Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a633030303a3a2f33342d3334203d3e20323634333434.roa
File:                     323830343a323637343a633030303a3a2f33342d3334203d3e20323634333434.roa (raw, json)
Hash identifier:          /aoJI7E1BiT2ASpknNHOFGOetqjIMduL393MJqZxmGI=
Subject key identifier:   F0:04:EC:AD:2A:AE:09:B8:E8:D9:A2:D0:1B:BB:32:D2:68:49:8E:38
Certificate issuer:       /CN=DE06770678E099BDC92557910C941887FA8571B2
Certificate serial:       56F61413837EC8791CBCB685B0647D5033A3A2C9
Authority key identifier: DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a633030303a3a2f33342d3334203d3e20323634333434.roa
Signing time:             Wed 03 Apr 2024 21:24:35 +0000
ROA not before:           Wed 03 Apr 2024 21:19:35 +0000
ROA not after:            Wed 02 Apr 2025 21:24:35 +0000
asID:                     264344
IP address blocks:        2804:2674:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f6:14:13:83:7e:c8:79:1c:bc:b6:85:b0:64:7d:50:33:a3:a2:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE06770678E099BDC92557910C941887FA8571B2
        Validity
            Not Before: Apr  3 21:19:35 2024 GMT
            Not After : Apr  2 21:24:35 2025 GMT
        Subject: CN=F004ECAD2AAE09B8E8D9A2D01BBB32D268498E38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:39:3c:26:75:97:64:c1:4f:06:7e:9c:e5:09:
                    b3:a4:4c:c0:68:8e:59:9a:eb:cc:5b:6c:6d:01:55:
                    d1:eb:b6:8c:8d:17:1a:e2:d0:32:85:fd:7c:3f:30:
                    cd:ba:2c:7f:be:37:49:e4:58:eb:c5:f6:fa:2e:61:
                    51:c2:33:23:5f:14:b5:6f:36:de:ea:08:13:9c:6d:
                    31:01:3a:65:2e:70:51:13:69:f1:b7:59:8b:24:53:
                    60:70:23:b0:00:b3:33:c3:8b:66:20:72:83:7c:66:
                    9c:8f:5e:1d:11:1b:7b:fb:84:6a:ed:75:78:b5:ef:
                    27:59:a1:68:34:e6:50:e6:b0:b4:db:4f:49:d8:ce:
                    29:2e:44:0c:3e:da:03:9a:6e:e7:38:93:24:7b:8d:
                    f8:ae:2b:4c:eb:51:3c:d1:73:86:35:2e:da:80:11:
                    b0:c1:d6:82:c6:63:8d:cf:4a:d7:af:ca:ab:51:1a:
                    e2:03:64:9f:51:6c:75:e5:53:a1:80:48:a7:a2:09:
                    1c:3f:b4:46:f1:ef:9d:f6:c9:7b:4a:bc:e8:33:61:
                    6b:3a:6d:b5:dc:1d:c1:3e:89:a3:1c:95:0c:76:f8:
                    74:f7:06:d5:f4:2c:c7:a2:36:d9:37:09:b6:f3:c7:
                    de:d2:c1:cc:1f:9a:bd:c9:81:c2:c5:78:2d:27:2d:
                    88:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:04:EC:AD:2A:AE:09:B8:E8:D9:A2:D0:1B:BB:32:D2:68:49:8E:38
            X509v3 Authority Key Identifier:
                keyid:DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/DE06770678E099BDC92557910C941887FA8571B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a633030303a3a2f33342d3334203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         08:d7:d5:f0:4c:f5:62:61:35:35:5f:32:54:b6:a6:50:35:a3:
         cc:d6:c4:ad:c3:15:80:95:1f:1d:da:25:f4:05:cf:a1:cc:27:
         58:9a:b9:f1:a1:df:7d:b5:a8:be:5a:f6:07:1c:a5:69:ed:ed:
         92:97:4b:d3:72:a1:ff:e7:bc:73:ce:34:80:97:da:dd:c5:3c:
         53:37:6c:7c:d2:82:4f:ef:3f:00:70:e3:ab:91:bd:6d:ce:d1:
         14:18:a0:37:15:6a:d9:24:54:75:e4:ae:89:7f:d7:02:86:83:
         99:81:83:af:a5:de:1b:78:5e:e3:cd:08:09:92:b2:37:af:0f:
         4b:1b:1c:a2:e0:24:a9:8a:cd:41:a6:bf:32:07:fa:10:c4:41:
         12:0d:fb:a7:f9:78:12:d1:0c:1d:86:44:52:4c:2d:14:c4:b1:
         25:32:cd:dd:e4:9c:d6:c4:32:2b:ce:ff:4d:a3:ad:4c:8c:54:
         2a:98:57:18:62:57:10:80:c1:ea:5d:6f:8d:81:1c:ce:35:4e:
         0f:45:cb:5b:6a:c9:af:91:60:64:06:2e:5b:1e:7b:4c:62:ee:
         3c:e7:59:e4:06:a2:e2:93:8c:58:4e:7b:70:f0:52:14:af:0d:
         e7:94:d3:36:51:fc:66:2f:e1:04:d2:b5:1f:88:2c:19:97:69:
         01:25:cb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 14:00:36 2024 by rpki-client on console-fra.rpki-client.org