Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/323830343a326264633a3630303a3a2f34302d3430203d3e20323635313831.roa
File:                     323830343a326264633a3630303a3a2f34302d3430203d3e20323635313831.roa (raw, json)
Hash identifier:          FJHxMnTAHu2u3Xy2e2jjHH8RHvmv9uSULjFAxrkUZwI=
Subject key identifier:   08:89:16:FB:65:E4:41:15:C6:64:35:D2:56:0B:25:BB:99:4C:3B:68
Certificate issuer:       /CN=6CD0AD4431CC221750D8F2C0EC9EF30543B7D244
Certificate serial:       44D98C152DD147FC5C645C2AFB72ACB9F3436690
Authority key identifier: 6C:D0:AD:44:31:CC:22:17:50:D8:F2:C0:EC:9E:F3:05:43:B7:D2:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/323830343a326264633a3630303a3a2f34302d3430203d3e20323635313831.roa
Signing time:             Thu 04 Apr 2024 03:52:24 +0000
ROA not before:           Thu 04 Apr 2024 03:47:24 +0000
ROA not after:            Thu 03 Apr 2025 03:52:24 +0000
asID:                     265181
IP address blocks:        2804:2bdc:600::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d9:8c:15:2d:d1:47:fc:5c:64:5c:2a:fb:72:ac:b9:f3:43:66:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD0AD4431CC221750D8F2C0EC9EF30543B7D244
        Validity
            Not Before: Apr  4 03:47:24 2024 GMT
            Not After : Apr  3 03:52:24 2025 GMT
        Subject: CN=088916FB65E44115C66435D2560B25BB994C3B68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e9:a2:07:ba:33:40:cd:c0:76:0b:31:ae:27:
                    bc:89:39:93:5f:ce:65:e2:f6:a8:9d:0d:d5:28:7f:
                    93:93:27:a7:3e:31:96:c1:b9:89:82:0d:73:62:d1:
                    59:74:b6:7c:83:79:bf:dd:12:58:e3:4f:d9:c7:8c:
                    8e:79:61:71:cc:93:3a:bb:0a:70:7c:77:7c:89:fd:
                    2b:c3:af:05:24:f1:57:86:f5:59:e4:2b:f3:62:d8:
                    2d:76:7d:bd:da:bc:c8:48:cf:75:1e:16:31:64:81:
                    f8:c7:46:42:57:91:e1:eb:cd:ec:50:81:2c:8b:3a:
                    0b:fb:53:5a:43:0c:98:76:0f:07:3d:33:67:5b:78:
                    33:ce:02:88:a3:59:b4:78:0e:d9:1c:e6:49:54:54:
                    29:c7:1a:bc:38:b5:de:1f:8b:07:11:af:cb:ad:56:
                    58:54:4e:b0:65:7a:e3:b5:09:9c:12:e4:ef:1d:e7:
                    26:70:28:cd:73:51:23:cd:46:a0:eb:e1:9f:48:cf:
                    31:b2:b3:37:1d:9c:66:9c:cd:b1:bc:33:eb:3d:35:
                    48:06:cd:a1:2a:e0:a0:ef:fb:a9:ba:32:e8:71:21:
                    9f:eb:b5:b8:ea:c5:d0:16:77:30:05:9a:2e:a5:53:
                    4b:e8:87:fc:e8:30:86:39:d8:fd:eb:d6:61:43:9d:
                    4c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:89:16:FB:65:E4:41:15:C6:64:35:D2:56:0B:25:BB:99:4C:3B:68
            X509v3 Authority Key Identifier:
                keyid:6C:D0:AD:44:31:CC:22:17:50:D8:F2:C0:EC:9E:F3:05:43:B7:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/323830343a326264633a3630303a3a2f34302d3430203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bdc:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         b6:26:5c:d8:4f:b3:08:76:10:34:53:5e:b7:b7:94:9a:d4:aa:
         c9:dc:fa:2e:04:c2:28:df:9d:ae:9e:25:de:25:74:ad:7b:83:
         75:75:3e:f5:bd:77:8c:c7:f7:fb:76:72:8c:c6:37:da:9c:ad:
         be:99:85:a9:72:5e:56:9c:0a:f5:3a:f2:38:7a:de:ba:d0:2f:
         07:69:b9:d6:d1:f0:80:17:38:1c:40:d8:c9:a8:a0:09:5f:53:
         77:9e:18:39:88:c4:06:ad:60:be:e1:0d:5b:cd:29:15:06:67:
         8d:f5:e2:35:b6:9f:8c:72:37:1c:72:94:1e:d0:24:d6:be:80:
         53:9e:5c:e4:d7:52:c3:b9:0a:44:9f:bd:f2:db:be:bb:4c:33:
         b4:7b:7e:cc:3b:42:c9:b6:32:04:72:6a:2d:23:21:7d:5e:83:
         da:37:f3:ec:6e:f5:d2:0c:d1:72:4e:60:6f:a0:be:13:9f:95:
         b0:82:a7:4a:52:17:f8:1c:ff:d8:0d:c4:1f:e1:2f:d4:14:e7:
         fb:e3:b7:ee:4b:2f:12:1e:09:19:04:62:6e:20:8a:45:8c:3d:
         c5:04:8c:67:2a:43:78:06:95:b4:bb:07:4d:dc:25:f9:f1:29:
         97:6f:b8:2c:8c:ff:07:5c:01:f0:01:86:aa:83:32:de:3a:04:
         c3:0c:81:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 19:19:22 2024 by rpki-client on console-fra.rpki-client.org