Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/323830343a6364303a3a2f33332d3333203d3e203532353537.roa
File:                     323830343a6364303a3a2f33332d3333203d3e203532353537.roa (raw, json)
Hash identifier:          r/sCZ6A53xrEQQU9Cu3MpeIL4ehde0wVIv+r344geSA=
Subject key identifier:   0B:29:F2:AF:23:8E:E6:B8:D4:A7:4A:BD:DB:07:13:6F:82:23:95:73
Certificate issuer:       /CN=31A34383E0EDF59913E3F81F7606FE38AE7264F0
Certificate serial:       5BE55E90BC9A7E0B33A3606FDA0A4818DD5C0870
Authority key identifier: 31:A3:43:83:E0:ED:F5:99:13:E3:F8:1F:76:06:FE:38:AE:72:64:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A34383E0EDF59913E3F81F7606FE38AE7264F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/323830343a6364303a3a2f33332d3333203d3e203532353537.roa
Signing time:             Mon 17 Jun 2024 14:59:14 +0000
ROA not before:           Mon 17 Jun 2024 14:54:14 +0000
ROA not after:            Mon 16 Jun 2025 14:59:14 +0000
asID:                     52557
IP address blocks:        2804:cd0::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e5:5e:90:bc:9a:7e:0b:33:a3:60:6f:da:0a:48:18:dd:5c:08:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31A34383E0EDF59913E3F81F7606FE38AE7264F0
        Validity
            Not Before: Jun 17 14:54:14 2024 GMT
            Not After : Jun 16 14:59:14 2025 GMT
        Subject: CN=0B29F2AF238EE6B8D4A74ABDDB07136F82239573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d7:a9:cb:b9:3c:40:f0:fd:bc:13:50:52:fd:
                    77:6b:86:5f:09:0e:e0:8f:b0:ed:ed:34:18:7b:11:
                    e8:04:7d:16:04:c2:ea:e6:0c:0c:26:73:59:47:d2:
                    b3:0f:13:a8:fb:e2:2f:8a:c7:67:d8:98:1f:ea:ff:
                    d6:ea:1c:2b:a7:09:6e:cb:7e:8c:61:8f:6b:16:ef:
                    ab:ff:08:ce:c7:3b:95:c8:75:4f:8a:76:77:45:9f:
                    e6:68:7b:18:9f:12:d6:e1:0a:20:a1:2e:44:d7:dc:
                    c2:83:c2:d5:89:0e:f8:f9:6d:d0:12:e3:80:11:da:
                    8c:87:dd:23:d0:13:e9:90:61:4f:c2:c7:ba:f7:86:
                    25:f8:f1:bd:22:24:80:a9:35:d6:1c:2d:91:e0:4d:
                    ea:36:ee:e7:33:ff:2d:dd:96:a0:6d:e9:9a:e8:ed:
                    9b:58:d5:ae:a5:bf:b1:b7:a8:00:19:a9:3c:71:a1:
                    e3:2b:54:89:c2:48:4b:2f:7d:e2:e3:09:77:27:37:
                    89:46:dc:b0:08:81:c1:f5:8d:51:76:e7:56:f8:30:
                    be:43:3b:cd:89:2b:67:ae:68:be:a2:81:90:ea:76:
                    68:f1:ea:0a:21:20:43:62:52:02:cf:e4:d9:e4:91:
                    51:4e:93:61:41:32:5c:26:5b:a5:10:61:e4:3d:74:
                    13:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:29:F2:AF:23:8E:E6:B8:D4:A7:4A:BD:DB:07:13:6F:82:23:95:73
            X509v3 Authority Key Identifier:
                keyid:31:A3:43:83:E0:ED:F5:99:13:E3:F8:1F:76:06:FE:38:AE:72:64:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/31A34383E0EDF59913E3F81F7606FE38AE7264F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A34383E0EDF59913E3F81F7606FE38AE7264F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/323830343a6364303a3a2f33332d3333203d3e203532353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cd0::/33

    Signature Algorithm: sha256WithRSAEncryption
         a2:dd:34:71:26:e8:c0:90:59:9e:57:51:30:18:e1:3e:93:a8:
         cb:c2:85:6c:47:82:d7:a1:dd:27:9e:58:38:a1:7a:2e:8d:d0:
         d7:9e:84:6f:ae:95:68:ed:ef:da:2c:3f:c5:d5:2e:0c:c4:87:
         93:4d:2c:11:1d:99:4c:e0:81:d7:da:13:e8:f8:20:a4:2e:5d:
         5d:66:7f:ea:f3:fd:df:b5:fd:e1:e9:39:64:bb:dc:75:e7:50:
         87:e4:15:8b:8d:b8:7f:9c:d0:7e:91:b5:ed:8b:be:d4:04:8a:
         a4:6d:d2:2e:0a:02:6f:e8:ea:84:6f:eb:89:c0:09:39:04:5c:
         01:4e:d2:8d:5b:dd:c8:57:a4:cd:9c:5e:98:a4:fc:f0:2c:50:
         b6:8c:b0:e9:02:8a:e3:56:75:75:9b:06:75:74:17:33:b8:85:
         71:75:ec:5b:f4:dc:e2:2a:c3:3d:a1:cc:9e:fd:0a:37:97:18:
         9b:81:ef:0d:e7:ee:d8:47:ce:99:27:98:b1:7c:b3:7b:95:47:
         fa:31:b8:da:17:01:29:63:05:51:a7:6d:c4:57:a6:ea:85:93:
         a4:19:6c:49:c1:91:51:17:cd:6e:94:a5:7a:d4:1a:4a:98:a1:
         5c:12:0b:b9:1e:14:37:7f:64:6e:4a:7a:c9:71:20:26:26:fb:
         c3:2c:40:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 13:03:13 2024 by rpki-client on console-fra.rpki-client.org