Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/323830343a363164383a343030303a3a2f33342d3334203d3e20323639323630.roa
File:                     323830343a363164383a343030303a3a2f33342d3334203d3e20323639323630.roa (raw, json)
Hash identifier:          aWF2kr/J5QYcZhIBUxrkwRZNEdr3XauSiQU2QMvG/1w=
Subject key identifier:   81:E3:98:C4:AB:D8:EB:65:D3:E0:3B:8A:E6:B2:98:A3:39:CA:0E:2C
Certificate issuer:       /CN=F8E925F71E1524B85EAEB1074F0066C25A7941A4
Certificate serial:       348A07B0A49EBFCBEDB325565DA11FDAAF18F7DE
Authority key identifier: F8:E9:25:F7:1E:15:24:B8:5E:AE:B1:07:4F:00:66:C2:5A:79:41:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8E925F71E1524B85EAEB1074F0066C25A7941A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/323830343a363164383a343030303a3a2f33342d3334203d3e20323639323630.roa
Signing time:             Sun 02 Jun 2024 15:00:51 +0000
ROA not before:           Sun 02 Jun 2024 14:55:51 +0000
ROA not after:            Sun 01 Jun 2025 15:00:51 +0000
asID:                     269260
IP address blocks:        2804:61d8:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:8a:07:b0:a4:9e:bf:cb:ed:b3:25:56:5d:a1:1f:da:af:18:f7:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8E925F71E1524B85EAEB1074F0066C25A7941A4
        Validity
            Not Before: Jun  2 14:55:51 2024 GMT
            Not After : Jun  1 15:00:51 2025 GMT
        Subject: CN=81E398C4ABD8EB65D3E03B8AE6B298A339CA0E2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:df:e7:45:57:84:df:a9:9f:6f:5f:04:8d:7c:
                    26:42:02:88:2b:b9:df:20:91:cb:c0:c6:86:37:18:
                    f5:d3:62:4f:6e:c8:4d:11:5a:e4:f0:bc:61:96:bc:
                    c1:3f:76:82:d2:50:54:a4:48:30:4f:ba:f6:35:02:
                    e3:05:83:21:bc:3d:5b:d5:bf:c7:fd:d3:dc:cc:eb:
                    7e:09:83:d4:5a:d7:fa:71:af:91:b7:44:e9:e5:e1:
                    2e:87:d7:48:9d:70:70:99:40:9f:e6:a2:d9:73:92:
                    48:e1:9c:ba:16:51:d6:35:34:2a:83:b7:16:bb:59:
                    e1:81:0b:e6:c7:ca:e6:f5:a7:45:d5:71:d5:0f:d6:
                    29:fe:fe:e2:2a:e1:1d:7c:e4:fb:75:03:a9:18:42:
                    41:26:30:ca:84:35:24:d4:0a:22:f4:5f:44:0e:0f:
                    03:5c:e7:75:28:52:d7:bb:2c:b5:31:57:4d:a8:06:
                    4f:cd:ef:a9:eb:1f:68:fd:28:5b:1c:ce:02:d1:ea:
                    1f:e0:47:22:bf:71:f0:af:60:98:31:33:4e:69:44:
                    3a:ab:4f:4a:ad:16:cc:6b:20:68:7b:1e:f0:83:2e:
                    56:23:30:52:38:5b:b9:42:f5:c2:bd:1f:03:f2:9a:
                    21:ee:bb:32:ea:59:ec:f8:72:e0:4a:a8:11:7f:14:
                    ff:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E3:98:C4:AB:D8:EB:65:D3:E0:3B:8A:E6:B2:98:A3:39:CA:0E:2C
            X509v3 Authority Key Identifier:
                keyid:F8:E9:25:F7:1E:15:24:B8:5E:AE:B1:07:4F:00:66:C2:5A:79:41:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/F8E925F71E1524B85EAEB1074F0066C25A7941A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8E925F71E1524B85EAEB1074F0066C25A7941A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/323830343a363164383a343030303a3a2f33342d3334203d3e20323639323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61d8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         78:36:e9:4b:2c:a0:59:37:eb:ef:a7:5f:1d:4f:80:26:54:f8:
         64:c1:6d:30:9f:70:09:bf:e3:db:71:c4:c8:de:94:04:95:34:
         40:cd:f4:f8:c0:cf:91:a4:fc:a5:5e:bb:0e:c2:89:78:18:67:
         38:21:5e:0d:ed:b3:40:28:03:73:a6:3e:95:1d:96:8e:e0:fb:
         50:1c:cd:af:08:e2:ff:0d:57:75:53:7e:74:c2:7f:bb:20:e1:
         87:80:39:9a:22:4a:be:2e:45:45:4d:b4:96:5e:94:d9:cd:40:
         2b:e3:80:1a:8d:9a:df:fa:5b:6b:b7:f2:4a:4d:af:b9:0a:06:
         d6:03:76:03:b8:ad:34:d2:85:e5:9a:00:65:57:80:48:64:aa:
         8f:46:e7:08:21:29:e4:66:f5:e7:49:ba:48:38:59:bc:c5:8c:
         d5:87:f0:65:01:64:00:42:84:b9:9b:d9:fe:18:fa:15:90:ab:
         b4:23:02:4a:64:ba:a7:c3:ac:8c:a0:fe:ae:e5:ef:15:7f:07:
         ce:77:d5:37:be:19:57:a3:11:3b:d7:f9:cb:2c:dc:57:03:97:
         fb:78:61:9b:64:3c:aa:96:60:97:96:a7:60:cb:09:85:94:22:
         0e:6b:0c:6c:49:c7:0d:b0:16:55:ff:1a:92:85:c4:08:af:ea:
         19:02:c8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:48:45 2024 by rpki-client on console-ams.rpki-client.org