Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85fXwmpG2ST9YwnsnTKer35p7WxaCY1oHbXMrzVXtdTf/0/323830343a343634303a3a2f33322d3336203d3e20323636393738.roa
File:                     323830343a343634303a3a2f33322d3336203d3e20323636393738.roa (raw, json)
Hash identifier:          jUbnmuN7AG+koA7fi3Le3k/udIrj6CJuELy0jzLc72w=
Subject key identifier:   65:96:6B:25:5A:2C:F3:A4:A7:45:89:93:4F:25:AE:A9:8C:DD:79:AC
Certificate issuer:       /CN=EDD516BFC183DF33AB0F5D56D9A51F9EB4AE4553
Certificate serial:       7F62A31D3387107E01C299B9B2E4AE7009047464
Authority key identifier: ED:D5:16:BF:C1:83:DF:33:AB:0F:5D:56:D9:A5:1F:9E:B4:AE:45:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDD516BFC183DF33AB0F5D56D9A51F9EB4AE4553.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85fXwmpG2ST9YwnsnTKer35p7WxaCY1oHbXMrzVXtdTf/0/323830343a343634303a3a2f33322d3336203d3e20323636393738.roa
Signing time:             Mon 19 Aug 2024 23:55:03 +0000
ROA not before:           Mon 19 Aug 2024 23:50:03 +0000
ROA not after:            Mon 18 Aug 2025 23:55:03 +0000
asID:                     266978
IP address blocks:        2804:4640::/32 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:62:a3:1d:33:87:10:7e:01:c2:99:b9:b2:e4:ae:70:09:04:74:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDD516BFC183DF33AB0F5D56D9A51F9EB4AE4553
        Validity
            Not Before: Aug 19 23:50:03 2024 GMT
            Not After : Aug 18 23:55:03 2025 GMT
        Subject: CN=65966B255A2CF3A4A74589934F25AEA98CDD79AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0b:57:aa:50:fb:d3:e5:12:26:a6:54:9e:72:
                    3a:19:b1:45:00:4e:ae:a9:78:a0:fc:aa:c3:66:92:
                    10:d1:b4:cd:d7:84:e2:20:40:4d:b0:33:dc:d1:a6:
                    bf:69:e7:f0:bd:cc:fa:e9:96:27:5a:e6:d8:06:37:
                    29:2a:20:11:72:42:78:85:74:b2:25:0a:15:23:75:
                    6b:c3:0e:a2:08:13:d7:d0:18:5f:11:2f:88:6b:a0:
                    0a:c1:6a:3c:5c:43:06:af:c5:83:c5:b0:06:0e:47:
                    a3:e1:d3:65:28:b9:c9:0c:1d:ad:96:e9:13:d6:d4:
                    d1:00:8a:08:69:0c:5a:f1:95:fe:10:3d:c6:f8:4a:
                    0a:01:ab:a9:4b:87:50:d3:25:c3:9a:7f:b6:98:63:
                    01:f0:41:2e:b3:95:da:ed:45:a8:b1:81:9f:df:b1:
                    cc:69:4a:e2:98:09:a2:ed:f4:dc:7a:94:9d:c4:e1:
                    e2:b2:80:fd:d1:72:90:59:24:bb:d8:9d:5b:99:c8:
                    b9:35:2d:01:a5:fd:99:2c:42:dd:73:79:b2:0d:35:
                    25:44:a7:2d:18:c4:22:16:12:4c:8a:6f:3a:c6:12:
                    75:5c:27:21:e1:b8:b5:af:e2:77:89:fb:71:3a:1e:
                    44:50:f9:f8:d6:69:c0:13:b3:c6:cf:a0:c0:a6:22:
                    94:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:96:6B:25:5A:2C:F3:A4:A7:45:89:93:4F:25:AE:A9:8C:DD:79:AC
            X509v3 Authority Key Identifier:
                keyid:ED:D5:16:BF:C1:83:DF:33:AB:0F:5D:56:D9:A5:1F:9E:B4:AE:45:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85fXwmpG2ST9YwnsnTKer35p7WxaCY1oHbXMrzVXtdTf/0/EDD516BFC183DF33AB0F5D56D9A51F9EB4AE4553.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDD516BFC183DF33AB0F5D56D9A51F9EB4AE4553.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85fXwmpG2ST9YwnsnTKer35p7WxaCY1oHbXMrzVXtdTf/0/323830343a343634303a3a2f33322d3336203d3e20323636393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4640::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:ed:be:08:3c:5c:98:34:09:a7:01:25:2f:9c:b3:29:a5:73:
         f0:83:a8:29:3a:eb:24:84:d7:16:0c:04:52:2c:ca:ae:09:45:
         bf:e7:ab:f3:73:fb:06:48:af:d5:17:7d:3a:62:e3:6e:a4:f3:
         61:54:b1:c1:dc:ea:85:5d:37:d1:10:06:9b:a7:d2:e8:38:7b:
         b6:86:b2:d1:96:82:bf:ca:ef:62:3d:b5:ab:ca:93:c7:53:7b:
         46:67:4f:e8:f4:20:48:b2:36:d7:ba:28:cf:82:4e:58:3b:8a:
         4e:e6:80:1f:82:43:ca:80:49:a0:19:16:fa:59:77:61:a7:27:
         8d:57:db:61:8b:7e:8e:5b:57:e8:0a:92:03:b3:8b:7b:4d:44:
         30:16:d9:f6:e9:2b:49:8e:78:cf:45:ce:a8:1f:26:47:a5:89:
         3a:be:96:a1:99:cb:66:07:31:72:f5:ef:31:3e:22:2c:ca:d4:
         98:f0:89:66:91:58:25:1c:88:a0:35:ee:ce:7e:6a:cb:91:f1:
         a2:7a:7f:d3:a1:44:51:35:79:59:a9:33:f6:2f:9d:b8:b0:69:
         39:25:09:33:9e:25:ab:63:46:73:06:36:71:66:da:a0:b8:28:
         3f:e7:5d:20:6d:78:d8:93:93:99:ff:4b:e6:49:54:d4:c8:e1:
         47:d5:c0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 13:41:48 2024 by rpki-client on console-fra.rpki-client.org