Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/76e5c348WJoLgEt9kKNVQ2LK3aGrzNN7ffiLVixSnwy6/0/323830343a356538343a3a2f33322d3332203d3e20323639303338.roa
File:                     323830343a356538343a3a2f33322d3332203d3e20323639303338.roa (raw, json)
Hash identifier:          bRP+n288FozvWqoY1z3yUb8wX3wcM2LcOkxSwlaJoVo=
Subject key identifier:   98:75:24:FC:84:FD:AB:04:51:DD:35:48:F6:6A:1F:59:8E:E8:7B:63
Certificate issuer:       /CN=3C75FEDB0EBECF9F9AA99D4E2363D7269643E2D3
Certificate serial:       58F2E392C516F472E7BC31E923392A007196C7B9
Authority key identifier: 3C:75:FE:DB:0E:BE:CF:9F:9A:A9:9D:4E:23:63:D7:26:96:43:E2:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C75FEDB0EBECF9F9AA99D4E2363D7269643E2D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/76e5c348WJoLgEt9kKNVQ2LK3aGrzNN7ffiLVixSnwy6/0/323830343a356538343a3a2f33322d3332203d3e20323639303338.roa
Signing time:             Wed 31 Jul 2024 18:38:46 +0000
ROA not before:           Wed 31 Jul 2024 18:33:46 +0000
ROA not after:            Wed 30 Jul 2025 18:38:46 +0000
asID:                     269038
IP address blocks:        2804:5e84::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f2:e3:92:c5:16:f4:72:e7:bc:31:e9:23:39:2a:00:71:96:c7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C75FEDB0EBECF9F9AA99D4E2363D7269643E2D3
        Validity
            Not Before: Jul 31 18:33:46 2024 GMT
            Not After : Jul 30 18:38:46 2025 GMT
        Subject: CN=987524FC84FDAB0451DD3548F66A1F598EE87B63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9c:9b:9e:1c:8e:28:48:a7:e2:54:07:ab:e5:
                    ad:86:c4:5f:5d:23:4c:19:e9:9c:9d:b5:4a:e1:63:
                    84:1c:35:b4:7a:cf:e0:61:b7:af:6a:74:20:f1:a0:
                    8c:47:9f:03:d8:57:73:3e:5c:b9:01:ed:40:34:ac:
                    c2:f6:3a:3b:b0:33:f1:e1:7a:38:93:91:27:f6:a7:
                    13:5d:80:f5:d4:7b:9a:a1:28:73:20:00:2d:cc:33:
                    8b:31:5d:8b:e9:1f:1b:e9:e8:7b:b0:5d:37:17:43:
                    bc:86:83:af:09:e8:76:4e:05:83:74:03:82:43:ec:
                    63:2a:4e:79:c8:de:c5:df:7e:f1:5a:a9:14:15:83:
                    62:3b:1c:60:ea:c6:cb:90:ae:c8:95:ac:de:25:11:
                    43:3d:cf:2c:20:92:20:f7:f6:83:22:b2:42:fe:80:
                    f7:28:77:44:46:e1:16:28:36:25:c7:53:ed:3c:71:
                    fe:8a:b3:8c:fc:15:50:3a:83:bc:81:4c:88:2c:12:
                    d2:49:7f:2d:ac:df:64:d0:40:89:36:64:1d:39:57:
                    ed:ff:40:ce:78:09:0f:97:49:60:ee:d1:07:10:0f:
                    9f:73:53:db:16:13:e4:e1:0d:ce:d9:c4:54:12:86:
                    d2:a9:a9:b7:db:9f:a8:e0:3a:b8:0f:2a:e9:93:68:
                    fd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:75:24:FC:84:FD:AB:04:51:DD:35:48:F6:6A:1F:59:8E:E8:7B:63
            X509v3 Authority Key Identifier:
                keyid:3C:75:FE:DB:0E:BE:CF:9F:9A:A9:9D:4E:23:63:D7:26:96:43:E2:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/76e5c348WJoLgEt9kKNVQ2LK3aGrzNN7ffiLVixSnwy6/0/3C75FEDB0EBECF9F9AA99D4E2363D7269643E2D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C75FEDB0EBECF9F9AA99D4E2363D7269643E2D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/76e5c348WJoLgEt9kKNVQ2LK3aGrzNN7ffiLVixSnwy6/0/323830343a356538343a3a2f33322d3332203d3e20323639303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e84::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:0f:99:27:1c:56:82:13:5c:4a:b7:70:20:1e:8c:6d:c0:74:
         93:89:b6:fe:24:4f:25:57:4d:71:b7:67:36:d6:3a:d7:ba:96:
         d2:11:26:7c:b3:a8:9d:b9:9d:cc:03:da:53:04:b6:df:3d:85:
         fd:70:37:cb:9b:02:62:a6:5d:de:f1:8c:23:a7:b3:1d:af:f6:
         36:34:32:4f:ab:e4:36:ad:ca:ce:01:85:2f:d1:cc:fd:01:15:
         e4:e5:66:ad:5a:05:5c:2a:73:e2:78:62:9a:42:6d:9c:f4:48:
         bf:cd:61:d4:71:3c:89:b3:ac:4b:ba:dd:5e:ca:8c:c8:da:e2:
         fc:1a:16:73:34:d1:e8:6a:ed:d4:26:ec:80:2a:e3:8a:a3:a2:
         d0:00:92:d3:95:b7:dc:62:49:d1:90:ee:a3:3d:79:ba:4a:b2:
         19:01:72:82:9d:36:04:12:ea:6d:80:e5:00:07:e4:cc:71:f3:
         c0:25:3a:1a:cd:2b:7b:0c:2d:c6:08:56:e4:ed:c6:fc:3d:fc:
         28:9a:5a:87:01:15:37:b9:73:90:b9:01:1b:f5:73:29:25:64:
         bf:94:ea:25:be:0f:00:79:56:cd:8c:b8:27:23:f6:39:30:4d:
         fe:bd:08:c1:c6:e0:aa:46:45:61:50:fe:db:9f:9e:8f:da:5b:
         59:9c:5f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 21:18:52 2024 by rpki-client on console-ams.rpki-client.org