Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/323830343a363833633a3a2f33322d313238203d3e20323639363738.roa
File:                     323830343a363833633a3a2f33322d313238203d3e20323639363738.roa (raw, json)
Hash identifier:          VOFhjer1hEupYh+o215ue7R7vsxYm8EUNK8saRp1lkM=
Subject key identifier:   52:D4:FE:B9:6D:32:4D:23:D1:11:01:54:52:C4:E6:79:5D:21:CD:3E
Certificate issuer:       /CN=F1D0013CBCEAE79C32F6298A753EBBB671A3BEC0
Certificate serial:       0A12D25D7690C5F3C9B682EFCB06EE3263EE45CB
Authority key identifier: F1:D0:01:3C:BC:EA:E7:9C:32:F6:29:8A:75:3E:BB:B6:71:A3:BE:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1D0013CBCEAE79C32F6298A753EBBB671A3BEC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/323830343a363833633a3a2f33322d313238203d3e20323639363738.roa
Signing time:             Sun 21 Apr 2024 01:10:18 +0000
ROA not before:           Sun 21 Apr 2024 01:05:18 +0000
ROA not after:            Sun 20 Apr 2025 01:10:18 +0000
asID:                     269678
IP address blocks:        2804:683c::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:12:d2:5d:76:90:c5:f3:c9:b6:82:ef:cb:06:ee:32:63:ee:45:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1D0013CBCEAE79C32F6298A753EBBB671A3BEC0
        Validity
            Not Before: Apr 21 01:05:18 2024 GMT
            Not After : Apr 20 01:10:18 2025 GMT
        Subject: CN=52D4FEB96D324D23D111015452C4E6795D21CD3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:95:74:d3:4f:e8:47:de:71:b1:e3:f5:6f:90:
                    05:4d:e7:32:5c:0d:aa:70:1e:a6:2e:e0:f5:ae:b7:
                    a1:d0:41:f2:85:ef:16:4c:74:fe:96:72:40:d5:0d:
                    40:c5:7b:18:9d:86:a8:da:43:85:be:50:67:df:37:
                    e1:0d:78:9c:28:94:37:66:de:a2:2a:58:5e:bc:18:
                    74:eb:c6:be:88:de:cf:1e:d7:94:22:7c:15:50:8b:
                    00:0c:48:74:0b:1e:f4:47:d0:8f:d0:91:bb:ff:07:
                    89:95:1a:74:b5:d7:a3:92:26:90:5c:9a:de:2f:9f:
                    26:cb:35:91:20:90:2c:82:91:30:f0:cb:63:4d:b8:
                    e1:24:05:7a:f5:16:ad:f8:56:99:b4:6b:ab:77:65:
                    8a:0c:0b:f0:5d:36:f5:e1:dd:13:ac:0c:4d:5e:09:
                    03:a7:a2:ad:e3:d7:74:2e:09:c1:5e:19:31:e5:ac:
                    cb:3e:d7:93:7b:80:e4:2e:26:c6:f2:c7:11:25:d4:
                    37:9a:42:40:db:77:7b:59:1d:ac:09:8d:a8:89:ac:
                    ee:3b:44:9a:c3:ef:f6:6a:b6:b0:b9:d2:6c:5f:f6:
                    62:db:fb:82:0a:40:fe:e1:69:71:dd:13:45:20:03:
                    52:e5:74:f5:58:d8:a7:17:b1:72:79:cf:be:77:b7:
                    40:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D4:FE:B9:6D:32:4D:23:D1:11:01:54:52:C4:E6:79:5D:21:CD:3E
            X509v3 Authority Key Identifier:
                keyid:F1:D0:01:3C:BC:EA:E7:9C:32:F6:29:8A:75:3E:BB:B6:71:A3:BE:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/F1D0013CBCEAE79C32F6298A753EBBB671A3BEC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1D0013CBCEAE79C32F6298A753EBBB671A3BEC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ACCMypgnM2Z3bXc5GUxfyaeeu2r9FARFGQjCT9vLppF7/0/323830343a363833633a3a2f33322d313238203d3e20323639363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:683c::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:68:38:ca:82:54:26:ba:2b:44:c2:e2:48:7e:f7:f3:0a:e4:
         83:63:bf:e2:85:76:19:ae:00:a3:44:4e:a4:dd:f8:f6:b6:15:
         9a:7b:0b:30:be:92:80:68:eb:5f:34:87:eb:c3:14:0a:bc:fa:
         04:10:ec:a1:99:e6:6d:66:db:af:d8:96:5d:a3:52:b6:e4:d0:
         93:88:d3:9f:f4:8c:f5:9d:59:52:3e:a7:6e:ed:6e:fb:24:84:
         16:f9:e5:5e:63:e1:6d:d0:dd:ed:91:b5:c9:77:0f:81:13:3b:
         99:3f:65:83:74:f3:dd:65:0b:7d:da:97:ef:f8:fa:31:0d:04:
         b2:21:47:52:85:a4:12:4a:6c:d9:ee:11:cf:a0:ea:09:79:24:
         72:08:c4:c6:80:9f:62:0d:96:13:76:87:9e:b8:30:57:3e:bb:
         ba:29:57:d9:bf:f4:f3:0b:b0:ac:79:66:6e:06:7d:30:0b:b3:
         28:a3:cf:19:b0:6c:89:f8:c1:d5:a5:aa:bd:4f:ee:19:7f:66:
         81:e0:50:06:61:c3:42:cd:d2:4c:71:d5:24:be:f7:0b:48:10:
         46:97:9a:01:52:f5:c9:a1:9c:cd:83:49:f2:5e:a7:15:60:1a:
         48:10:b5:08:2b:bb:78:c2:94:4f:f4:de:5e:db:3a:68:51:e8:
         50:5e:fd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 14:15:30 2024 by rpki-client on console-fra.rpki-client.org