Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/323830343a313033343a3a2f33322d3438203d3e20323633363234.roa
File:                     323830343a313033343a3a2f33322d3438203d3e20323633363234.roa (raw, json)
Hash identifier:          GlTqUlWgjvqBkUKGEkV/E+hw+TwgNyeEaq0L5joxkaE=
Subject key identifier:   F8:05:68:54:2C:1D:A4:CD:CE:72:2D:A1:57:7B:7B:40:B8:AD:34:31
Certificate issuer:       /CN=0D6BEEB64B235D973334233AF4B2ADBF258D7DA1
Certificate serial:       4B86498297DC46522CF180DE0A942F246893A1E9
Authority key identifier: 0D:6B:EE:B6:4B:23:5D:97:33:34:23:3A:F4:B2:AD:BF:25:8D:7D:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6BEEB64B235D973334233AF4B2ADBF258D7DA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/323830343a313033343a3a2f33322d3438203d3e20323633363234.roa
Signing time:             Thu 16 May 2024 12:26:26 +0000
ROA not before:           Thu 16 May 2024 12:21:26 +0000
ROA not after:            Thu 15 May 2025 12:26:26 +0000
asID:                     263624
IP address blocks:        2804:1034::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:86:49:82:97:dc:46:52:2c:f1:80:de:0a:94:2f:24:68:93:a1:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D6BEEB64B235D973334233AF4B2ADBF258D7DA1
        Validity
            Not Before: May 16 12:21:26 2024 GMT
            Not After : May 15 12:26:26 2025 GMT
        Subject: CN=F80568542C1DA4CDCE722DA1577B7B40B8AD3431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:7d:b8:b6:81:d1:df:68:0a:d8:43:6c:49:48:
                    e6:22:b4:f8:e3:de:f6:73:d0:92:ce:c3:34:8e:de:
                    05:4d:e6:af:f5:7f:8b:f0:a8:82:fe:c5:35:48:8a:
                    f6:1f:17:8c:f3:3e:08:63:18:58:47:b8:6a:c9:ca:
                    08:68:a4:8c:03:27:03:3e:45:79:54:a8:75:aa:00:
                    28:f8:35:df:b4:63:4e:74:68:8f:cf:71:92:51:85:
                    01:ae:37:ab:b3:df:a7:0f:b4:3f:f9:3e:5a:77:95:
                    de:fc:47:ab:87:0c:68:06:a2:fd:ab:64:9f:7d:41:
                    a6:31:3b:17:74:64:0a:09:10:71:d7:28:0d:e2:ad:
                    b7:13:12:e4:01:27:27:b0:f7:49:b8:10:bb:bb:40:
                    68:b0:51:63:e6:77:e0:c1:bb:e3:67:77:38:14:4d:
                    f5:3a:bd:bf:bb:20:c9:13:f8:79:6f:f5:7e:0c:57:
                    5f:bf:b0:23:49:e5:3b:f5:cf:58:42:1b:e8:c0:2c:
                    d1:fe:71:64:b8:75:3e:8d:56:0a:2e:06:86:ed:e3:
                    5c:5f:dc:14:8e:7f:ff:ea:cc:7f:b8:52:7b:b6:d4:
                    da:d4:04:c7:cc:f0:80:2c:a7:f1:ac:aa:1b:77:ab:
                    26:bf:16:86:e1:aa:d6:b2:48:86:71:3c:7f:b5:b5:
                    93:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:05:68:54:2C:1D:A4:CD:CE:72:2D:A1:57:7B:7B:40:B8:AD:34:31
            X509v3 Authority Key Identifier:
                keyid:0D:6B:EE:B6:4B:23:5D:97:33:34:23:3A:F4:B2:AD:BF:25:8D:7D:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/0D6BEEB64B235D973334233AF4B2ADBF258D7DA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6BEEB64B235D973334233AF4B2ADBF258D7DA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/323830343a313033343a3a2f33322d3438203d3e20323633363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1034::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:79:92:4d:0b:a9:10:f6:52:6a:ab:ea:a6:0d:27:c8:7d:25:
         f0:fa:0f:78:01:4c:c8:6d:08:a9:df:b4:2c:42:f6:b3:be:c4:
         d8:8e:c0:19:3c:62:76:70:73:9e:8c:15:93:9a:d0:81:ce:f0:
         bf:39:01:a4:5f:eb:b1:4d:61:74:7d:1c:47:c2:c0:b3:e8:4f:
         35:35:f1:12:dc:32:d8:19:0d:98:df:39:dc:56:45:3c:75:7d:
         59:7d:20:f2:07:75:91:df:13:c6:8a:56:4a:07:81:b8:75:25:
         0a:26:b5:cb:e0:b0:89:11:d0:cb:e1:c6:86:78:dd:6c:db:5a:
         2d:30:f4:a4:68:8b:e2:f6:d0:6b:ac:5a:15:49:30:c4:42:64:
         69:e2:fd:74:94:7e:8a:28:ab:28:2d:5c:83:65:3d:44:4b:1f:
         6f:5e:a4:9c:79:a8:25:e7:af:c7:42:83:44:80:6e:9f:6a:70:
         25:c9:2d:17:8e:83:0c:95:66:b2:0d:b3:75:60:23:37:11:82:
         ef:2a:32:98:19:a6:9d:1c:d1:7e:ba:5c:e3:cc:f0:e2:03:9b:
         0a:c8:c7:4f:1b:6c:2d:87:f6:c3:63:ed:d8:86:5f:08:6e:09:
         d8:7d:3e:44:99:f0:a9:3f:50:05:d9:85:b6:12:ab:89:49:12:
         61:3a:94:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 16:32:36 2024 by rpki-client on console-fra.rpki-client.org