Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/1/323830343a386135633a383030303a3a2f33332d3333203d3e20323733363634.roa
File:                     323830343a386135633a383030303a3a2f33332d3333203d3e20323733363634.roa (raw, json)
Hash identifier:          83mfJ2IIFdlCXUVqyu7/OWtujPbDcKGe5eLcd1XzV9g=
Subject key identifier:   95:C2:81:96:F0:D3:E9:E6:F0:D5:66:DC:46:DD:33:B2:0C:B6:76:2C
Certificate issuer:       /CN=0828022EEE25F9CBEBDFA747163E4895F108A427
Certificate serial:       5C6D4EC626225779DDE28A5BB22DBCEA117818A3
Authority key identifier: 08:28:02:2E:EE:25:F9:CB:EB:DF:A7:47:16:3E:48:95:F1:08:A4:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0828022EEE25F9CBEBDFA747163E4895F108A427.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/1/323830343a386135633a383030303a3a2f33332d3333203d3e20323733363634.roa
Signing time:             Thu 04 Apr 2024 16:43:18 +0000
ROA not before:           Thu 04 Apr 2024 16:38:18 +0000
ROA not after:            Thu 03 Apr 2025 16:43:18 +0000
asID:                     273664
IP address blocks:        2804:8a5c:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6d:4e:c6:26:22:57:79:dd:e2:8a:5b:b2:2d:bc:ea:11:78:18:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0828022EEE25F9CBEBDFA747163E4895F108A427
        Validity
            Not Before: Apr  4 16:38:18 2024 GMT
            Not After : Apr  3 16:43:18 2025 GMT
        Subject: CN=95C28196F0D3E9E6F0D566DC46DD33B20CB6762C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:28:0f:9e:3a:64:81:40:b1:40:6f:3a:17:85:
                    52:ee:ed:b9:f5:e6:1c:2e:e0:00:d3:16:d0:51:72:
                    a1:fa:de:bc:60:b7:a1:60:3e:4e:50:8a:f4:9c:10:
                    f2:71:54:2a:46:d7:d3:5b:e3:86:e9:be:3e:ab:58:
                    43:9c:11:0d:5d:11:4a:4b:31:93:f4:ee:16:8f:51:
                    84:e0:11:1a:01:f2:03:c1:51:fc:12:aa:4d:d8:86:
                    9b:1c:cd:82:1b:ac:44:26:db:f9:46:5b:f1:3f:e9:
                    0c:c6:44:9f:18:8f:cc:f8:d5:17:cb:cd:eb:07:f9:
                    43:2a:86:47:e8:d1:84:c0:e1:26:d5:68:a4:e9:eb:
                    d2:5f:59:64:5f:43:13:ae:4b:b5:d7:6e:8b:89:af:
                    53:97:51:e5:00:46:f1:96:da:d8:22:3b:d1:bf:45:
                    9a:99:98:c9:b6:f2:18:97:af:fd:48:67:48:db:f0:
                    1f:3e:3f:d0:f8:26:02:b7:ec:a4:34:af:e9:a9:66:
                    bc:1e:cf:05:6b:2f:ff:49:be:52:7c:6a:cd:ff:67:
                    23:44:cb:04:b6:a5:ef:7c:18:36:d0:0e:d8:1d:2f:
                    75:4c:28:7e:3c:f8:26:e6:25:ed:4e:e6:f4:b0:f6:
                    ad:f0:af:48:30:52:b5:13:f0:82:11:6c:95:51:f9:
                    f3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C2:81:96:F0:D3:E9:E6:F0:D5:66:DC:46:DD:33:B2:0C:B6:76:2C
            X509v3 Authority Key Identifier:
                keyid:08:28:02:2E:EE:25:F9:CB:EB:DF:A7:47:16:3E:48:95:F1:08:A4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/1/0828022EEE25F9CBEBDFA747163E4895F108A427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0828022EEE25F9CBEBDFA747163E4895F108A427.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/1/323830343a386135633a383030303a3a2f33332d3333203d3e20323733363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a5c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         30:2e:2c:94:4c:3d:f6:c0:42:4d:fa:46:c8:09:b8:a0:ca:4e:
         60:02:e1:e4:8e:88:9d:08:ee:4c:ae:0a:f8:26:1e:fc:ee:d4:
         08:c1:54:72:16:09:5f:4a:57:47:77:1a:a5:c2:45:d4:94:54:
         11:9c:52:21:16:4b:3a:ec:3e:b6:b8:89:cb:9c:94:03:67:f1:
         b6:8b:99:be:0e:e7:83:42:58:00:e5:d8:66:c0:22:be:0b:94:
         81:74:d1:8c:cd:c3:c7:bb:bc:70:20:bf:8f:07:97:94:05:33:
         13:52:cc:64:fc:ab:51:f8:d8:1b:7f:dc:77:90:ff:6b:90:58:
         b7:10:87:fe:fb:12:ff:3b:00:2e:6c:e6:6b:e4:ea:a6:0c:40:
         95:24:9a:36:f1:fd:dd:21:7c:f6:03:f4:3c:21:67:a5:48:82:
         f8:db:2b:4b:b9:b9:e2:f0:e6:9f:a5:f6:64:86:66:24:72:b4:
         ce:36:d6:92:a1:d0:bb:f8:88:ee:eb:90:97:b1:4c:69:30:cd:
         a3:c4:24:2b:39:06:7b:5a:08:be:7e:f6:8e:22:e2:eb:2a:a2:
         9d:78:e9:2a:db:bc:22:6e:f1:b3:b8:cb:91:0f:f0:3e:54:03:
         02:2f:70:52:b0:06:e7:c8:ba:42:46:75:65:d6:bc:de:7a:26:
         02:37:3f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 00:42:17 2024 by rpki-client on console-ams.rpki-client.org