Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/323830343a356466303a343030303a3a2f33342d3334203d3e20323639303032.roa
File:                     323830343a356466303a343030303a3a2f33342d3334203d3e20323639303032.roa (raw, json)
Hash identifier:          4QUU9BLMs/ceyM2tSFVs9SuMAyY7AptxYuzNGHFAyQY=
Subject key identifier:   6E:5B:A4:AF:49:5B:92:ED:5B:BD:EF:4D:25:91:F8:AF:81:08:F2:EE
Certificate issuer:       /CN=C5E77EC37A336F071F85565E26744903BB3DEC0D
Certificate serial:       576B27408E88CC3B42AEE06C4D56CA337C3983CC
Authority key identifier: C5:E7:7E:C3:7A:33:6F:07:1F:85:56:5E:26:74:49:03:BB:3D:EC:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/323830343a356466303a343030303a3a2f33342d3334203d3e20323639303032.roa
Signing time:             Thu 04 Apr 2024 03:01:37 +0000
ROA not before:           Thu 04 Apr 2024 02:56:37 +0000
ROA not after:            Thu 03 Apr 2025 03:01:37 +0000
asID:                     269002
IP address blocks:        2804:5df0:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:6b:27:40:8e:88:cc:3b:42:ae:e0:6c:4d:56:ca:33:7c:39:83:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5E77EC37A336F071F85565E26744903BB3DEC0D
        Validity
            Not Before: Apr  4 02:56:37 2024 GMT
            Not After : Apr  3 03:01:37 2025 GMT
        Subject: CN=6E5BA4AF495B92ED5BBDEF4D2591F8AF8108F2EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:61:c7:12:45:54:72:eb:3a:e3:08:34:91:e3:
                    a1:8d:6b:a9:f2:63:59:01:14:8c:cf:b1:af:8a:8a:
                    46:9c:9f:f5:02:44:75:6c:8f:83:0b:10:9f:fa:c4:
                    f7:88:3d:8a:0b:ca:eb:8a:2e:e5:7a:3a:bc:e0:e8:
                    78:d2:ce:d4:83:44:c7:a4:e4:ac:d5:a3:45:0a:72:
                    28:8c:31:dd:72:de:46:f2:5c:7b:4f:85:06:23:d5:
                    7d:6e:4d:14:62:92:37:25:2f:8c:ff:78:78:5a:07:
                    65:b0:bd:28:f2:f0:73:93:be:20:6c:d0:37:f2:82:
                    e2:d6:1e:a0:4d:d0:49:ce:52:fa:46:8b:9e:b9:28:
                    0f:bc:17:d6:6f:8d:f6:cd:89:4d:97:96:0c:f1:ae:
                    8c:87:52:9a:9e:cf:a8:5d:7c:f7:42:49:da:f1:4d:
                    4c:7d:0c:82:31:5e:92:d7:24:7f:78:5f:ce:43:6f:
                    ca:13:25:c0:05:31:d7:e8:3f:66:49:c2:6d:25:8f:
                    74:dd:b8:3b:42:2a:3c:67:e7:00:46:d3:96:6a:f7:
                    e1:e5:f8:b6:ca:a9:18:24:0f:29:8b:44:05:6d:66:
                    ef:9b:4f:05:c0:c6:a0:6c:2b:2f:75:18:bc:3f:22:
                    f5:67:b5:b4:b4:2b:13:9e:fd:31:da:ec:85:bc:18:
                    e7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5B:A4:AF:49:5B:92:ED:5B:BD:EF:4D:25:91:F8:AF:81:08:F2:EE
            X509v3 Authority Key Identifier:
                keyid:C5:E7:7E:C3:7A:33:6F:07:1F:85:56:5E:26:74:49:03:BB:3D:EC:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/323830343a356466303a343030303a3a2f33342d3334203d3e20323639303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5df0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a2:c0:39:3b:7b:3a:cb:70:ae:b3:de:68:a1:80:ba:c3:72:c7:
         8d:6b:20:13:3a:df:cd:ca:b8:78:71:9c:62:d6:32:43:e3:3c:
         09:19:f9:d5:d2:81:8e:e2:0d:1f:a8:e7:12:c9:61:53:14:fc:
         54:52:8b:60:3c:12:99:6f:4d:ef:cb:ba:9d:4f:48:4c:bc:cd:
         0c:c9:6f:e3:43:ea:07:c4:da:7f:03:8c:d8:15:6e:a9:56:c6:
         c1:cd:c0:e1:f2:83:b1:c1:f7:7f:03:67:64:2b:0f:f0:68:69:
         33:ab:72:20:a6:ab:48:01:ab:bd:ee:f1:44:b8:3d:cb:aa:78:
         30:2a:0e:98:c8:7f:f1:43:f5:eb:8a:6b:1c:a1:4d:ab:2e:aa:
         16:a8:60:61:0b:93:b2:dd:d8:9d:6f:42:ed:a1:1f:75:64:ff:
         85:24:09:89:5b:97:40:e5:0f:9d:47:7a:39:df:65:51:a8:7a:
         86:6b:36:28:53:93:e0:d5:1d:22:67:21:5c:83:27:e2:6d:6f:
         68:62:04:bc:1e:a7:e1:5a:2a:3a:f5:32:f4:2a:77:52:4d:a8:
         fa:b5:2d:b0:e7:e2:bb:14:5d:66:a6:eb:f2:88:92:2d:a3:80:
         b9:cd:34:d4:48:a5:08:10:64:4e:8c:00:81:49:48:15:d5:50:
         7b:c6:00:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 18:15:48 2024 by rpki-client on console-fra.rpki-client.org