Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/1/323830343a343635383a3a2f33322d3336203d3e20323636393834.roa
File:                     323830343a343635383a3a2f33322d3336203d3e20323636393834.roa (raw, json)
Hash identifier:          IvmsUt/rPd2/JIcqeRBG/ASmAujmyzPHOno227dgksw=
Subject key identifier:   EF:35:7D:7C:1B:54:34:60:06:08:6D:B0:8B:45:D4:C4:07:37:CB:22
Certificate issuer:       /CN=B3745D7D6DC37088A2D46D36D0AD97DAFD030190
Certificate serial:       01F63A2C10748D53DEC1F40DF0A46BA0F057F1C2
Authority key identifier: B3:74:5D:7D:6D:C3:70:88:A2:D4:6D:36:D0:AD:97:DA:FD:03:01:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3745D7D6DC37088A2D46D36D0AD97DAFD030190.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/1/323830343a343635383a3a2f33322d3336203d3e20323636393834.roa
Signing time:             Thu 08 Aug 2024 13:08:04 +0000
ROA not before:           Thu 08 Aug 2024 13:03:04 +0000
ROA not after:            Thu 07 Aug 2025 13:08:04 +0000
asID:                     266984
IP address blocks:        2804:4658::/32 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f6:3a:2c:10:74:8d:53:de:c1:f4:0d:f0:a4:6b:a0:f0:57:f1:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3745D7D6DC37088A2D46D36D0AD97DAFD030190
        Validity
            Not Before: Aug  8 13:03:04 2024 GMT
            Not After : Aug  7 13:08:04 2025 GMT
        Subject: CN=EF357D7C1B54346006086DB08B45D4C40737CB22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e2:7f:42:49:2f:21:94:e1:49:ab:f5:0f:fc:
                    3d:89:d7:d0:9b:e8:72:a9:9f:42:11:07:0f:b4:6d:
                    84:86:56:0d:97:f0:f4:b0:30:ab:21:95:17:fc:6e:
                    d7:86:b4:66:67:64:33:7c:8a:fc:0a:ae:36:b4:39:
                    28:5e:0e:24:12:81:c1:95:54:01:45:f5:95:13:2a:
                    e0:02:81:66:69:3d:70:ef:41:43:01:b8:f8:9f:1b:
                    e0:31:3a:ab:4a:63:9c:36:e8:8a:65:dd:7c:1a:6b:
                    58:a1:fe:86:27:4d:42:96:68:51:5f:dd:e8:d6:a3:
                    36:30:ef:ef:88:1c:8b:50:fd:b3:8a:6f:fc:dd:60:
                    6b:bd:4b:4b:b8:1a:5e:33:89:a2:51:5f:b2:a8:a4:
                    bb:7f:81:db:09:78:73:04:98:50:3d:e5:39:3f:c4:
                    dc:d3:d5:b1:a9:18:e5:88:46:99:f9:a9:39:22:e1:
                    5c:05:ce:63:df:a3:f3:af:a1:a3:1d:78:03:b2:7b:
                    98:38:9e:69:b1:dc:95:00:95:f0:cc:71:a1:36:96:
                    46:1b:ba:c0:db:9a:93:31:01:33:96:a7:be:d7:b4:
                    3f:a1:fe:a7:9d:4a:8c:82:fc:3e:eb:b2:dc:a5:d2:
                    64:0a:3f:63:2d:e5:2d:15:2e:1e:60:eb:fa:48:ad:
                    c0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:35:7D:7C:1B:54:34:60:06:08:6D:B0:8B:45:D4:C4:07:37:CB:22
            X509v3 Authority Key Identifier:
                keyid:B3:74:5D:7D:6D:C3:70:88:A2:D4:6D:36:D0:AD:97:DA:FD:03:01:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/1/B3745D7D6DC37088A2D46D36D0AD97DAFD030190.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3745D7D6DC37088A2D46D36D0AD97DAFD030190.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/1/323830343a343635383a3a2f33322d3336203d3e20323636393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4658::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:34:c9:9d:86:90:46:a5:83:7b:b3:ff:da:8d:d6:7f:de:ea:
         06:5f:4e:89:76:63:8a:1c:9e:5d:4f:33:fb:a6:7b:9f:52:d0:
         f9:9b:3b:81:42:2e:35:cf:1d:de:9f:c6:b0:7b:90:e2:32:8a:
         22:73:5b:71:42:12:36:4b:4d:02:ea:77:fd:64:c0:ed:e1:ee:
         5d:60:74:c1:3c:cb:34:32:13:cd:75:05:1d:c8:f0:fb:ff:0d:
         be:23:20:00:f6:35:15:9c:3b:4c:d7:f1:28:29:52:00:79:d4:
         e2:49:61:04:c7:d7:7f:06:83:dc:ab:85:d6:0e:79:6e:ab:8e:
         f7:4b:68:2b:11:d8:cd:b1:99:8b:f9:9d:27:94:9f:c7:1f:09:
         ed:9a:aa:af:9e:7b:7b:44:b8:b6:11:dd:f8:c9:45:c1:0b:88:
         93:9d:1e:51:d5:f1:e7:5a:eb:0b:15:a3:52:64:ff:04:ae:2f:
         ad:44:a1:81:0a:60:00:81:c1:a0:05:a0:ef:17:3e:1c:24:81:
         5c:b2:3c:4c:d8:59:82:1c:92:76:9f:7a:02:89:ad:70:b6:3c:
         d5:64:a9:47:62:9f:fb:ed:9c:6e:c9:eb:73:8a:c9:4a:32:fd:
         a0:08:ef:98:ac:b6:8b:d1:71:d1:82:03:de:ba:61:9a:df:0f:
         ed:0e:a7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 15:18:27 2024 by rpki-client on console-fra.rpki-client.org