Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iLqf64dAM1wQ6tEEcProPnPKpK86ZSr1icdqAwuZJaS/0/323830343a353834383a363533323a3a2f34382d3438203d3e20323638313139.roa
File:                     323830343a353834383a363533323a3a2f34382d3438203d3e20323638313139.roa (raw, json)
Hash identifier:          BhCGeDF4Qk5tYdJC6O0cPzUZfeZ3KdK9uZBh5wYRnqw=
Subject key identifier:   7F:48:05:AF:AE:6A:44:50:B8:34:19:B5:33:20:D9:51:AC:7C:D6:EA
Certificate issuer:       /CN=05F9FA82E6DC844616C6E65830AA93270618DA3A
Certificate serial:       466C681057E61228B289DBD7B22BD8EB093A8B81
Authority key identifier: 05:F9:FA:82:E6:DC:84:46:16:C6:E6:58:30:AA:93:27:06:18:DA:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05F9FA82E6DC844616C6E65830AA93270618DA3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iLqf64dAM1wQ6tEEcProPnPKpK86ZSr1icdqAwuZJaS/0/323830343a353834383a363533323a3a2f34382d3438203d3e20323638313139.roa
Signing time:             Wed 29 May 2024 14:37:57 +0000
ROA not before:           Wed 29 May 2024 14:32:57 +0000
ROA not after:            Wed 28 May 2025 14:37:57 +0000
asID:                     268119
IP address blocks:        2804:5848:6532::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:6c:68:10:57:e6:12:28:b2:89:db:d7:b2:2b:d8:eb:09:3a:8b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05F9FA82E6DC844616C6E65830AA93270618DA3A
        Validity
            Not Before: May 29 14:32:57 2024 GMT
            Not After : May 28 14:37:57 2025 GMT
        Subject: CN=7F4805AFAE6A4450B83419B53320D951AC7CD6EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:da:31:a3:18:3d:b5:41:c7:c1:9f:00:88:2c:
                    b9:38:53:cd:cb:90:83:8f:6b:73:10:e9:a5:45:a5:
                    8f:45:d3:08:3e:6d:9d:85:69:60:1f:b8:dd:48:a1:
                    7f:70:97:67:f9:39:29:c2:29:de:46:66:4f:bc:ba:
                    b6:52:62:37:b4:77:69:8b:58:fb:82:e1:22:bb:90:
                    f0:80:77:73:eb:c3:5c:4d:73:e6:80:df:f5:d1:88:
                    d1:eb:b4:39:d2:d4:5f:99:68:c1:90:3a:34:17:0c:
                    14:e6:1e:eb:bf:9e:c9:8e:e0:8f:96:85:0c:17:43:
                    f1:b5:83:3b:c6:77:e0:d6:96:9c:ab:f1:d3:7b:e9:
                    ed:5c:1d:18:3e:5a:fd:4f:6b:db:ee:1d:5a:ca:f0:
                    ce:33:8d:f1:4b:d4:c6:13:d3:06:7e:37:df:7b:bd:
                    f2:2f:03:71:2a:5e:c7:4a:5d:40:e4:c3:2b:45:68:
                    58:0f:95:3a:35:fa:6f:87:29:8c:7f:c5:3c:cc:a6:
                    90:b8:6f:87:03:d0:08:c6:34:ee:e9:cb:0a:ed:d5:
                    ab:dd:83:a1:32:12:67:01:8f:aa:2d:04:04:f0:63:
                    eb:0f:2c:d9:54:bf:3b:d8:8d:a4:4e:0e:d8:52:e9:
                    83:c1:c1:4c:72:d4:52:fd:b9:a3:d2:6a:78:20:26:
                    41:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:48:05:AF:AE:6A:44:50:B8:34:19:B5:33:20:D9:51:AC:7C:D6:EA
            X509v3 Authority Key Identifier:
                keyid:05:F9:FA:82:E6:DC:84:46:16:C6:E6:58:30:AA:93:27:06:18:DA:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iLqf64dAM1wQ6tEEcProPnPKpK86ZSr1icdqAwuZJaS/0/05F9FA82E6DC844616C6E65830AA93270618DA3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05F9FA82E6DC844616C6E65830AA93270618DA3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iLqf64dAM1wQ6tEEcProPnPKpK86ZSr1icdqAwuZJaS/0/323830343a353834383a363533323a3a2f34382d3438203d3e20323638313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5848:6532::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:29:9e:7c:dd:f8:ac:13:18:7d:c0:f4:c0:97:62:8a:f2:fc:
         4b:1c:5e:2f:1e:40:9d:34:e8:c2:ee:c5:02:41:4f:43:60:f8:
         31:95:cb:cd:7d:cf:d9:47:3d:38:59:27:17:6c:3f:e3:dc:63:
         bd:34:de:cd:47:63:bf:b4:c5:85:60:c8:92:3b:50:38:1d:8d:
         48:d3:fa:29:51:ae:95:77:67:9a:f4:49:1c:00:b2:c5:a1:67:
         4d:e6:9f:3a:a0:b4:89:dd:db:fb:84:95:8d:44:4e:08:eb:78:
         5f:23:a7:da:58:a0:32:09:15:c1:42:6b:46:e0:ea:65:cb:eb:
         b4:65:29:aa:1e:24:79:94:90:35:f2:46:ac:a6:f9:9c:3f:27:
         ae:46:04:a7:84:18:ae:b0:6b:be:b6:41:93:c4:77:61:62:57:
         5d:a5:3d:fd:37:c3:24:d5:35:36:70:67:a2:50:11:d5:45:08:
         df:51:f5:8c:eb:eb:c9:95:b0:40:56:3d:1b:c5:1f:f0:5c:50:
         79:00:7c:a4:17:65:33:d2:b9:6a:01:ec:79:ad:74:af:f1:a9:
         a6:f7:47:72:ca:30:ab:f7:39:ca:c1:6d:f0:73:07:02:1b:5a:
         e3:1e:c1:fe:ea:81:f6:a7:55:8a:9f:79:f6:c7:a5:c3:06:d0:
         01:54:e3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 05:50:12 2024 by rpki-client on console-fra.rpki-client.org