Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/323830343a336365633a3a2f33322d3332203d3e20323636323432.roa
File:                     323830343a336365633a3a2f33322d3332203d3e20323636323432.roa (raw, json)
Hash identifier:          yh5xcQTxJ5Bjy1R78vS7tUtDH7AiKP3dNO8moShPdv0=
Subject key identifier:   E3:83:14:1F:6A:D6:37:08:92:4F:61:00:5A:06:09:8B:07:84:CC:D2
Certificate issuer:       /CN=CED535AAD1233C2161BDBD4439E62790A2F55012
Certificate serial:       47BC8B62D1B5EA8AB64181DC9D1B27F877E6545A
Authority key identifier: CE:D5:35:AA:D1:23:3C:21:61:BD:BD:44:39:E6:27:90:A2:F5:50:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CED535AAD1233C2161BDBD4439E62790A2F55012.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/323830343a336365633a3a2f33322d3332203d3e20323636323432.roa
Signing time:             Thu 04 Apr 2024 01:01:12 +0000
ROA not before:           Thu 04 Apr 2024 00:56:12 +0000
ROA not after:            Thu 03 Apr 2025 01:01:12 +0000
asID:                     266242
IP address blocks:        2804:3cec::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bc:8b:62:d1:b5:ea:8a:b6:41:81:dc:9d:1b:27:f8:77:e6:54:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CED535AAD1233C2161BDBD4439E62790A2F55012
        Validity
            Not Before: Apr  4 00:56:12 2024 GMT
            Not After : Apr  3 01:01:12 2025 GMT
        Subject: CN=E383141F6AD63708924F61005A06098B0784CCD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c7:2d:3e:3b:ef:2c:4d:36:ff:43:e5:48:a9:
                    a2:0f:fa:89:7b:81:e5:b6:15:a3:8d:f1:cd:4e:ae:
                    ea:29:bb:c9:19:27:22:19:9a:6d:c5:68:f8:f8:05:
                    4c:2f:2b:c6:f6:3b:29:33:89:6d:c6:d9:8f:d9:eb:
                    af:af:01:31:dd:1f:8d:8a:c0:cc:3c:cc:6b:77:ee:
                    b8:e8:2e:d6:0f:a5:a1:44:b5:f9:ee:de:2a:2c:30:
                    2a:88:f8:8d:cf:75:bf:1b:43:ff:b0:44:65:fd:9d:
                    d6:46:2b:13:48:5e:e7:8c:cf:2d:11:e8:b3:9e:95:
                    16:30:00:04:f8:83:68:0d:01:9e:f0:6b:f4:2d:7b:
                    64:76:df:db:4e:40:a5:dc:93:80:d3:ef:66:e5:0e:
                    46:a2:e6:ad:b9:26:d7:4d:30:c0:f9:22:10:04:d6:
                    57:3e:b8:60:68:46:0b:38:f4:0a:00:23:6f:d7:57:
                    09:ac:08:9c:f3:d7:a9:7f:99:8a:ca:9d:00:6a:a9:
                    39:4e:50:ed:b7:79:1a:ec:4b:ac:6b:8e:d1:c3:58:
                    01:8c:15:17:46:43:21:34:99:79:aa:53:25:ea:35:
                    5c:36:fd:b2:90:9d:8e:b1:8d:6b:2f:97:88:98:46:
                    44:49:f1:3d:67:20:ae:84:71:bb:fd:9b:dd:45:b4:
                    46:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:83:14:1F:6A:D6:37:08:92:4F:61:00:5A:06:09:8B:07:84:CC:D2
            X509v3 Authority Key Identifier:
                keyid:CE:D5:35:AA:D1:23:3C:21:61:BD:BD:44:39:E6:27:90:A2:F5:50:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/CED535AAD1233C2161BDBD4439E62790A2F55012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CED535AAD1233C2161BDBD4439E62790A2F55012.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/1/323830343a336365633a3a2f33322d3332203d3e20323636323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3cec::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:9a:59:bc:61:ee:ce:f2:d0:4c:d1:aa:5e:87:1b:d2:2e:ac:
         c7:32:00:0e:92:d2:58:0a:05:2a:c4:67:26:a5:3a:8e:5a:21:
         a2:4b:4a:cb:5b:27:9c:e8:f9:c5:04:cc:01:3c:75:ac:4e:0f:
         76:18:a3:9c:76:06:11:39:b9:30:d8:ef:cd:86:bd:de:ea:8b:
         3e:c9:0b:dc:4f:9a:37:4a:6c:f2:68:6c:2c:f9:da:4c:92:55:
         4d:42:3b:26:c4:7d:49:94:74:70:80:12:9d:db:4d:21:cb:2b:
         e3:89:e0:af:d1:4c:72:ee:d6:76:b4:6b:e0:16:ab:b4:04:7e:
         d7:82:6a:87:35:0b:be:60:7f:34:4e:71:4b:dd:66:ea:eb:fd:
         8b:57:2d:23:02:54:17:70:05:5f:b3:50:90:c9:8d:e1:aa:ef:
         f4:ed:00:e5:05:fc:58:5d:65:b4:20:14:ec:92:02:af:b9:e7:
         02:fe:cb:82:29:4c:b2:e0:b2:e4:62:55:a5:ec:1a:6d:d9:cf:
         1f:4c:e8:52:41:e0:ff:0b:60:08:97:a8:f3:f2:7b:bb:d9:a7:
         db:37:d2:7e:f8:1f:b1:6b:9d:a6:f5:72:75:c0:d6:87:52:d3:
         55:b4:75:9b:93:dd:e5:cb:a1:69:5b:75:3d:42:f9:65:46:8b:
         30:39:21:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 07:36:07 2024 by rpki-client on console-ams.rpki-client.org