Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a353130303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a353130303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          FJYEFHW2C9QEZvWklEjQPbpTY+A6C4OjtPzpMyzz1+8=
Subject key identifier:   8B:04:7C:71:E7:FE:4B:AE:30:23:C2:2F:49:3D:AD:59:1E:20:69:2E
Certificate issuer:       /CN=DE06770678E099BDC92557910C941887FA8571B2
Certificate serial:       34E866245E980CBD2BD18EB508261A3AC9AC85AE
Authority key identifier: DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a353130303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Wed 03 Apr 2024 21:24:35 +0000
ROA not before:           Wed 03 Apr 2024 21:19:35 +0000
ROA not after:            Wed 02 Apr 2025 21:24:35 +0000
asID:                     264344
IP address blocks:        2804:2674:5100::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e8:66:24:5e:98:0c:bd:2b:d1:8e:b5:08:26:1a:3a:c9:ac:85:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE06770678E099BDC92557910C941887FA8571B2
        Validity
            Not Before: Apr  3 21:19:35 2024 GMT
            Not After : Apr  2 21:24:35 2025 GMT
        Subject: CN=8B047C71E7FE4BAE3023C22F493DAD591E20692E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:73:d2:96:d7:a1:8e:49:be:a3:44:f9:43:7e:
                    a2:32:3d:ca:7d:59:eb:ee:b3:43:eb:1d:ad:13:66:
                    6b:9a:ef:f4:c8:b0:6a:ad:b5:87:cd:01:f3:8b:87:
                    68:a1:96:97:e4:07:8b:ce:49:35:7d:d0:34:f8:ae:
                    dd:3b:43:6f:75:45:42:e6:a2:ab:41:dc:1a:5e:9b:
                    1e:b9:11:38:86:72:83:dc:75:c5:dc:a2:f6:1b:b3:
                    61:a1:0f:e1:61:6e:d1:cb:8f:ef:1b:6a:4d:74:31:
                    ce:e4:96:e7:01:fd:c9:5e:3e:06:d3:58:7b:ba:60:
                    2e:06:7c:52:db:2d:21:ef:68:3e:29:04:3c:50:1b:
                    a7:8e:5a:8e:91:8a:1d:dc:20:e0:2d:49:78:01:13:
                    75:2b:bc:c8:e2:47:8c:2e:92:fd:2c:e3:9e:b4:e2:
                    55:aa:bf:f3:62:31:86:aa:a0:9a:84:50:15:e4:38:
                    4f:a7:4f:85:4f:e1:31:54:15:77:8f:7f:79:46:45:
                    96:da:41:25:85:e9:69:b1:4e:9d:76:46:b5:83:99:
                    5b:93:05:10:09:05:67:37:c2:95:e5:fb:13:05:a7:
                    2f:63:8d:28:ea:ec:a7:7f:82:82:16:7d:08:79:f2:
                    f7:aa:e4:0a:d5:b7:03:86:1b:2d:cd:bd:75:8e:0e:
                    3e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:04:7C:71:E7:FE:4B:AE:30:23:C2:2F:49:3D:AD:59:1E:20:69:2E
            X509v3 Authority Key Identifier:
                keyid:DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/DE06770678E099BDC92557910C941887FA8571B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a353130303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:5100::/40

    Signature Algorithm: sha256WithRSAEncryption
         b2:39:e0:21:8a:08:c5:0c:d5:4a:64:17:e9:f1:4d:73:9a:6f:
         e4:bf:96:8f:08:75:2d:ba:f6:3e:4c:dc:a3:29:5a:31:35:2a:
         08:7e:de:3f:ee:44:62:96:7d:85:22:d2:3e:5b:5d:f6:d1:b3:
         85:b1:9e:62:eb:0c:e1:29:1b:e8:a0:ce:71:a7:e0:0b:e0:64:
         08:c3:37:44:ab:d8:4a:da:1f:73:fc:94:f6:2d:05:cd:1e:f1:
         bd:83:9b:18:fa:a6:d3:a4:cc:0b:25:83:bc:d1:e5:e8:33:6b:
         f5:9a:ec:72:ae:f5:a8:ce:db:8a:2d:12:50:73:00:a2:1f:d6:
         b9:0c:0b:45:14:ef:a0:a3:42:82:81:2e:83:9a:20:c7:7b:3c:
         45:82:64:4d:3c:33:21:04:e2:b7:d8:e8:cc:97:c6:f7:f9:9e:
         f8:04:07:78:3e:74:59:19:64:4c:9c:39:7d:86:b3:53:2b:51:
         60:9d:63:4c:f4:f9:b3:ed:4d:e5:72:d4:f2:e8:cd:43:99:43:
         59:7c:64:90:c2:2d:c4:5b:8e:ab:e6:90:46:95:52:cd:f3:07:
         42:78:e2:90:33:9b:ee:cd:53:87:5f:53:ca:95:7f:cb:e6:74:
         75:a2:14:b3:88:48:93:2e:a2:b2:63:00:4e:39:1b:1f:32:d7:
         05:86:32:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 13:33:45 2024 by rpki-client on console-ams.rpki-client.org