Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/323830343a356466303a383030303a3a2f33332d3333203d3e20323639303032.roa
File:                     323830343a356466303a383030303a3a2f33332d3333203d3e20323639303032.roa (raw, json)
Hash identifier:          9m8OfOpAV1PE8RGLW/GldFPYodB9SpqIIHrQFz5spEA=
Subject key identifier:   52:14:93:1E:BC:03:20:55:E2:62:78:35:DD:18:C2:C6:E6:E3:EB:F8
Certificate issuer:       /CN=C5E77EC37A336F071F85565E26744903BB3DEC0D
Certificate serial:       6972D80266B7EB17198928391FAB6DEAD1A22115
Authority key identifier: C5:E7:7E:C3:7A:33:6F:07:1F:85:56:5E:26:74:49:03:BB:3D:EC:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/323830343a356466303a383030303a3a2f33332d3333203d3e20323639303032.roa
Signing time:             Thu 04 Apr 2024 03:01:46 +0000
ROA not before:           Thu 04 Apr 2024 02:56:46 +0000
ROA not after:            Thu 03 Apr 2025 03:01:46 +0000
asID:                     269002
IP address blocks:        2804:5df0:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:72:d8:02:66:b7:eb:17:19:89:28:39:1f:ab:6d:ea:d1:a2:21:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5E77EC37A336F071F85565E26744903BB3DEC0D
        Validity
            Not Before: Apr  4 02:56:46 2024 GMT
            Not After : Apr  3 03:01:46 2025 GMT
        Subject: CN=5214931EBC032055E2627835DD18C2C6E6E3EBF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:87:54:30:25:69:bb:78:0d:ed:e7:e3:ef:10:
                    75:39:d8:b0:7a:39:b8:39:b9:12:48:33:93:c9:e8:
                    1a:64:40:f8:d2:f8:16:fd:73:05:44:a5:24:f6:be:
                    23:d5:14:10:45:5a:62:d2:20:d5:ba:3c:10:20:95:
                    03:13:da:4b:20:44:14:b0:8b:95:22:e9:8a:2c:b7:
                    03:a9:64:c8:88:6a:a3:c6:1d:88:6d:f6:06:28:87:
                    73:84:6e:5c:3f:37:71:eb:ab:23:ce:d3:7e:d8:0e:
                    61:e0:a0:7a:60:20:f2:24:46:0e:cb:0c:ca:a3:8d:
                    c9:21:58:6f:f8:92:b9:b1:ab:ba:00:1d:10:73:cc:
                    5a:0e:bd:78:fa:0f:6d:c7:df:2e:87:d7:92:5f:d7:
                    7b:46:4c:11:31:9a:1a:f4:a1:b1:97:18:48:b9:ae:
                    c3:74:ea:a7:b6:d2:34:22:12:13:b2:ba:d4:ae:c8:
                    cc:95:3d:8b:06:40:a1:b2:02:64:24:72:61:c8:b6:
                    5f:df:c7:22:d8:72:0d:b6:97:54:81:c7:9e:e0:b6:
                    51:60:28:7f:f8:0e:2d:51:5b:1f:3f:5a:2a:8f:ee:
                    7b:e5:f5:52:09:4a:66:8a:e8:9c:65:32:da:fe:2c:
                    6e:ce:27:3e:f0:ad:79:5b:2a:c5:3c:da:40:57:75:
                    27:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:14:93:1E:BC:03:20:55:E2:62:78:35:DD:18:C2:C6:E6:E3:EB:F8
            X509v3 Authority Key Identifier:
                keyid:C5:E7:7E:C3:7A:33:6F:07:1F:85:56:5E:26:74:49:03:BB:3D:EC:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/323830343a356466303a383030303a3a2f33332d3333203d3e20323639303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5df0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         23:87:c7:e8:48:79:59:a5:23:da:6e:f5:37:f0:c8:b0:68:e6:
         71:6e:98:54:c5:c6:fd:a5:24:48:21:ef:8f:b8:4c:2f:12:a6:
         92:47:74:c5:af:b9:36:88:f2:1d:62:92:68:fb:66:0f:63:a4:
         1a:29:59:27:55:35:41:66:84:c2:92:fc:ca:73:58:7e:31:7b:
         62:f8:c6:dc:b3:fd:10:e7:45:b2:3e:da:17:15:a8:e0:3f:6a:
         36:8a:76:6d:46:6a:84:6f:66:79:61:78:ef:f6:15:10:2a:e1:
         85:b9:b5:27:fc:ae:6c:09:90:14:fa:ea:3f:97:12:d6:74:33:
         ae:15:63:37:01:1f:9e:23:2e:1a:35:81:57:01:d1:32:d5:d5:
         30:a3:45:69:95:53:67:de:8f:71:60:4e:48:cd:ab:0d:71:55:
         1a:3c:ac:65:4c:6a:20:cf:cc:12:93:e0:a9:cd:24:17:5f:d4:
         a1:fe:00:6b:d0:53:a5:1d:8a:7b:f3:bf:99:86:2c:11:f0:ec:
         c6:ab:31:6d:55:24:2f:95:c8:b0:f4:67:9d:04:48:64:d4:d4:
         6f:1b:a6:4f:a3:18:13:22:a4:ea:82:79:f9:64:3c:a4:30:b6:
         87:fe:56:3b:2f:33:24:ea:cf:eb:a5:4b:3d:60:db:ea:37:d4:
         ce:5b:c4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 19:28:07 2024 by rpki-client on console-ams.rpki-client.org