Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/1/323830343a6363633a3a2f33322d3438203d3e20323632383237.roa
File:                     323830343a6363633a3a2f33322d3438203d3e20323632383237.roa (raw, json)
Hash identifier:          eD2Vy2d//n7e6yFIONcVTldjtOf4H42pax0wutkop1A=
Subject key identifier:   49:2C:63:E6:96:B0:FA:AE:16:5F:46:41:43:54:31:28:94:4C:35:DF
Certificate issuer:       /CN=540962CBF5A6938F04BFA3344E3804D30CB723D7
Certificate serial:       59309D0F0FC991ED09847519EAC3FE4303606E37
Authority key identifier: 54:09:62:CB:F5:A6:93:8F:04:BF:A3:34:4E:38:04:D3:0C:B7:23:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/540962CBF5A6938F04BFA3344E3804D30CB723D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/1/323830343a6363633a3a2f33322d3438203d3e20323632383237.roa
Signing time:             Wed 10 Apr 2024 13:07:46 +0000
ROA not before:           Wed 10 Apr 2024 13:02:46 +0000
ROA not after:            Wed 09 Apr 2025 13:07:46 +0000
asID:                     262827
IP address blocks:        2804:ccc::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:30:9d:0f:0f:c9:91:ed:09:84:75:19:ea:c3:fe:43:03:60:6e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=540962CBF5A6938F04BFA3344E3804D30CB723D7
        Validity
            Not Before: Apr 10 13:02:46 2024 GMT
            Not After : Apr  9 13:07:46 2025 GMT
        Subject: CN=492C63E696B0FAAE165F464143543128944C35DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fc:72:c2:c3:97:2e:93:d4:9c:53:2d:16:19:
                    ed:72:f3:bf:54:e0:ea:c5:e2:0a:fe:d4:99:e6:f3:
                    3b:17:ad:13:14:43:4e:b9:63:4d:1d:57:ae:04:08:
                    9d:0c:12:65:5d:56:fc:2a:08:90:17:70:c5:27:a5:
                    fa:70:1b:8c:91:0f:40:05:79:e9:5e:86:4c:56:eb:
                    0c:b1:7b:44:cd:ae:6b:94:c5:91:0c:34:25:51:e4:
                    88:2b:47:45:d9:4f:fc:f0:49:e2:58:f7:48:ab:c7:
                    79:cf:76:81:d4:02:59:6a:12:42:6f:1c:96:3e:ee:
                    d7:00:e5:67:c7:11:5d:5f:74:f1:a4:1e:e4:29:b0:
                    ff:cf:4e:92:75:be:48:1c:f1:6e:c5:5a:22:24:ea:
                    8c:5d:88:07:5e:15:53:5e:0f:0e:1d:73:e8:cb:ca:
                    e3:7f:96:34:64:ab:4f:da:88:ef:4f:57:c6:18:43:
                    b0:ce:fe:a5:71:e1:22:d4:50:07:1b:ea:35:1b:65:
                    4e:fa:49:fd:70:50:f9:ee:f7:d4:15:30:4b:2a:8e:
                    2b:87:82:3e:a9:b8:2c:e3:b9:40:67:be:b0:b2:27:
                    ad:b3:83:86:e0:36:a0:ad:99:5f:9f:31:9c:4f:68:
                    6d:03:11:80:64:a4:db:89:7b:a7:26:e4:6c:e4:bb:
                    ae:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2C:63:E6:96:B0:FA:AE:16:5F:46:41:43:54:31:28:94:4C:35:DF
            X509v3 Authority Key Identifier:
                keyid:54:09:62:CB:F5:A6:93:8F:04:BF:A3:34:4E:38:04:D3:0C:B7:23:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/1/540962CBF5A6938F04BFA3344E3804D30CB723D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/540962CBF5A6938F04BFA3344E3804D30CB723D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/1/323830343a6363633a3a2f33322d3438203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ccc::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:f8:b8:78:3f:32:b1:17:71:9b:f1:12:23:b8:a0:fb:e2:31:
         b8:a6:16:f8:3a:44:a6:0d:07:26:24:b0:bc:76:2d:f7:7a:5c:
         72:76:78:50:0c:40:f3:bb:cf:49:53:ab:29:0e:c8:ed:f7:b2:
         1c:9c:1e:58:ab:f8:6b:c7:30:b2:1b:43:1a:c1:9b:14:b1:1c:
         a0:d4:75:37:5d:ea:ff:6e:5c:8e:50:31:fe:8c:a6:15:65:80:
         fe:a5:1c:00:56:4e:c6:16:4f:a3:07:ce:8a:00:8f:21:b2:65:
         9b:1c:c7:01:e0:58:da:3f:9d:47:e7:ef:96:19:3d:97:79:8a:
         1a:25:62:6b:0c:7b:38:f4:f4:4f:76:a5:57:05:a0:ef:e5:cd:
         fe:aa:73:21:d6:2e:09:68:a8:36:ec:66:3c:b4:eb:50:41:95:
         f6:9e:91:83:b8:19:ce:73:57:0c:b7:91:cc:d8:c1:68:6a:4f:
         43:45:5c:23:08:b8:42:c2:2c:62:de:f4:59:26:00:e8:fe:1c:
         d5:ec:51:12:d6:62:f6:ad:38:64:85:32:7a:0b:ce:15:1c:cd:
         f6:b2:8d:ed:99:77:23:06:2e:8a:81:ff:9a:73:50:19:3f:23:
         fd:ff:5f:9f:38:80:78:6c:6d:dd:a5:65:71:9c:41:98:2c:7b:
         5e:5f:6c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 13:42:03 2024 by rpki-client on console-fra.rpki-client.org