Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/1/323830343a353130633a3a2f33322d3332203d3e203631353934.roa
File:                     323830343a353130633a3a2f33322d3332203d3e203631353934.roa (raw, json)
Hash identifier:          PzhWLEZisDul5bnx6v0XPJ7Gc15boTnzi/UV49j/gf8=
Subject key identifier:   A9:D6:D2:0A:3F:73:0D:DD:FD:DB:61:43:16:24:B4:B5:A8:56:51:DE
Certificate issuer:       /CN=8F22D0F09007A0AB362AFC115EFAF686F131E2E3
Certificate serial:       6428681D231E6F1B9FDF29F1FB9B51242BB50CBE
Authority key identifier: 8F:22:D0:F0:90:07:A0:AB:36:2A:FC:11:5E:FA:F6:86:F1:31:E2:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F22D0F09007A0AB362AFC115EFAF686F131E2E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/1/323830343a353130633a3a2f33322d3332203d3e203631353934.roa
Signing time:             Thu 04 Apr 2024 01:48:24 +0000
ROA not before:           Thu 04 Apr 2024 01:43:24 +0000
ROA not after:            Thu 03 Apr 2025 01:48:24 +0000
asID:                     61594
IP address blocks:        2804:510c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:28:68:1d:23:1e:6f:1b:9f:df:29:f1:fb:9b:51:24:2b:b5:0c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F22D0F09007A0AB362AFC115EFAF686F131E2E3
        Validity
            Not Before: Apr  4 01:43:24 2024 GMT
            Not After : Apr  3 01:48:24 2025 GMT
        Subject: CN=A9D6D20A3F730DDDFDDB61431624B4B5A85651DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:07:2b:40:ed:0a:1d:a7:e8:76:02:0d:a1:
                    f8:bf:a3:ab:db:46:6d:13:19:20:3a:9a:83:2b:07:
                    1c:13:1f:81:b1:31:ba:36:38:e7:93:59:7e:69:0f:
                    c2:1d:e6:d1:70:3c:25:0d:1d:ce:df:c9:7c:c3:83:
                    2f:54:4f:7b:30:d7:0a:b9:d8:9c:d9:91:c6:b5:4d:
                    fe:a4:7b:fb:65:98:d7:44:bd:11:8f:d1:c1:ce:95:
                    c0:04:bd:2a:12:9f:76:3a:38:a4:49:ad:78:b4:76:
                    93:d2:24:15:9f:83:10:db:3f:d1:f2:9b:a4:c0:9a:
                    b0:3f:4d:61:27:fc:1a:8e:6d:26:4a:8a:a4:4b:9f:
                    ce:2b:9f:bf:ce:bb:ba:4c:9f:f9:a4:b5:05:3f:6c:
                    d0:7e:a7:2a:7c:75:81:be:ef:e7:96:d0:3a:fe:f5:
                    a0:46:aa:d2:99:c9:73:f2:c8:48:47:ec:01:a9:57:
                    f2:d6:96:27:32:d2:40:3e:2b:71:97:d9:a8:31:97:
                    44:45:66:0e:ee:b9:a9:82:13:f0:a4:fd:65:1e:46:
                    c9:72:3c:29:0a:c7:84:18:67:da:5c:ed:39:91:3e:
                    9c:37:23:85:96:aa:5d:58:99:91:aa:7d:b2:e7:ca:
                    04:ae:bc:64:cc:f5:a8:fe:d7:00:65:b2:70:31:cd:
                    bc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D6:D2:0A:3F:73:0D:DD:FD:DB:61:43:16:24:B4:B5:A8:56:51:DE
            X509v3 Authority Key Identifier:
                keyid:8F:22:D0:F0:90:07:A0:AB:36:2A:FC:11:5E:FA:F6:86:F1:31:E2:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/1/8F22D0F09007A0AB362AFC115EFAF686F131E2E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F22D0F09007A0AB362AFC115EFAF686F131E2E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/1/323830343a353130633a3a2f33322d3332203d3e203631353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:510c::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:ce:89:fd:2c:c7:c2:1a:07:56:20:10:80:98:68:d1:f9:b5:
         e1:f5:72:8c:9f:4e:f6:6e:25:63:9e:cc:78:58:90:23:22:92:
         b6:e3:38:83:07:02:3c:4f:e1:3c:48:3f:ad:2d:e4:09:1b:4e:
         d1:9c:50:9e:8c:9a:dd:35:7f:11:70:cf:1c:fd:91:6b:02:fa:
         22:99:61:8d:b2:a7:78:de:cb:8f:37:06:b1:4c:19:d3:91:a3:
         67:1d:55:69:7f:0a:b8:84:05:09:94:c3:d0:e8:fa:d4:14:8b:
         b5:7d:29:12:d1:68:da:b2:49:15:59:0e:83:11:d1:43:fc:88:
         2b:02:fa:86:89:e1:b5:62:7e:eb:08:25:fc:f4:55:e5:79:45:
         03:44:b1:1a:4a:d1:9d:f7:04:b2:7d:fe:ba:2b:8c:d5:8d:09:
         c7:18:c3:31:ad:43:f7:ac:6c:0c:5f:d9:dd:17:9f:20:c1:87:
         1c:bc:2a:74:99:1d:e8:eb:86:55:42:84:6f:1a:a4:32:b3:d0:
         4a:cd:26:08:7f:14:0f:5d:61:97:da:f5:9b:10:fc:af:8c:d9:
         81:cd:17:95:0a:41:03:d6:ba:0a:63:38:9f:b3:fd:da:aa:1a:
         87:1c:3d:20:ce:62:9e:c6:bc:cc:de:f2:7b:dd:cc:2d:c8:e5:
         38:ba:aa:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 01:19:32 2024 by rpki-client on console-fra.rpki-client.org