Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a343030303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a343030303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          X7MlXdXNqXdZizbOlL/yeMwd+aBXIgxdBLtRgqGfJiY=
Subject key identifier:   34:8D:3F:79:96:82:5D:AD:FC:A8:C4:68:3B:88:33:16:F3:AB:42:F1
Certificate issuer:       /CN=DE06770678E099BDC92557910C941887FA8571B2
Certificate serial:       525D8F7D7DBB07CA46EA9D9A03FBFE0E314C923F
Authority key identifier: DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a343030303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Wed 03 Apr 2024 21:24:37 +0000
ROA not before:           Wed 03 Apr 2024 21:19:37 +0000
ROA not after:            Wed 02 Apr 2025 21:24:37 +0000
asID:                     264344
IP address blocks:        2804:2674:4000::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5d:8f:7d:7d:bb:07:ca:46:ea:9d:9a:03:fb:fe:0e:31:4c:92:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE06770678E099BDC92557910C941887FA8571B2
        Validity
            Not Before: Apr  3 21:19:37 2024 GMT
            Not After : Apr  2 21:24:37 2025 GMT
        Subject: CN=348D3F7996825DADFCA8C4683B883316F3AB42F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:82:c1:a2:a7:3d:42:9b:d7:07:2d:e9:f4:fc:
                    db:f8:21:ab:2b:41:b2:be:59:af:06:b1:f5:b2:6a:
                    40:89:9d:7a:c6:00:8f:3f:ca:eb:ac:c5:ab:69:0f:
                    f8:a8:33:a1:0c:4c:66:34:b9:1f:38:81:1e:9f:d2:
                    71:8e:df:2e:05:72:26:d9:9f:60:71:7b:6a:30:60:
                    b3:ea:f3:e4:a0:09:fd:01:4f:3f:fd:c0:60:ca:fa:
                    3a:50:88:dd:71:07:bc:36:b3:e0:cc:48:29:56:d9:
                    3c:ef:64:b6:65:39:ee:e1:9a:60:4c:ea:10:a8:47:
                    ab:bc:0c:b7:bc:15:bb:01:f6:91:22:40:6c:a1:22:
                    0f:e1:74:fc:19:43:da:3e:1e:86:e6:ee:fc:26:f2:
                    7d:65:f4:ae:66:2d:32:ab:6e:74:fc:42:cf:95:e2:
                    c2:38:a9:58:a3:8a:d7:30:87:80:1f:e6:a6:6d:82:
                    e4:93:74:e2:52:10:02:33:ad:b4:93:ed:ce:0c:6e:
                    c4:bb:cc:4a:e1:1d:f8:2c:cb:d9:2e:51:88:88:bd:
                    0d:7c:5c:2f:fc:bd:ba:c4:90:12:e3:6d:13:87:e3:
                    44:89:ae:36:d0:02:01:15:c4:d3:5b:9c:32:56:f9:
                    8a:f9:82:ed:df:d8:84:9b:10:03:fa:33:a5:bc:60:
                    7f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8D:3F:79:96:82:5D:AD:FC:A8:C4:68:3B:88:33:16:F3:AB:42:F1
            X509v3 Authority Key Identifier:
                keyid:DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/DE06770678E099BDC92557910C941887FA8571B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a343030303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:96:de:1b:83:4d:ca:ce:67:fe:ed:ed:cc:e6:44:88:e1:26:
         1d:0d:85:55:11:0b:6b:3d:69:4f:b5:a8:d0:81:fb:f0:9b:2e:
         c0:2a:32:94:85:19:97:4f:16:da:d5:15:06:b9:26:de:92:f5:
         b9:60:f9:c3:5e:80:ed:e1:08:63:74:63:2d:64:16:93:2e:6d:
         08:8f:92:f6:ce:91:e0:fb:3d:f9:5d:cf:ef:77:72:d8:1b:0c:
         26:05:5f:a5:ca:13:b9:96:b3:2a:06:a9:76:ce:92:05:ca:7b:
         79:94:37:da:e1:5e:c4:a7:f2:34:20:0c:f3:eb:ac:0f:0a:46:
         a3:7a:92:4c:df:a7:2d:48:b3:21:eb:96:11:2c:fa:f8:db:48:
         05:7f:67:ad:37:fa:d5:af:44:99:87:a1:7d:0a:b2:ca:89:df:
         2f:3f:6b:ae:0a:7b:87:24:79:3c:2a:36:4a:5f:fb:2c:04:e1:
         11:d5:fc:93:c0:52:8a:fe:67:8e:54:87:fc:01:d3:a2:5c:33:
         a2:1b:9a:3d:88:57:5a:b9:56:27:f7:ab:f3:52:52:f4:a2:c2:
         e8:3d:64:17:3a:05:0e:dd:59:ab:43:6e:e2:59:e6:9c:16:36:
         19:66:12:35:b0:40:13:dc:92:72:69:e9:a2:be:f8:a7:19:1c:
         4c:dd:24:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 13:33:45 2024 by rpki-client on console-ams.rpki-client.org