Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/323830343a333934303a3a2f33322d313238203d3e20323636303231.roa
File:                     323830343a333934303a3a2f33322d313238203d3e20323636303231.roa (raw, json)
Hash identifier:          TgVm082sCbM0LiUl3PrsHor3PEonbF7faBmYibf5ZCE=
Subject key identifier:   18:19:21:5A:AF:D1:A0:EE:24:85:5C:5C:7B:7F:EB:47:B3:AF:FE:57
Certificate issuer:       /CN=F4A6D9490C73D99454773EC9561B1A8FBABFE9EC
Certificate serial:       177A9ED2B5AD732B636CE455E8136D4EC1DD5E1A
Authority key identifier: F4:A6:D9:49:0C:73:D9:94:54:77:3E:C9:56:1B:1A:8F:BA:BF:E9:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4A6D9490C73D99454773EC9561B1A8FBABFE9EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/323830343a333934303a3a2f33322d313238203d3e20323636303231.roa
Signing time:             Thu 31 Oct 2024 20:07:07 +0000
ROA not before:           Thu 31 Oct 2024 20:02:07 +0000
ROA not after:            Thu 30 Oct 2025 20:07:07 +0000
asID:                     266021
IP address blocks:        2804:3940::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:7a:9e:d2:b5:ad:73:2b:63:6c:e4:55:e8:13:6d:4e:c1:dd:5e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4A6D9490C73D99454773EC9561B1A8FBABFE9EC
        Validity
            Not Before: Oct 31 20:02:07 2024 GMT
            Not After : Oct 30 20:07:07 2025 GMT
        Subject: CN=1819215AAFD1A0EE24855C5C7B7FEB47B3AFFE57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:61:09:cf:da:25:c6:9e:da:1e:c6:9d:48:9c:
                    66:2f:a3:2a:44:98:29:20:6d:46:ee:b1:b0:00:04:
                    b5:99:82:d4:d7:17:77:c3:9c:c8:c0:a9:1e:68:15:
                    50:50:e5:0f:e4:8c:83:e8:1b:10:b2:4c:6e:55:bd:
                    b9:76:d3:11:26:58:61:c2:c0:b1:bf:f2:1a:a6:2b:
                    e3:4d:75:1d:43:1c:0e:69:88:41:a5:6f:d0:ff:b8:
                    5f:be:11:cb:a6:c4:6f:a6:3c:05:d3:c5:c5:50:83:
                    93:2a:87:23:2e:43:72:df:ad:dd:34:5e:1d:17:51:
                    91:eb:d9:38:f8:91:a6:ea:97:6a:af:07:8a:72:e1:
                    5e:d5:eb:ea:29:11:39:e2:ba:0b:89:e0:0e:a0:56:
                    41:76:6b:bf:14:c6:f6:3a:18:7a:99:2d:f2:fa:59:
                    da:fb:f4:a1:98:13:7f:f8:ee:83:bf:79:41:47:33:
                    c8:ff:6d:f2:e8:6a:12:db:a6:e1:b4:80:18:b6:6e:
                    16:99:20:45:e8:97:ad:e5:df:bd:46:32:50:85:5c:
                    5e:99:40:13:a9:d1:2d:42:86:1d:73:3b:f2:1d:1e:
                    30:3a:5d:4f:1b:bd:51:57:a9:94:22:7d:e7:a4:ae:
                    57:c5:07:2f:a3:79:f0:ab:d9:be:4b:58:f0:6b:9d:
                    6a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:19:21:5A:AF:D1:A0:EE:24:85:5C:5C:7B:7F:EB:47:B3:AF:FE:57
            X509v3 Authority Key Identifier:
                keyid:F4:A6:D9:49:0C:73:D9:94:54:77:3E:C9:56:1B:1A:8F:BA:BF:E9:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/F4A6D9490C73D99454773EC9561B1A8FBABFE9EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4A6D9490C73D99454773EC9561B1A8FBABFE9EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/323830343a333934303a3a2f33322d313238203d3e20323636303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3940::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:64:df:28:70:36:3e:3f:da:dc:47:15:b7:13:f5:19:01:2d:
         8c:a3:72:91:ce:6b:ca:58:8e:ed:22:10:bb:65:fb:6a:a8:1d:
         0c:3f:e8:73:e8:07:50:65:86:0e:4c:ec:17:0f:23:f4:04:f6:
         a0:6d:ec:e0:01:fe:e7:ac:6e:a0:1c:73:d7:76:a9:66:b1:f8:
         10:5f:57:43:b1:ff:19:97:1b:e5:0a:ac:0b:95:c0:d2:34:3a:
         86:89:aa:af:47:53:d6:67:8f:22:c7:af:9b:76:f0:24:fe:90:
         1e:b3:22:4c:f0:15:4d:54:45:8b:6d:db:0f:16:9a:aa:f8:5e:
         ad:79:61:39:de:65:9f:5d:7d:8c:71:f1:6f:45:78:0a:65:05:
         83:0a:a7:bc:87:49:93:5f:65:a9:75:5c:8f:fd:05:f2:9d:8a:
         5a:92:2b:74:4c:76:6d:71:51:6a:08:6e:7a:66:37:79:0a:c7:
         7c:d5:d6:70:de:53:36:da:0e:65:d9:77:46:a8:15:b7:27:20:
         28:a5:d5:7a:3f:cf:95:b1:78:fa:05:be:45:8c:46:c4:5a:ef:
         45:b4:37:d5:9f:d2:fc:78:fa:97:99:0b:54:5c:35:1b:28:e9:
         fc:d8:ce:8a:7c:95:4a:b5:37:a9:bf:ba:a3:83:bb:8c:53:c6:
         84:49:10:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:37:48 2024 by rpki-client on console-ams.rpki-client.org