Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/323830343a363665633a626562613a3a2f34382d3438203d3e20323639353931.roa
File:                     323830343a363665633a626562613a3a2f34382d3438203d3e20323639353931.roa (raw, json)
Hash identifier:          VkwMMEPrH65B/H4JSEp8UFV7Xca87zGQt0BuFUXK9Mg=
Subject key identifier:   22:8D:F3:40:A6:78:B4:C0:B7:5C:55:18:EC:73:75:68:FE:BB:1B:CB
Certificate issuer:       /CN=EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5
Certificate serial:       317AC8424137EEFC73CBA37E714EF9B0B3B6486E
Authority key identifier: EB:CA:FF:AF:2E:D6:05:A2:31:21:70:67:6A:8A:1D:BA:F0:37:DB:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/323830343a363665633a626562613a3a2f34382d3438203d3e20323639353931.roa
Signing time:             Tue 14 May 2024 11:54:08 +0000
ROA not before:           Tue 14 May 2024 11:49:08 +0000
ROA not after:            Tue 13 May 2025 11:54:08 +0000
asID:                     269591
IP address blocks:        2804:66ec:beba::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7a:c8:42:41:37:ee:fc:73:cb:a3:7e:71:4e:f9:b0:b3:b6:48:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5
        Validity
            Not Before: May 14 11:49:08 2024 GMT
            Not After : May 13 11:54:08 2025 GMT
        Subject: CN=228DF340A678B4C0B75C5518EC737568FEBB1BCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1f:10:7e:3c:8f:bb:91:a6:24:61:87:9f:23:
                    f7:e3:0c:ac:3f:db:be:d7:c6:f1:df:9c:39:cc:ca:
                    16:3d:11:37:d1:32:3d:ca:dd:cc:58:64:ce:eb:f6:
                    49:a2:ac:38:59:d8:07:e4:45:04:d5:35:61:fe:10:
                    26:ba:5e:a2:47:02:bb:0c:8b:22:36:d0:44:3a:5b:
                    b3:bb:21:39:61:ea:bb:37:10:24:88:cb:25:b1:54:
                    85:02:11:87:e5:ba:d6:40:53:f6:e1:f7:14:a2:00:
                    ea:e9:f2:13:52:f6:bd:bb:86:c6:30:44:d7:b0:8b:
                    7b:94:89:71:fc:98:82:4c:c7:cb:00:c2:39:40:63:
                    df:0e:a0:dc:bb:45:88:80:2a:5d:f9:ab:55:52:81:
                    f2:3e:68:39:84:ee:cc:9f:8e:81:27:7e:7e:1c:66:
                    cb:ba:2c:f7:47:1c:04:82:ea:96:a1:b8:fe:ef:5b:
                    5b:55:96:0f:09:b7:24:8e:09:a7:64:8b:fe:39:54:
                    4d:34:84:2e:de:75:36:47:a5:b3:e7:dc:bf:63:4f:
                    6c:83:1d:9a:ab:98:04:6c:69:b0:02:75:ac:af:71:
                    f8:2f:ee:56:ed:21:bc:36:18:c6:1a:f4:34:1f:af:
                    0a:2e:81:68:2e:cb:84:e4:3e:37:85:80:fa:00:8c:
                    9d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8D:F3:40:A6:78:B4:C0:B7:5C:55:18:EC:73:75:68:FE:BB:1B:CB
            X509v3 Authority Key Identifier:
                keyid:EB:CA:FF:AF:2E:D6:05:A2:31:21:70:67:6A:8A:1D:BA:F0:37:DB:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCAFFAF2ED605A2312170676A8A1DBAF037DBE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pvSVLVgxTQdhwBh8CrWfTCgBBNjLxLkxGCvUc8t35E/0/323830343a363665633a626562613a3a2f34382d3438203d3e20323639353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66ec:beba::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:d0:a8:77:b8:1e:44:2f:53:05:83:9e:87:19:5d:2a:d7:0d:
         ef:62:91:bd:ac:d5:31:ec:0d:4c:19:06:d8:5b:53:10:4b:5a:
         16:4d:bc:49:21:b5:03:04:a0:d5:44:f2:59:15:34:26:a5:29:
         83:55:05:2f:21:49:9a:9b:77:ab:d6:0c:51:ba:02:90:10:42:
         e1:ac:60:27:01:10:03:10:54:20:c4:37:46:8d:30:8a:b3:8c:
         56:30:b3:a0:c7:cd:20:91:ff:6b:7b:48:23:3a:e5:8e:fe:03:
         0e:e9:b1:82:b0:3b:12:c4:2c:9a:c0:d4:4b:e8:9e:57:08:d6:
         3c:bb:46:14:0b:3c:5c:61:fb:7b:72:d9:16:03:9d:88:9d:ac:
         38:f7:4a:41:ea:2b:f7:fc:27:4c:c0:91:21:24:6f:ed:83:9d:
         9e:0f:eb:98:63:21:64:a3:38:c8:88:0d:e4:da:55:10:6a:85:
         2f:b0:cd:1b:65:ce:b1:1a:c0:27:a6:75:cd:e2:fa:96:14:64:
         9f:70:99:51:62:31:d8:8c:4d:63:41:ee:ed:1d:d1:0e:48:0f:
         26:14:98:82:2b:f4:63:91:a2:92:65:7e:9d:ba:fa:fc:d9:a8:
         d0:26:0b:aa:09:10:7a:6b:84:64:96:ea:dc:9d:c5:76:f2:86:
         f7:e1:f6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 23:49:46 2024 by rpki-client on console-fra.rpki-client.org