Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a373130303a3a2f34302d3430203d3e20323632353033.roa
File:                     323830343a326265303a373130303a3a2f34302d3430203d3e20323632353033.roa (raw, json)
Hash identifier:          c4mAFREJ9inCRLkB7ainUTzziTpKWXULWxk8ORRuuuE=
Subject key identifier:   8A:1D:E3:15:34:17:7E:97:BB:9D:6A:17:95:6F:79:59:43:C1:65:1C
Certificate issuer:       /CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
Certificate serial:       6F64D11CAE1455EE93B2E018911C2BD1E66CDB99
Authority key identifier: 00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a373130303a3a2f34302d3430203d3e20323632353033.roa
Signing time:             Tue 25 Jun 2024 12:18:54 +0000
ROA not before:           Tue 25 Jun 2024 12:13:54 +0000
ROA not after:            Tue 24 Jun 2025 12:18:54 +0000
asID:                     262503
IP address blocks:        2804:2be0:7100::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:64:d1:1c:ae:14:55:ee:93:b2:e0:18:91:1c:2b:d1:e6:6c:db:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
        Validity
            Not Before: Jun 25 12:13:54 2024 GMT
            Not After : Jun 24 12:18:54 2025 GMT
        Subject: CN=8A1DE31534177E97BB9D6A17956F795943C1651C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:53:c0:7f:65:81:24:e0:c2:73:da:1a:eb:f4:
                    cc:65:ef:fe:9b:9a:90:da:2d:c1:5d:71:92:34:fd:
                    80:f1:a1:56:df:25:a5:b6:2f:a0:33:82:7f:b4:79:
                    1d:7f:14:4b:ab:da:c0:62:de:ce:40:13:e5:04:98:
                    ee:10:cc:02:66:94:5d:f4:87:44:a6:9a:34:cd:77:
                    38:44:e1:04:df:04:03:33:e0:26:0a:4d:c1:ac:d2:
                    70:c6:d4:c7:3e:ec:5d:a0:26:df:df:ee:0c:a0:ba:
                    e5:ec:ee:08:c1:ec:c4:4d:d6:b4:93:04:0a:00:8b:
                    68:99:26:d4:85:6c:0d:9c:61:90:d1:3d:e6:17:82:
                    a3:83:5b:6f:67:58:82:0b:cf:af:7c:a9:83:a0:10:
                    3e:25:4e:65:99:9e:c8:8a:a6:bb:80:e6:50:55:c6:
                    2e:55:e4:ef:2c:15:f6:22:ac:df:e5:07:f2:97:11:
                    1e:d9:e0:26:c6:e8:ce:ff:90:c7:c9:59:f7:73:cf:
                    6d:bb:60:e0:31:2c:8f:5d:b5:1a:df:7c:e3:aa:07:
                    3a:14:29:5c:13:a4:06:7b:11:3b:80:8d:89:d2:f9:
                    1e:5f:36:98:f2:30:b1:01:b8:f0:8a:92:57:b8:0c:
                    cf:c5:d8:63:8a:70:3a:d9:20:59:c8:03:7c:a4:2b:
                    ef:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1D:E3:15:34:17:7E:97:BB:9D:6A:17:95:6F:79:59:43:C1:65:1C
            X509v3 Authority Key Identifier:
                keyid:00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a373130303a3a2f34302d3430203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2be0:7100::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:93:c5:eb:c9:12:29:9a:e3:0c:e9:f7:ae:58:8f:d9:b4:5a:
         3a:58:12:16:1b:2e:71:9d:75:19:33:2b:b1:a9:85:0d:65:49:
         40:b9:19:f0:f6:bf:0b:be:33:dd:1f:f1:4e:be:c3:3f:55:9d:
         cc:14:61:f3:a9:bb:2f:9c:de:20:56:ba:6f:08:30:88:2f:44:
         93:e5:fb:d7:9c:d8:aa:46:a2:a9:02:f5:cc:28:e8:a5:98:1c:
         7a:c6:de:a0:10:1d:c5:b0:b3:76:04:a9:d0:66:56:66:49:6d:
         c3:84:51:ab:6d:75:e7:49:79:20:d6:36:7d:71:02:c0:92:c9:
         cf:ec:27:a3:0c:3e:66:a0:71:e7:56:8c:7b:f9:69:93:46:50:
         ac:86:48:1e:1d:5c:c5:e1:ea:a1:38:b8:55:26:b6:13:f9:3c:
         11:6b:f5:81:0f:5c:a4:b3:08:ea:dc:5a:2d:c8:b1:4c:db:f9:
         95:92:55:48:52:90:46:e4:4a:a8:1c:94:e3:63:5c:91:f0:00:
         2a:41:9b:12:2a:83:49:13:95:9b:18:f3:5e:23:b2:ec:c9:e9:
         4e:4c:66:c7:2c:e0:66:3a:b4:f1:a6:45:1b:14:f4:51:3d:9e:
         cd:1b:98:df:f5:54:13:47:af:33:f3:bc:99:14:c5:e2:80:fc:
         85:2a:54:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 21:12:38 2024 by rpki-client on console-ams.rpki-client.org