Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/323830343a376461343a3a2f33342d3334203d3e203631363035.roa
File:                     323830343a376461343a3a2f33342d3334203d3e203631363035.roa (raw, json)
Hash identifier:          Zf37AWCa+T1dVD8mzRfngqLTNP2zZEvj1Wv2Q7rPGoE=
Subject key identifier:   97:AE:B5:9B:99:B7:EF:F4:B5:B4:55:D8:2B:C0:64:BF:1C:AC:5E:04
Certificate issuer:       /CN=95A9B935AF7391D649D034160A7150D2138ECFBC
Certificate serial:       1B19F0B80009C1418090065A3768F9AF1EB24634
Authority key identifier: 95:A9:B9:35:AF:73:91:D6:49:D0:34:16:0A:71:50:D2:13:8E:CF:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95A9B935AF7391D649D034160A7150D2138ECFBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/323830343a376461343a3a2f33342d3334203d3e203631363035.roa
Signing time:             Wed 23 Oct 2024 18:55:35 +0000
ROA not before:           Wed 23 Oct 2024 18:50:35 +0000
ROA not after:            Wed 22 Oct 2025 18:55:35 +0000
asID:                     61605
IP address blocks:        2804:7da4::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:19:f0:b8:00:09:c1:41:80:90:06:5a:37:68:f9:af:1e:b2:46:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95A9B935AF7391D649D034160A7150D2138ECFBC
        Validity
            Not Before: Oct 23 18:50:35 2024 GMT
            Not After : Oct 22 18:55:35 2025 GMT
        Subject: CN=97AEB59B99B7EFF4B5B455D82BC064BF1CAC5E04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bd:58:59:49:a9:1f:13:cb:0a:9f:8b:2c:65:
                    e6:3d:92:e4:75:49:87:66:eb:76:75:7d:8f:97:24:
                    5c:06:0c:77:80:4c:6e:b7:44:48:34:56:d8:38:33:
                    4e:1b:94:18:81:d6:99:52:30:ee:e8:ff:7b:f4:ed:
                    c1:7f:bd:c4:39:9e:5c:3c:d6:ee:ad:67:6d:91:9f:
                    c6:61:ee:33:05:23:4f:bf:04:19:0a:5d:44:65:d2:
                    05:1e:ea:e7:69:dc:40:c8:04:5c:9b:74:ab:a0:28:
                    e0:45:1b:45:d8:1f:c3:48:c6:f5:56:c1:63:9f:b2:
                    41:13:45:da:05:86:91:c3:14:fe:dd:c3:eb:2e:6d:
                    64:8c:da:53:88:e3:04:81:70:9c:ae:80:2a:ee:5b:
                    b8:f6:95:f1:b9:c8:ac:30:d1:ab:3e:f1:5f:cd:03:
                    55:db:d2:3d:9b:19:75:bb:1f:28:71:3f:0f:41:20:
                    69:08:4c:24:c7:ce:4e:93:d6:e3:75:5f:18:64:01:
                    db:89:75:b5:9a:7b:06:24:dd:bc:ef:c5:3d:f4:2c:
                    93:d4:6e:6e:52:1d:c4:44:26:65:ac:cc:8a:76:a9:
                    49:f7:2e:35:d1:2f:61:d8:23:6f:5a:4a:1d:8c:4c:
                    b9:e8:4e:df:9d:61:04:25:be:2f:32:34:67:1f:18:
                    84:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AE:B5:9B:99:B7:EF:F4:B5:B4:55:D8:2B:C0:64:BF:1C:AC:5E:04
            X509v3 Authority Key Identifier:
                keyid:95:A9:B9:35:AF:73:91:D6:49:D0:34:16:0A:71:50:D2:13:8E:CF:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/95A9B935AF7391D649D034160A7150D2138ECFBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95A9B935AF7391D649D034160A7150D2138ECFBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/323830343a376461343a3a2f33342d3334203d3e203631363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7da4::/34

    Signature Algorithm: sha256WithRSAEncryption
         c0:d1:42:a2:95:76:d5:61:69:08:5b:68:eb:da:50:f9:9a:d2:
         ba:08:cc:63:a4:0b:f8:b8:b9:14:86:0b:d4:fc:1f:b1:da:e8:
         ec:86:45:f3:e3:9a:65:f8:9c:07:d8:fc:c6:eb:a4:97:ea:0e:
         fc:a6:f4:4d:bc:e9:1a:d0:c4:a3:23:fb:d5:90:43:a7:f5:46:
         01:1d:52:8a:77:0d:9c:fa:66:17:e1:d5:16:49:6a:e8:85:a5:
         84:a0:f5:2b:15:ad:db:07:c3:0e:56:6c:b3:3c:c4:a0:22:46:
         9f:90:1e:b8:3e:e2:c9:75:a0:b5:77:4e:c8:f2:53:4f:78:1c:
         ef:6f:f6:51:de:f5:31:4c:e4:1d:72:a8:9d:4a:c7:0d:6b:c9:
         39:b8:ce:38:74:79:d3:cf:75:f4:e0:50:27:2f:c6:97:2d:b0:
         2c:31:1b:48:9f:1a:47:5b:93:c4:a4:ef:5a:3e:ad:63:8e:0d:
         71:d0:ff:ad:9d:12:99:9b:29:93:e3:9f:1a:dd:55:5e:9e:8d:
         c0:b5:a3:b5:9b:e4:21:f9:45:9a:65:c1:70:0f:7d:41:1b:79:
         9d:eb:12:d3:50:76:1b:a4:a4:28:9f:67:3f:80:c7:56:bd:80:
         47:61:d9:6d:61:73:bb:8e:1e:e1:9e:cd:7a:dc:af:0b:23:db:
         79:5b:5e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 02:25:50 2024 by rpki-client on console-fra.rpki-client.org