Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a6431303a3a2f34362d3436203d3e20323634333434.roa
File:                     323830343a323637343a6431303a3a2f34362d3436203d3e20323634333434.roa (raw, json)
Hash identifier:          79ID1HOmAUtuzKYI2CeraJdGYtZy6G+1ZGLzv3UbGHY=
Subject key identifier:   F4:86:6F:16:61:49:69:40:63:DD:0A:24:D2:9D:F1:AE:73:3A:7C:6E
Certificate issuer:       /CN=DE06770678E099BDC92557910C941887FA8571B2
Certificate serial:       76CF3B82A0DD05E5E5F46D4641C9E7B52E22B954
Authority key identifier: DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a6431303a3a2f34362d3436203d3e20323634333434.roa
Signing time:             Wed 03 Apr 2024 21:24:36 +0000
ROA not before:           Wed 03 Apr 2024 21:19:36 +0000
ROA not after:            Wed 02 Apr 2025 21:24:36 +0000
asID:                     264344
IP address blocks:        2804:2674:d10::/46 maxlen: 46

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:cf:3b:82:a0:dd:05:e5:e5:f4:6d:46:41:c9:e7:b5:2e:22:b9:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE06770678E099BDC92557910C941887FA8571B2
        Validity
            Not Before: Apr  3 21:19:36 2024 GMT
            Not After : Apr  2 21:24:36 2025 GMT
        Subject: CN=F4866F166149694063DD0A24D29DF1AE733A7C6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2c:3d:75:d1:e7:d8:8c:96:38:d8:b3:f2:d9:
                    22:5e:88:7c:4a:58:85:10:74:38:84:7a:64:a9:32:
                    36:58:9a:7f:e9:09:b5:3d:f4:42:06:71:f4:38:f4:
                    45:5f:a4:c5:91:be:fd:fb:30:89:41:e1:84:f1:89:
                    5e:d7:39:e2:7d:57:8f:ad:2b:21:35:57:e8:32:82:
                    66:82:6a:34:83:99:ee:03:d0:11:af:88:16:c1:08:
                    ac:ff:1d:4b:6e:d5:6f:6c:7e:a2:89:29:fa:cf:8b:
                    b0:4f:91:84:21:6f:e4:9f:bf:b0:be:d9:b8:98:69:
                    40:67:6c:35:aa:2c:46:83:a0:0d:a3:da:10:31:ea:
                    a7:67:6d:00:03:13:dc:a7:fb:8f:3a:c4:79:45:3e:
                    c5:05:03:47:70:b7:08:d9:ec:d8:c5:94:61:f5:2f:
                    22:75:f4:b6:26:86:d6:5c:09:e5:c8:b2:9f:d0:30:
                    ab:fb:a7:d1:0e:58:e4:7d:2b:11:58:81:75:68:8e:
                    25:ef:e0:11:df:b3:b1:ab:7b:7f:d7:3c:d9:bd:9c:
                    4b:a9:2a:ad:60:32:53:e6:86:30:fd:e3:92:d5:f1:
                    d5:59:05:e6:67:3e:7e:43:f2:f9:79:a2:9b:bb:79:
                    1f:48:37:5c:fd:f5:2e:98:3f:e4:2d:34:5b:0d:0e:
                    93:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:86:6F:16:61:49:69:40:63:DD:0A:24:D2:9D:F1:AE:73:3A:7C:6E
            X509v3 Authority Key Identifier:
                keyid:DE:06:77:06:78:E0:99:BD:C9:25:57:91:0C:94:18:87:FA:85:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/DE06770678E099BDC92557910C941887FA8571B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE06770678E099BDC92557910C941887FA8571B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/1/323830343a323637343a6431303a3a2f34362d3436203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:d10::/46

    Signature Algorithm: sha256WithRSAEncryption
         33:31:a9:8b:9c:6f:45:c4:84:db:38:1b:a1:7c:4a:ea:0e:f9:
         dc:eb:3a:91:26:b0:3a:d6:f4:51:ca:88:29:b0:58:68:15:a8:
         a5:25:4e:e9:b7:f0:08:af:2c:3e:89:e7:12:8d:59:45:f4:f7:
         57:ce:9c:6c:62:b8:07:92:72:57:f1:46:fb:13:cd:62:30:67:
         de:1a:32:70:69:7b:2c:8e:2c:46:a2:7c:34:9f:a5:72:a3:dc:
         09:6b:78:4d:0a:8e:02:77:e1:89:92:fb:64:d3:7f:1a:80:9a:
         39:5a:03:c3:af:9f:c5:59:88:f7:56:0d:5c:d5:db:41:cc:08:
         c6:80:f7:e4:ed:bb:0f:c6:1d:66:98:b0:b8:4a:83:d6:e8:04:
         24:91:0b:e5:f8:21:57:38:f8:6f:8d:19:d6:36:b5:dd:49:af:
         f1:41:f4:ef:72:fb:6a:07:c2:4a:c7:f8:07:10:bf:97:1f:83:
         c1:03:76:fc:19:05:e4:e5:24:76:a9:b0:b4:15:12:23:d7:a4:
         1b:1f:20:ab:a3:b6:47:35:04:97:36:9a:b0:20:64:77:13:12:
         c5:e3:57:81:01:8e:c7:f3:9b:d4:b1:48:85:35:d7:de:83:05:
         e3:89:2d:0b:ce:81:61:a6:60:27:9f:8d:da:c4:ce:57:99:1f:
         9b:01:16:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 14:00:36 2024 by rpki-client on console-fra.rpki-client.org