Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9praPEZ33c2VJUb1heRV84KzUxz6bac9Y2q4AZejJo63/1/323830343a356365303a3a2f33322d313238203d3e20323638393336.roa
File:                     323830343a356365303a3a2f33322d313238203d3e20323638393336.roa (raw, json)
Hash identifier:          TknChNhBxXskujiGW4d/Tlxer9K6d/g+ImNS5+xK4JU=
Subject key identifier:   BC:47:3D:7F:3D:92:29:4F:DE:85:BB:4E:F7:96:51:DC:F9:51:57:07
Certificate issuer:       /CN=CC74D7FFEDD22B464590B8FA9A13BF3AA1AE1223
Certificate serial:       498CA8AF1A218EC49735B139CD0273E52692AB3F
Authority key identifier: CC:74:D7:FF:ED:D2:2B:46:45:90:B8:FA:9A:13:BF:3A:A1:AE:12:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC74D7FFEDD22B464590B8FA9A13BF3AA1AE1223.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9praPEZ33c2VJUb1heRV84KzUxz6bac9Y2q4AZejJo63/1/323830343a356365303a3a2f33322d313238203d3e20323638393336.roa
Signing time:             Thu 04 Apr 2024 07:59:40 +0000
ROA not before:           Thu 04 Apr 2024 07:54:40 +0000
ROA not after:            Thu 03 Apr 2025 07:59:40 +0000
asID:                     268936
IP address blocks:        2804:5ce0::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:8c:a8:af:1a:21:8e:c4:97:35:b1:39:cd:02:73:e5:26:92:ab:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC74D7FFEDD22B464590B8FA9A13BF3AA1AE1223
        Validity
            Not Before: Apr  4 07:54:40 2024 GMT
            Not After : Apr  3 07:59:40 2025 GMT
        Subject: CN=BC473D7F3D92294FDE85BB4EF79651DCF9515707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cc:b7:a7:d1:94:aa:eb:d4:c0:9c:c6:bb:4d:
                    52:98:c9:db:4f:39:6a:ba:23:6e:c6:e6:45:e7:ce:
                    5c:64:1f:b5:ea:f2:6a:c4:40:d1:4d:c7:4c:01:1a:
                    0c:6f:e6:21:8a:12:8f:ab:1a:34:b7:01:e2:59:fc:
                    6b:99:56:8f:85:71:30:21:50:c6:88:83:58:6d:10:
                    71:49:af:09:a1:b0:17:fd:f7:94:70:8d:c2:0d:68:
                    a1:d9:db:a0:83:76:c6:cf:e9:3a:49:81:2c:1f:fd:
                    d1:be:cd:56:70:10:68:58:22:9c:2a:63:93:3c:34:
                    49:7e:18:53:34:b3:9d:49:a3:3e:43:32:62:c4:dc:
                    d7:ce:c7:5c:b6:33:3b:2a:6a:ff:57:2a:0e:19:e6:
                    0b:9a:34:f3:e2:ff:0b:63:f1:e2:df:dc:c0:d0:2a:
                    74:5b:82:bf:7d:31:e7:98:3f:70:f2:f4:74:89:0a:
                    98:bf:6e:81:d0:0d:a5:6f:69:3d:f1:69:c3:bb:52:
                    77:8e:8c:2e:f5:60:b3:1b:9d:a8:f4:8f:fd:74:20:
                    2c:c7:3f:8a:dd:80:58:2d:cd:5b:29:ea:1b:4c:d4:
                    08:49:c9:ae:f9:74:02:8c:e1:7a:fc:3b:e6:1f:24:
                    7a:20:2d:d3:da:bd:1e:8d:3d:26:73:6b:0d:f2:81:
                    56:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:47:3D:7F:3D:92:29:4F:DE:85:BB:4E:F7:96:51:DC:F9:51:57:07
            X509v3 Authority Key Identifier:
                keyid:CC:74:D7:FF:ED:D2:2B:46:45:90:B8:FA:9A:13:BF:3A:A1:AE:12:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9praPEZ33c2VJUb1heRV84KzUxz6bac9Y2q4AZejJo63/1/CC74D7FFEDD22B464590B8FA9A13BF3AA1AE1223.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC74D7FFEDD22B464590B8FA9A13BF3AA1AE1223.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9praPEZ33c2VJUb1heRV84KzUxz6bac9Y2q4AZejJo63/1/323830343a356365303a3a2f33322d313238203d3e20323638393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:1f:c6:55:06:4a:ea:44:72:bf:cf:7f:b5:4e:a3:59:bf:a2:
         67:0f:c4:3d:7f:53:bb:5e:ce:34:7b:57:01:85:29:22:88:41:
         cb:40:53:87:9e:8a:a7:75:d9:e9:23:73:eb:be:24:af:5f:63:
         29:f3:47:d0:e4:7e:7a:ff:4e:de:e3:77:90:b6:e4:bf:00:4e:
         ae:93:9d:3e:e0:7c:2a:bd:a1:7a:cf:bc:7b:56:c0:a2:8d:df:
         bc:6e:9e:ad:33:22:bb:c7:78:5e:15:29:d1:f2:33:a1:ba:ba:
         04:91:69:a9:21:d8:8e:f0:29:cc:6c:9a:bc:7a:3a:da:22:29:
         0a:0e:a2:11:5b:9e:44:3f:d7:41:d9:30:d4:1b:c7:01:ab:7f:
         ba:77:a2:d2:87:b8:00:7e:62:6d:1e:ae:14:bd:1a:14:c2:bd:
         f9:96:b8:aa:a9:be:b1:e6:24:35:68:a5:f2:70:4a:22:32:be:
         8b:a9:98:4b:40:fd:e1:3e:6d:5c:8c:e8:ca:88:ba:11:11:50:
         24:08:45:1b:6a:71:46:88:df:a2:45:48:c0:cf:bf:4e:e7:cf:
         36:e1:e9:a5:8b:05:62:fb:10:5d:a0:06:82:79:00:2b:0d:30:
         0a:d6:a7:6b:77:d4:02:10:d5:90:65:ff:52:fc:98:fe:a6:e9:
         0a:d7:b4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 16:34:25 2024 by rpki-client on console-ams.rpki-client.org