Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/323830343a353430303a3a2f33322d3430203d3e20323638363232.roa
File:                     323830343a353430303a3a2f33322d3430203d3e20323638363232.roa (raw, json)
Hash identifier:          mnjibI26c+EGx2FznbYHIEE9ZP6oKH4ZNGjovASEZvQ=
Subject key identifier:   4C:21:FD:17:C6:AF:22:F0:7B:FF:8C:BD:80:2B:B4:CE:A2:92:85:CB
Certificate issuer:       /CN=6C3C02D3BCB39DB866B00522F58C95D7D77CAE19
Certificate serial:       3EF9D35634B572D89BEF5993A9DBFF2764A24C54
Authority key identifier: 6C:3C:02:D3:BC:B3:9D:B8:66:B0:05:22:F5:8C:95:D7:D7:7C:AE:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C3C02D3BCB39DB866B00522F58C95D7D77CAE19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/323830343a353430303a3a2f33322d3430203d3e20323638363232.roa
Signing time:             Wed 05 Jun 2024 23:18:18 +0000
ROA not before:           Wed 05 Jun 2024 23:13:18 +0000
ROA not after:            Wed 04 Jun 2025 23:18:18 +0000
asID:                     268622
IP address blocks:        2804:5400::/32 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f9:d3:56:34:b5:72:d8:9b:ef:59:93:a9:db:ff:27:64:a2:4c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C3C02D3BCB39DB866B00522F58C95D7D77CAE19
        Validity
            Not Before: Jun  5 23:13:18 2024 GMT
            Not After : Jun  4 23:18:18 2025 GMT
        Subject: CN=4C21FD17C6AF22F07BFF8CBD802BB4CEA29285CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:52:ee:22:d0:8f:7f:01:fa:eb:c8:2d:af:73:
                    17:a2:8f:f7:5d:f1:79:3e:68:80:13:9d:57:ce:d4:
                    c1:81:4f:0e:d4:c9:cd:54:e9:51:29:33:91:00:4c:
                    10:c0:76:95:8d:42:46:44:a6:97:88:46:57:1d:49:
                    f3:41:c8:de:8e:93:3b:b2:ef:d3:ed:69:e2:73:ff:
                    cf:4a:3a:9c:b1:f8:1c:d3:9b:b6:c5:ea:06:70:83:
                    ef:3a:43:82:c6:97:7c:ad:6a:d3:02:0b:af:26:5c:
                    5c:eb:67:ea:0b:7d:71:bb:eb:4f:ab:c1:3d:d7:f2:
                    7d:32:23:45:ff:bc:c7:ef:b8:f7:89:73:c8:5a:be:
                    b3:39:07:24:23:cf:ef:5d:77:c1:27:db:e9:e7:6e:
                    93:ee:3f:6a:5c:55:66:19:92:4c:2a:b6:c9:25:88:
                    39:b7:56:c1:71:7e:82:7c:a5:68:97:76:77:9b:85:
                    d1:48:4d:bd:d4:18:04:5c:4b:a6:17:94:c5:5a:36:
                    b7:0c:b7:8d:08:e1:f8:34:83:9e:fa:4d:33:2c:0e:
                    b9:89:06:bc:a4:8c:d8:15:1a:9f:24:4f:50:8c:30:
                    f9:ea:47:ae:57:4b:70:dc:7d:7b:90:11:2f:98:c9:
                    52:b6:db:10:fd:d5:92:a7:43:91:d4:be:c5:92:08:
                    49:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:21:FD:17:C6:AF:22:F0:7B:FF:8C:BD:80:2B:B4:CE:A2:92:85:CB
            X509v3 Authority Key Identifier:
                keyid:6C:3C:02:D3:BC:B3:9D:B8:66:B0:05:22:F5:8C:95:D7:D7:7C:AE:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/6C3C02D3BCB39DB866B00522F58C95D7D77CAE19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C3C02D3BCB39DB866B00522F58C95D7D77CAE19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/323830343a353430303a3a2f33322d3430203d3e20323638363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5400::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:cc:a7:fe:37:58:6c:07:c3:2b:be:72:e5:8d:0c:69:3c:7b:
         e0:d4:a6:3b:d8:65:3f:e6:c1:7b:c1:fe:0c:dc:eb:72:60:ae:
         e1:83:a7:6a:a0:ea:57:fd:6f:46:e5:b8:34:f3:57:1c:6a:3b:
         09:4a:7b:d0:3e:1a:0f:a2:3b:dd:fe:a3:2c:11:d8:cc:f0:20:
         25:6b:6c:cc:27:b1:80:2f:0e:db:0f:9f:fa:62:47:0e:5f:a5:
         3b:80:d1:c2:ee:0d:53:5c:f8:a4:7c:f7:62:76:63:30:3e:7c:
         e1:7a:8e:11:31:4b:7f:86:8b:e2:fc:88:07:a0:c6:16:c1:7a:
         d4:15:d4:6e:09:7d:04:e7:89:9c:17:e8:83:9a:77:85:e7:eb:
         b8:41:76:f2:b2:8c:d2:16:17:cc:3a:6f:96:06:76:21:32:84:
         7e:36:61:98:d1:23:7e:ef:35:77:21:a3:6f:3d:60:fe:eb:66:
         02:6b:31:0e:44:6a:cb:04:8e:de:2c:0f:97:0f:5b:88:20:3c:
         81:93:23:ff:d8:64:32:fc:29:f2:18:7c:16:6a:8b:bd:f1:fc:
         9c:12:a8:1c:f7:d3:51:dd:fe:f0:4b:f5:cf:e8:32:67:40:7a:
         00:07:0d:87:ad:f5:91:c1:5d:54:46:e4:a8:f6:26:16:db:ec:
         3e:e8:2a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 10:54:19 2024 by rpki-client on console-ams.rpki-client.org