Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ADtcXjYhnfkx3mW3PKLXqtUK8EAb2P9zDZGMfsiMdWxS/0/323830343a336162303a3a2f33322d313238203d3e20323636313033.roa
File:                     323830343a336162303a3a2f33322d313238203d3e20323636313033.roa (raw, json)
Hash identifier:          YLn33U/bjRmgKXU0gPQ6UiGPs5OB6vw52HNqRlMxMOg=
Subject key identifier:   18:C5:4A:DF:52:52:67:CA:7E:56:CC:C4:C8:DE:09:70:90:9E:65:0F
Certificate issuer:       /CN=D688CC4B42325E3A36E294BDD732C0A7D36E9193
Certificate serial:       1AC8FAAEC355A96364C07C51D0B3801F068F99BA
Authority key identifier: D6:88:CC:4B:42:32:5E:3A:36:E2:94:BD:D7:32:C0:A7:D3:6E:91:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D688CC4B42325E3A36E294BDD732C0A7D36E9193.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ADtcXjYhnfkx3mW3PKLXqtUK8EAb2P9zDZGMfsiMdWxS/0/323830343a336162303a3a2f33322d313238203d3e20323636313033.roa
Signing time:             Tue 20 Aug 2024 02:45:56 +0000
ROA not before:           Tue 20 Aug 2024 02:40:56 +0000
ROA not after:            Tue 19 Aug 2025 02:45:56 +0000
asID:                     266103
IP address blocks:        2804:3ab0::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c8:fa:ae:c3:55:a9:63:64:c0:7c:51:d0:b3:80:1f:06:8f:99:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D688CC4B42325E3A36E294BDD732C0A7D36E9193
        Validity
            Not Before: Aug 20 02:40:56 2024 GMT
            Not After : Aug 19 02:45:56 2025 GMT
        Subject: CN=18C54ADF525267CA7E56CCC4C8DE0970909E650F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e6:38:26:da:b9:52:01:08:de:0d:1b:38:0f:
                    0d:2a:fe:e1:60:7a:44:a0:02:fc:55:42:fe:7f:49:
                    6b:f1:eb:da:15:64:82:ad:95:2c:e0:50:21:6c:6d:
                    dd:22:79:9e:4b:2f:4b:e9:5d:31:6e:80:70:5b:cf:
                    2b:56:89:fd:1d:b8:d7:40:d7:39:44:8a:6d:66:57:
                    3f:28:98:3e:87:17:ab:dd:eb:4c:3c:23:70:1a:6c:
                    f2:ca:1e:96:7c:59:e4:5a:8b:c9:d8:fb:87:17:83:
                    2a:05:2f:0c:a1:41:aa:04:bb:ea:e2:52:3f:f1:d2:
                    93:b6:d3:d6:74:d7:a4:55:0c:5f:e6:9c:55:ed:c2:
                    2c:74:f0:66:3e:21:f5:b0:bb:6d:74:c4:d8:f5:01:
                    83:67:e8:d5:df:9c:9d:63:b8:0c:d3:ac:d4:ba:63:
                    47:f7:91:55:0c:5e:b6:ac:59:56:64:d4:76:c3:f5:
                    e4:a7:36:fa:54:d4:1c:78:26:c3:a0:78:40:ea:a0:
                    d0:9c:94:70:0d:11:49:d5:f6:43:47:30:16:59:d9:
                    45:5b:3c:39:6d:9f:1d:a2:2e:03:18:63:f2:22:79:
                    53:66:e0:1f:d5:99:fd:72:95:fb:91:d8:bc:45:4c:
                    62:91:f3:1f:de:4c:02:c4:60:cb:c6:9b:cf:5c:6b:
                    c4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C5:4A:DF:52:52:67:CA:7E:56:CC:C4:C8:DE:09:70:90:9E:65:0F
            X509v3 Authority Key Identifier:
                keyid:D6:88:CC:4B:42:32:5E:3A:36:E2:94:BD:D7:32:C0:A7:D3:6E:91:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ADtcXjYhnfkx3mW3PKLXqtUK8EAb2P9zDZGMfsiMdWxS/0/D688CC4B42325E3A36E294BDD732C0A7D36E9193.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D688CC4B42325E3A36E294BDD732C0A7D36E9193.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ADtcXjYhnfkx3mW3PKLXqtUK8EAb2P9zDZGMfsiMdWxS/0/323830343a336162303a3a2f33322d313238203d3e20323636313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ab0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:02:c5:72:ef:76:5c:ea:42:d0:6c:e6:e8:4c:bb:25:0b:62:
         1f:47:0c:a1:84:8b:04:be:9e:90:0d:bb:55:5b:ed:4e:06:d4:
         a8:fa:d3:7a:7d:da:c3:dd:5a:7b:78:ae:6b:41:c3:0b:eb:99:
         33:fc:14:02:39:86:7b:bb:8f:fb:8c:ac:59:b6:a4:89:69:be:
         bc:e7:55:8d:4f:93:10:61:f8:e4:c8:5d:aa:0e:da:8c:2d:51:
         70:30:ad:04:22:ce:2e:87:f8:e7:d6:0a:75:a0:5f:48:5b:85:
         01:ef:4f:8d:4a:86:ab:07:dc:67:75:e1:a2:86:22:dd:be:70:
         ed:66:6a:58:84:16:89:3f:b9:e7:45:a1:e5:0c:84:75:12:14:
         08:db:76:48:f3:81:03:4e:41:26:e4:1a:44:fc:0c:e7:c7:9b:
         b7:6b:e7:59:68:84:fa:b7:d4:e2:55:20:25:7e:e1:a3:4f:d0:
         a5:de:1b:f2:fe:80:64:e8:17:82:08:74:00:d7:2d:aa:e9:e7:
         90:75:a9:f5:1c:41:bd:51:a6:f9:c4:e8:49:a3:12:80:df:74:
         bf:c6:83:b2:a3:3e:0f:fc:0b:ae:73:37:d0:5f:56:c5:12:1d:
         f5:4e:4d:34:5d:13:51:33:25:4a:db:ef:de:f1:d7:ac:57:bd:
         38:7f:aa:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 06:32:04 2024 by rpki-client on console-fra.rpki-client.org