Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a393030303a3a2f33362d3336203d3e20323634333434.roa
File:                     323830343a323637343a393030303a3a2f33362d3336203d3e20323634333434.roa (raw, json)
Hash identifier:          Al66g1QQ87PnfB7mgLLJ7Ti/3WXSYNKY9PZAZMaqpn0=
Subject key identifier:   F6:7E:79:11:1A:1B:CA:68:B0:D4:7A:2F:51:1B:F7:51:F4:34:33:66
Certificate issuer:       /CN=DE06770678E099BDC92557910C941887FA8571B2
Certificate serial:       0EBF96053C9A9588639AB5BD41FADCAC9DC62790
Authority key identifier: DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a393030303a3a2f33362d3336203d3e20323634333434.roa
Signing time:             Wed 03 Apr 2024 21:24:36 +0000
ROA not before:           Wed 03 Apr 2024 21:19:36 +0000
ROA not after:            Wed 02 Apr 2025 21:24:36 +0000
asID:                     264344
IP address blocks:        2804:2674:9000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:bf:96:05:3c:9a:95:88:63:9a:b5:bd:41:fa:dc:ac:9d:c6:27:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE06770678E099BDC92557910C941887FA8571B2
        Validity
            Not Before: Apr  3 21:19:36 2024 GMT
            Not After : Apr  2 21:24:36 2025 GMT
        Subject: CN=F67E79111A1BCA68B0D47A2F511BF751F4343366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:86:c2:04:87:c7:fa:a5:5f:09:a6:3b:ce:73:
                    43:ac:89:21:be:57:5f:8c:7a:36:30:d2:3d:e5:6e:
                    ac:bf:49:1c:31:03:f7:da:9d:81:b4:60:aa:5b:f8:
                    24:6e:43:79:43:6f:6d:80:32:7b:2c:4e:95:19:fb:
                    4a:c8:86:5e:ba:89:14:6a:b5:da:00:74:a3:67:33:
                    02:3d:d5:a5:20:63:a2:e9:98:d3:ff:57:c5:c2:d4:
                    40:2d:7c:72:22:07:90:4d:e4:c0:1f:46:3f:4b:b4:
                    73:19:a8:55:eb:76:7d:f5:f3:73:bf:86:ff:02:18:
                    08:79:b0:53:22:89:fe:9d:e2:b1:a5:9d:5d:5b:f3:
                    09:4e:47:e6:64:ea:65:be:67:e3:13:fe:94:42:2b:
                    39:77:31:9f:38:2e:a4:9e:cd:9b:cf:16:04:55:bd:
                    96:08:74:34:d0:14:fd:98:4f:bf:f1:c9:d2:84:c9:
                    7d:db:27:3d:c1:00:75:60:a0:2a:d1:16:02:2b:10:
                    11:79:76:0e:bb:05:94:85:34:15:76:48:9a:bc:1d:
                    a9:ec:65:b9:ab:1e:f1:c2:57:05:14:a6:1b:93:10:
                    11:27:98:eb:ef:98:90:f5:95:42:89:6a:4b:cd:ea:
                    93:3d:65:af:69:03:2b:23:c5:39:e2:1a:aa:81:b2:
                    cd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7E:79:11:1A:1B:CA:68:B0:D4:7A:2F:51:1B:F7:51:F4:34:33:66
            X509v3 Authority Key Identifier:
                keyid:DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/DE06770678E099BDC92557910C941887FA8571B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a393030303a3a2f33362d3336203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b1:34:f3:d7:72:b4:a3:4c:1f:49:99:b6:04:c9:66:a6:63:6f:
         60:0c:07:33:eb:99:28:bd:a5:ee:c4:a0:f9:5d:e2:d5:8d:06:
         87:e4:a0:ea:aa:6a:91:bf:e9:14:df:10:a7:8f:77:6f:f0:ff:
         c1:cf:a3:91:01:07:37:ab:7a:1d:f5:67:e1:de:e2:64:c3:2a:
         a1:e0:8e:50:08:b8:64:cf:3a:8e:d1:d8:d3:42:3a:8c:00:97:
         79:34:1a:08:d1:dd:d7:d4:97:e0:00:4e:44:62:59:bb:60:ec:
         72:08:52:62:7d:b5:c5:6c:a8:97:6c:6c:24:a3:d8:b6:91:1f:
         a2:dd:98:11:b2:7e:92:53:f9:dd:59:ff:24:d8:75:c3:ef:8a:
         31:d9:2e:14:be:b1:ec:f2:7f:5f:94:fa:f8:55:16:95:34:80:
         81:92:ce:4d:2c:7e:d8:c7:03:5f:fa:0f:03:cf:e7:a1:07:66:
         d3:db:ac:ba:c9:d2:ea:41:70:d6:7b:bc:61:eb:d4:bd:e0:b3:
         28:ef:6c:13:a1:9f:5b:5b:06:1d:ab:8c:99:16:5b:cc:65:a1:
         34:54:0c:cc:a7:65:f7:5d:a5:d0:83:36:2d:c9:68:12:1a:f3:
         9c:a9:b1:9a:5a:26:e4:38:b6:fa:35:af:c8:07:ee:40:27:e5:
         c6:db:50:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 14:00:36 2024 by rpki-client on console-fra.rpki-client.org