signing time:             Mon 29 Jul 2024 15:58:48 +0000
ROA not before:           Mon 29 Jul 2024 15:53:48 +0000
ROA not after:            Mon 28 Jul 2025 15:58:48 +0000
asID:                     263652
IP address blocks:        2804:10dc:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b1:cf:61:a4:00:8b:f8:1f:0c:b5:26:1d:dc:52:31:48:4e:c7:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
        Validity
            Not Before: Jul 29 15:53:48 2024 GMT
            Not After : Jul 28 15:58:48 2025 GMT
        Subject: CN=3101B061BA4BA87FE60E06AD5BD641C6171C4CD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b3:6e:cf:f8:ff:af:94:f2:c3:4b:c6:20:c1:
                    00:80:3e:8b:c5:53:af:cc:f4:8b:1f:07:d4:ff:9a:
                    c0:d6:72:46:96:2f:f7:c3:43:d4:1e:26:ec:5d:f7:
                    99:eb:c4:d4:f0:92:66:fa:be:9b:0a:28:d7:21:f8:
                    a8:40:77:bd:d8:fe:37:38:53:6b:d5:8d:ba:a2:e9:
                    de:fc:2d:16:d4:6d:28:b4:cd:84:db:c5:9a:a5:51:
                    e2:cc:97:7e:c6:d7:ba:3c:83:73:76:41:95:d8:2c:
                    22:64:e7:a3:50:1d:04:4e:14:04:20:c9:30:2b:ac:
                    e5:e4:6a:de:0f:1c:f5:ff:81:26:18:b8:da:90:3f:
                    1a:35:31:a1:70:72:30:6b:ec:80:67:c3:b1:ce:08:
                    46:96:ee:ce:e3:da:c1:45:c5:8d:4f:10:eb:61:e7:
                    0d:e7:80:25:45:bc:49:70:d9:14:60:3b:10:35:76:
                    bf:44:ac:0c:c7:5d:56:52:ac:f5:be:aa:06:1d:f8:
                    f9:3d:a7:3c:86:70:45:bf:ff:01:8a:e7:7d:7f:53:
                    14:47:74:b2:35:b5:fb:ae:63:fc:81:01:72:1b:0c:
                    36:89:a9:e0:7a:45:97:5f:19:e3:1c:17:41:ca:7f:
                    1f:ed:98:3c:26:2d:f0:58:4f:80:eb:7a:63:05:2f:
                    ff:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:01:B0:61:BA:4B:A8:7F:E6:0E:06:AD:5B:D6:41:C6:17:1C:4C:D5
            X509v3 Authority Key Identifier:
                keyid:4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a313064633a633030303a3a2f33342d3334203d3e20323633363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10dc:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         29:9b:5c:cd:5d:c5:55:d1:83:1d:cd:20:50:00:47:e3:c8:fb:
         6d:5c:4e:eb:92:1c:70:34:fa:16:0b:36:45:a1:71:13:af:91:
         51:6c:a8:45:ff:45:16:29:8c:be:18:cd:17:53:6f:ef:15:9f:
         be:64:73:5b:b8:de:09:90:72:b1:b8:a6:65:c2:c0:0a:02:0f:
         3b:54:1b:a9:6c:25:ba:51:74:a7:b8:2c:5e:97:4c:e2:c2:b7:
         bc:0f:0c:cf:f9:ff:be:b8:29:45:89:33:42:60:7f:ae:0a:56:
         dc:2b:c4:09:3c:24:2a:29:09:ec:00:cc:be:81:8c:0b:b6:44:
         c3:d0:40:f1:e2:67:ee:c4:6d:ff:d1:55:12:f7:91:27:6b:e8:
         b9:1a:fb:bd:1a:3a:0a:fa:b9:57:d3:89:7e:20:aa:ff:f0:90:
         59:d6:d9:32:ef:71:ee:2e:fd:be:ff:0f:e2:f2:d5:3c:dd:c9:
         bf:ec:f5:f2:7d:6c:99:d7:e6:34:1a:8c:1e:0a:19:7c:52:2e:
         d7:58:23:c2:1f:1f:c2:e0:48:7d:bc:76:d9:f7:e7:d9:93:5a:
         27:27:57:22:db:0d:aa:2d:50:a9:cd:27:4f:9e:d9:c0:a0:e5:
         07:cd:2d:ae:d0:4a:cc:60:08:e8:f3:e6:8e:9c:4f:75:f8:5f:
         c9:34:d8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 21:29:17 2024 by rpki-client on console-fra.rpki-client.org