Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/323830343a363164383a383030303a3a2f33342d3334203d3e20323639323630.roa
File:                     323830343a363164383a383030303a3a2f33342d3334203d3e20323639323630.roa (raw, json)
Hash identifier:          HilP5Cr9dlhX58DDf4BET9s4FmUEzBnRNHoMauyPupI=
Subject key identifier:   00:4D:AB:F8:87:2E:D0:C7:0D:72:72:34:AA:82:7B:69:D0:EB:3E:95
Certificate issuer:       /CN=F8E925F71E1524B85EAEB1074F0066C25A7941A4
Certificate serial:       492CC50AF65BE4601863BED960B9793B0657F5CB
Authority key identifier: F8:E9:25:F7:1E:15:24:B8:5E:AE:B1:07:4F:00:66:C2:5A:79:41:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8E925F71E1524B85EAEB1074F0066C25A7941A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/323830343a363164383a383030303a3a2f33342d3334203d3e20323639323630.roa
Signing time:             Sun 02 Jun 2024 15:00:55 +0000
ROA not before:           Sun 02 Jun 2024 14:55:55 +0000
ROA not after:            Sun 01 Jun 2025 15:00:55 +0000
asID:                     269260
IP address blocks:        2804:61d8:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:2c:c5:0a:f6:5b:e4:60:18:63:be:d9:60:b9:79:3b:06:57:f5:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8E925F71E1524B85EAEB1074F0066C25A7941A4
        Validity
            Not Before: Jun  2 14:55:55 2024 GMT
            Not After : Jun  1 15:00:55 2025 GMT
        Subject: CN=004DABF8872ED0C70D727234AA827B69D0EB3E95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:34:72:fd:dd:ff:bd:9e:e3:b5:74:ba:67:66:
                    93:3e:e1:b3:94:c0:14:79:dd:4a:32:ce:49:46:14:
                    ec:58:03:1e:97:fb:10:30:d5:5c:ac:ee:40:2a:6e:
                    86:8b:11:2a:2a:91:19:6f:6b:9f:2b:fa:3b:a7:cb:
                    fd:88:86:2d:a4:cb:38:24:09:df:42:de:a0:c9:30:
                    dd:28:f6:68:1b:74:42:39:d0:fb:eb:69:15:28:8b:
                    84:09:0c:f3:c8:26:f5:9c:aa:7c:0c:00:59:ec:44:
                    f8:df:26:bc:57:ce:e9:09:c8:b1:88:ac:d1:d0:a4:
                    16:fe:30:43:38:60:8b:ae:1f:ee:fc:8a:97:af:d4:
                    9e:93:05:81:8e:a1:20:90:02:d5:5c:d4:b8:c4:e6:
                    9a:08:31:cd:aa:06:5f:c6:09:2a:b2:84:7d:cc:f4:
                    da:f4:37:9e:cb:17:d5:8e:c0:ef:11:68:d7:f7:3d:
                    f4:40:b7:1b:82:65:ad:16:19:db:7f:1c:51:99:f4:
                    94:bd:4c:38:2f:2c:8f:79:1c:e9:eb:ec:a4:f9:9c:
                    7b:05:63:f2:6a:bf:6f:7f:28:ea:17:d0:9e:36:e8:
                    fc:9b:35:d2:68:18:92:35:2f:8d:59:5c:3d:59:1d:
                    7c:cf:19:21:c0:8f:2b:91:d6:e4:4c:58:7f:8f:56:
                    16:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4D:AB:F8:87:2E:D0:C7:0D:72:72:34:AA:82:7B:69:D0:EB:3E:95
            X509v3 Authority Key Identifier:
                keyid:F8:E9:25:F7:1E:15:24:B8:5E:AE:B1:07:4F:00:66:C2:5A:79:41:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/F8E925F71E1524B85EAEB1074F0066C25A7941A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8E925F71E1524B85EAEB1074F0066C25A7941A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/323830343a363164383a383030303a3a2f33342d3334203d3e20323639323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61d8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         84:0b:3b:53:6a:2f:10:96:5a:4d:17:28:69:22:06:21:d7:59:
         c4:63:b1:b2:3d:61:69:cc:30:81:fd:68:c6:62:2b:3d:53:52:
         12:f8:bf:28:49:c9:0d:78:36:dd:b3:7e:a1:d9:88:a2:78:9f:
         0b:af:57:56:d2:99:50:6f:2f:52:53:31:fb:95:6c:df:55:c9:
         67:37:79:34:dd:cf:b3:f9:43:f8:27:7a:4a:d3:3d:13:d0:eb:
         f3:eb:5b:eb:8f:2c:59:4c:f3:02:93:86:90:ef:ff:d3:06:ab:
         b4:4d:95:c9:d1:20:e2:c3:1f:30:ce:91:c1:f3:47:84:a0:0d:
         ce:01:c8:63:a9:12:dd:1d:ce:bd:6a:48:e9:18:f5:22:37:c5:
         3b:6d:4d:a3:f7:08:ab:74:2a:50:2a:63:a6:93:4d:0a:00:e1:
         0b:29:74:d5:da:10:8e:06:4a:5f:b2:3b:e2:6a:ed:b0:a9:53:
         c1:9e:55:fa:6e:f9:8b:c4:0b:7b:62:df:d9:69:1b:08:cf:97:
         cf:05:27:7b:d4:2a:3f:5d:be:01:7d:e8:ab:1d:7b:10:fe:2e:
         ff:cb:2b:cb:a4:e7:85:76:f6:58:76:c7:fe:15:5f:e7:36:f1:
         1c:5d:79:22:f2:c5:34:3d:c0:e3:01:2a:77:ab:cf:4f:4a:07:
         91:32:e6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:48:45 2024 by rpki-client on console-ams.rpki-client.org