Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/323830343a3634383a3138303a3138303a3a2f36342d3634203d3e203533303338.roa
File:                     323830343a3634383a3138303a3138303a3a2f36342d3634203d3e203533303338.roa (raw, json)
Hash identifier:          FEnl3iPUuzr1vPS+QX5TTmvH5ovlcY/WYyzlElws664=
Subject key identifier:   79:F6:DA:F3:4D:77:60:B0:B2:D5:E2:8C:A8:ED:39:84:19:C8:F4:55
Certificate issuer:       /CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
Certificate serial:       1C27E700E116E299EFCC19232416F08955D0A6C5
Authority key identifier: ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/323830343a3634383a3138303a3138303a3a2f36342d3634203d3e203533303338.roa
Signing time:             Thu 07 Nov 2024 04:05:38 +0000
ROA not before:           Thu 07 Nov 2024 04:00:38 +0000
ROA not after:            Thu 06 Nov 2025 04:05:38 +0000
asID:                     53038
IP address blocks:        2804:648:180:180::/64 maxlen: 64

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:27:e7:00:e1:16:e2:99:ef:cc:19:23:24:16:f0:89:55:d0:a6:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
        Validity
            Not Before: Nov  7 04:00:38 2024 GMT
            Not After : Nov  6 04:05:38 2025 GMT
        Subject: CN=79F6DAF34D7760B0B2D5E28CA8ED398419C8F455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:21:9c:89:ff:93:0f:aa:7a:66:7d:28:3f:cc:
                    fd:87:82:d9:0d:54:a9:6a:de:43:5a:e9:ab:f0:d1:
                    a7:c1:59:61:99:dc:1f:a1:ca:45:94:f4:37:05:d9:
                    45:94:ba:cd:4d:ed:30:4a:13:01:1b:75:0e:84:a6:
                    ff:fa:42:ab:6f:30:28:fd:7f:7d:82:03:7c:32:24:
                    85:5c:f4:64:34:ff:00:95:0a:a8:f8:4f:03:16:86:
                    9e:a0:da:b7:ae:d2:5f:cb:88:5a:04:da:19:08:ba:
                    26:c4:93:21:39:df:25:38:db:b1:9c:5f:62:d6:e7:
                    6b:95:d0:43:bc:63:66:f4:ff:14:9f:8f:b6:92:bb:
                    c1:fa:43:03:4b:90:69:7e:1d:f7:52:e5:88:e0:4e:
                    02:bd:a9:3c:79:1b:48:24:15:8d:90:81:5a:83:7c:
                    57:d9:64:fe:93:0c:4e:95:1d:e5:5f:7e:31:2a:cc:
                    88:9d:45:90:2d:f6:c6:f0:03:1e:d8:7c:93:f1:7e:
                    ea:3e:73:b0:f2:96:9d:ac:ed:f7:73:a1:92:8a:49:
                    ce:f1:44:12:66:db:74:e1:3c:e5:c1:66:64:99:0c:
                    bb:e2:fa:0a:90:2b:44:12:d6:27:a1:ae:98:49:81:
                    1c:20:6b:0f:0d:5c:29:d4:e0:9d:eb:fa:aa:d4:36:
                    a6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F6:DA:F3:4D:77:60:B0:B2:D5:E2:8C:A8:ED:39:84:19:C8:F4:55
            X509v3 Authority Key Identifier:
                keyid:ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/323830343a3634383a3138303a3138303a3a2f36342d3634203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:648:180:180::/64

    Signature Algorithm: sha256WithRSAEncryption
         b9:c5:5b:73:a7:b3:90:21:7a:bf:41:2d:7f:0c:b3:db:26:01:
         89:5b:1e:fd:f8:e1:cd:d2:db:b9:4b:52:6c:2d:14:f5:65:9c:
         d2:aa:54:ec:46:d6:f7:6f:9e:46:df:ec:59:7d:e0:29:81:94:
         33:30:39:40:f1:65:d7:b7:21:71:41:54:14:4f:12:6a:51:8e:
         27:e8:f9:6c:bc:a3:a0:5b:99:04:21:ab:6d:bb:26:1b:79:5a:
         d8:95:a1:70:ca:5c:d4:f9:68:17:d2:3d:ef:3a:f6:f2:7e:0a:
         df:a3:b2:37:f8:19:48:3c:26:8b:17:a1:12:6e:70:94:8e:7f:
         8d:a7:c7:4b:63:16:29:4a:60:7a:a4:ce:a8:96:fb:6f:51:1b:
         82:76:47:41:68:4c:7a:ed:78:ed:e9:01:05:94:9b:3d:ce:73:
         6b:cb:78:c2:f5:c2:dd:ba:4e:c4:c4:44:d0:77:41:21:28:3c:
         2a:55:78:77:a5:ee:12:53:ac:a0:18:6d:4d:25:de:0e:4f:a4:
         f7:6e:de:2e:40:0e:60:1a:c6:c0:bf:21:79:84:b4:e5:8d:b8:
         47:c4:5a:44:4d:0b:69:b4:a3:52:24:2b:80:37:dd:14:a5:3c:
         cf:80:cd:9a:de:78:db:68:09:a9:20:57:3c:48:69:8c:f0:21:
         37:3b:9f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 12:01:05 2024 by rpki-client on console-ams.rpki-client.org