Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a346330303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a346330303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          lmoWDI/aGAv3VYws8T1TyszhTNBybUNYkDLhym6qBMA=
Subject key identifier:   3F:D9:7A:6B:83:A2:C9:98:51:9D:2B:DB:30:02:80:68:12:A3:C1:4D
Certificate issuer:       /CN=DE06770678E099BDC92557910C941887FA8571B2
Certificate serial:       69C36DE280F7ADB1E0A0833DB72A9BEC466791A9
Authority key identifier: DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a346330303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Wed 03 Apr 2024 21:24:35 +0000
ROA not before:           Wed 03 Apr 2024 21:19:35 +0000
ROA not after:            Wed 02 Apr 2025 21:24:35 +0000
asID:                     264344
IP address blocks:        2804:2674:4c00::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c3:6d:e2:80:f7:ad:b1:e0:a0:83:3d:b7:2a:9b:ec:46:67:91:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE06770678E099BDC92557910C941887FA8571B2
        Validity
            Not Before: Apr  3 21:19:35 2024 GMT
            Not After : Apr  2 21:24:35 2025 GMT
        Subject: CN=3FD97A6B83A2C998519D2BDB3002806812A3C14D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e5:06:84:9b:27:06:42:53:e5:0b:89:f3:8a:
                    27:f5:f9:ec:22:80:c8:07:a7:3b:e4:ef:1d:3b:71:
                    01:02:09:2a:1f:e9:54:4a:7f:4f:c1:a9:ef:94:1d:
                    03:f7:a9:67:d6:d9:f2:42:1f:ff:65:03:19:60:23:
                    b4:24:42:e4:6e:23:6a:a7:b7:bb:ed:09:96:d1:8b:
                    c6:3f:46:e1:02:5c:0b:e3:6c:07:22:5b:20:54:6f:
                    8d:f9:de:9d:e7:8b:97:d7:d0:96:2a:38:4f:07:54:
                    5b:91:8b:ca:c1:e2:93:67:62:5f:92:83:30:0d:6f:
                    8e:84:f0:e2:e9:5b:1b:f9:99:d8:e4:c2:ee:49:de:
                    38:3a:54:8a:dd:0d:7a:ec:32:b4:ca:ce:9f:b7:3c:
                    2a:7c:d9:6e:5c:8e:11:77:52:aa:c4:25:82:a8:e2:
                    da:a4:97:42:91:79:72:73:ea:60:99:5c:ea:ed:d0:
                    2e:4a:8e:bd:c9:15:0d:4a:83:2b:87:7c:f2:9f:98:
                    54:7b:82:68:94:a5:11:a9:15:00:0a:4a:5c:b9:f2:
                    a1:03:f1:a8:ec:b6:87:21:dc:2d:80:6f:7b:40:b9:
                    ab:25:fb:cb:e6:ad:39:11:e4:3a:e2:4a:d3:7b:96:
                    ed:2f:b3:8b:dd:7a:f0:3c:a3:ad:98:c4:8e:00:63:
                    2f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D9:7A:6B:83:A2:C9:98:51:9D:2B:DB:30:02:80:68:12:A3:C1:4D
            X509v3 Authority Key Identifier:
                keyid:DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/DE06770678E099BDC92557910C941887FA8571B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a346330303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         79:6f:b6:35:a2:b0:2b:62:3a:a3:e1:d5:39:66:83:9b:70:af:
         a2:a4:45:6d:4f:3d:1b:85:9b:48:2b:a0:a6:cb:0c:a1:ad:e0:
         5a:16:9b:f6:93:7f:9b:88:f0:ee:58:a5:0f:53:34:4c:4a:26:
         99:d9:d2:e1:5b:3d:93:c1:67:30:cb:bb:44:fb:66:09:31:1a:
         c3:c1:fb:18:72:5e:db:fa:f8:6c:87:e8:28:91:0c:9e:50:2e:
         dc:8f:38:ec:f6:62:2f:69:20:98:01:15:c0:01:89:6b:16:66:
         bb:2f:38:10:61:d5:2b:0a:4f:5b:6c:9a:b0:ca:86:37:09:4a:
         67:8f:cc:6a:0c:05:a2:8e:55:dd:68:1f:52:21:e9:71:83:79:
         b5:73:0e:80:c6:28:ae:5b:7b:c0:23:e0:d2:b5:be:8b:f6:c6:
         b2:5f:39:bd:8f:ce:5e:4f:d0:33:c0:66:1a:70:73:d6:1e:87:
         e2:9a:cb:31:97:b7:a7:78:8c:bc:5d:67:f2:36:43:29:24:fb:
         0e:e6:4d:95:dd:ac:22:70:ba:73:f1:48:34:a0:07:f8:c9:d5:
         9a:5b:2e:09:c1:32:14:16:9d:b5:21:7a:e2:82:db:90:e2:1b:
         cf:d1:40:f5:2d:ef:4c:d5:45:48:2a:67:a0:5b:7b:f9:92:77:
         2f:cb:0b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 14:00:36 2024 by rpki-client on console-fra.rpki-client.org