Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/323830343a6364303a3a2f33322d3332203d3e203532353537.roa
File:                     323830343a6364303a3a2f33322d3332203d3e203532353537.roa (raw, json)
Hash identifier:          xul9vGKKW9JDOE0fUldvbs17jgZOlQj7pA7bYvqUq4M=
Subject key identifier:   2F:9F:C6:D6:8A:8B:41:BA:73:3B:A0:5A:86:36:51:E6:36:69:72:7D
Certificate issuer:       /CN=31A34383E0EDF59913E3F81F7606FE38AE7264F0
Certificate serial:       10EC682A942D3B883A10AD555A7F9CA4E318F7FD
Authority key identifier: 31:A3:43:83:E0:ED:F5:99:13:E3:F8:1F:76:06:FE:38:AE:72:64:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A34383E0EDF59913E3F81F7606FE38AE7264F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/323830343a6364303a3a2f33322d3332203d3e203532353537.roa
Signing time:             Mon 17 Jun 2024 14:59:15 +0000
ROA not before:           Mon 17 Jun 2024 14:54:15 +0000
ROA not after:            Mon 16 Jun 2025 14:59:15 +0000
asID:                     52557
IP address blocks:        2804:cd0::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ec:68:2a:94:2d:3b:88:3a:10:ad:55:5a:7f:9c:a4:e3:18:f7:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31A34383E0EDF59913E3F81F7606FE38AE7264F0
        Validity
            Not Before: Jun 17 14:54:15 2024 GMT
            Not After : Jun 16 14:59:15 2025 GMT
        Subject: CN=2F9FC6D68A8B41BA733BA05A863651E63669727D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:15:f8:02:56:ee:34:a3:08:74:69:8a:0b:09:
                    ed:57:75:67:65:63:b6:f6:b3:80:68:0a:04:67:d8:
                    e4:f1:cd:8e:b1:8f:28:43:a7:0f:95:76:df:e0:ad:
                    42:b8:14:75:e5:6d:a3:e1:eb:02:14:99:99:b9:ab:
                    6e:c1:55:40:ca:83:9f:26:90:6a:26:74:d1:24:03:
                    82:67:41:bf:47:11:c6:cf:cb:f3:92:b4:7c:9e:a7:
                    d4:d3:d8:13:81:9b:ac:6a:7f:1c:96:6d:34:f1:f9:
                    82:40:02:71:9c:23:05:f0:91:8b:21:ba:a4:f8:bd:
                    7c:46:72:70:83:c9:fb:79:a6:a7:8d:5d:3e:46:53:
                    db:cd:82:5d:bd:99:f5:a2:cc:ba:3c:b4:6d:50:04:
                    e5:e5:78:d9:24:69:07:97:af:84:b6:8f:54:2e:08:
                    20:b6:87:81:60:5d:70:f3:40:2e:f5:b0:f4:ee:fa:
                    7a:0a:a2:0d:37:fe:5a:9b:89:d7:d1:a2:fd:86:20:
                    21:9c:95:2b:1b:28:6c:93:77:2d:cd:5a:ee:1f:d8:
                    73:31:7f:49:94:8a:26:4e:8d:7c:a9:5c:ff:0b:ae:
                    2a:fa:62:df:11:c9:ff:58:83:f4:39:2d:2a:7b:00:
                    22:ea:73:8b:9e:6c:be:9e:9d:f0:01:94:f1:54:2e:
                    ab:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:9F:C6:D6:8A:8B:41:BA:73:3B:A0:5A:86:36:51:E6:36:69:72:7D
            X509v3 Authority Key Identifier:
                keyid:31:A3:43:83:E0:ED:F5:99:13:E3:F8:1F:76:06:FE:38:AE:72:64:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/31A34383E0EDF59913E3F81F7606FE38AE7264F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A34383E0EDF59913E3F81F7606FE38AE7264F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/323830343a6364303a3a2f33322d3332203d3e203532353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:f0:aa:fe:94:9d:d2:7d:3a:e3:5c:bd:53:e9:e6:79:00:b8:
         c9:4c:fa:81:9c:e1:51:3c:6f:06:be:a0:65:08:cb:eb:9b:ec:
         24:ae:50:ac:bb:ad:08:ff:32:a6:17:4c:69:a2:cb:df:a3:a1:
         86:b6:14:95:56:5b:d1:8b:59:4c:b1:eb:d1:96:3b:74:32:d4:
         08:04:2e:4c:9a:58:99:84:fb:c6:f7:8c:a2:0b:b2:d8:46:6e:
         83:99:48:19:02:38:9f:a2:3c:f4:81:e2:da:0b:61:0b:eb:cf:
         1d:1a:d3:af:37:c3:ea:bb:ca:0d:17:d7:3e:1e:41:c7:77:b1:
         4d:43:d0:33:1f:17:41:1b:15:84:86:4e:a8:16:4d:ce:45:a7:
         a3:38:42:b1:7e:6f:f7:fe:76:22:ed:8b:9d:0e:3a:a8:8d:ad:
         c4:48:fc:34:ee:3f:de:d8:f3:76:f2:92:1b:3a:f3:22:3a:dc:
         2c:d6:eb:57:35:5f:7c:68:7d:bf:1d:94:6a:95:86:24:7b:07:
         07:c9:4d:64:b7:02:60:27:4a:da:9e:d7:0e:53:ca:57:1d:7f:
         9a:62:ab:a9:e7:44:69:04:3f:67:19:37:c1:60:bf:31:ef:7a:
         8d:8a:26:21:ff:be:66:7e:0a:06:37:96:54:46:e3:86:27:f6:
         21:0e:de:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 13:04:10 2024 by rpki-client on console-ams.rpki-client.org