Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/323830343a363538633a323130303a3a2f34302d3430203d3e20323639343939.roa
File:                     323830343a363538633a323130303a3a2f34302d3430203d3e20323639343939.roa (raw, json)
Hash identifier:          Pi3FhPsUtYLLQL5UeGDSW8IKKGYyZ5qb7otSNAeYE0s=
Subject key identifier:   28:85:CB:4D:8A:56:FB:26:20:56:A7:43:27:06:0C:FE:D4:31:A8:D5
Certificate issuer:       /CN=21F66D4308816E7B47F6912EBBE7513585A59B9D
Certificate serial:       222478859F567C32C60B6A49850CAF734B04961E
Authority key identifier: 21:F6:6D:43:08:81:6E:7B:47:F6:91:2E:BB:E7:51:35:85:A5:9B:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/323830343a363538633a323130303a3a2f34302d3430203d3e20323639343939.roa
Signing time:             Thu 05 Sep 2024 19:37:13 +0000
ROA not before:           Thu 05 Sep 2024 19:32:13 +0000
ROA not after:            Thu 04 Sep 2025 19:37:13 +0000
asID:                     269499
IP address blocks:        2804:658c:2100::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:24:78:85:9f:56:7c:32:c6:0b:6a:49:85:0c:af:73:4b:04:96:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F66D4308816E7B47F6912EBBE7513585A59B9D
        Validity
            Not Before: Sep  5 19:32:13 2024 GMT
            Not After : Sep  4 19:37:13 2025 GMT
        Subject: CN=2885CB4D8A56FB262056A74327060CFED431A8D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:78:48:7f:60:06:91:62:2d:f4:c1:d4:d6:f1:
                    2a:de:52:6e:e1:33:28:1b:54:56:2e:04:ee:08:dc:
                    c7:a0:d7:d3:bd:0b:24:a6:ce:7c:85:ae:eb:67:9d:
                    ef:99:de:39:62:f9:b6:3f:4f:0f:71:1f:2d:57:7e:
                    8c:9c:0f:cd:aa:91:17:73:31:9c:59:b6:ac:c4:31:
                    a1:9d:8a:39:6b:df:5f:1e:c8:03:08:44:11:c8:19:
                    aa:f1:15:c4:4f:d5:c7:19:38:08:7e:74:6f:ed:35:
                    9a:68:49:ba:bc:3c:c8:07:89:58:79:83:5c:a7:92:
                    7f:aa:88:8b:6a:e5:f0:d7:38:1a:8d:f5:08:95:f0:
                    5f:df:12:0b:d5:3a:18:47:57:be:d0:b5:44:af:dd:
                    3c:e1:18:8a:71:a4:93:52:bd:43:fe:76:43:1b:1b:
                    01:18:88:c7:20:63:06:d8:21:a5:24:2b:93:01:5b:
                    7d:82:c3:dc:95:68:17:25:56:06:1e:67:e1:a5:f0:
                    e7:78:d9:f2:4e:45:6d:9d:99:60:14:8e:bd:7e:7d:
                    6d:83:ed:30:34:e2:3f:8b:53:f4:65:93:7e:1e:96:
                    ef:93:9a:cc:d5:36:78:a8:f9:89:70:6c:1a:b9:7e:
                    8c:61:ae:24:f6:82:14:f5:9b:35:1a:cc:07:ae:55:
                    e7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:85:CB:4D:8A:56:FB:26:20:56:A7:43:27:06:0C:FE:D4:31:A8:D5
            X509v3 Authority Key Identifier:
                keyid:21:F6:6D:43:08:81:6E:7B:47:F6:91:2E:BB:E7:51:35:85:A5:9B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/323830343a363538633a323130303a3a2f34302d3430203d3e20323639343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:658c:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         6a:ae:c7:53:b9:47:a5:23:59:b0:e1:84:f6:cc:ae:0d:0c:31:
         3a:5b:2d:e9:b1:e1:95:cb:ac:cd:e4:cc:d0:9d:51:87:66:d0:
         83:a4:1b:31:0f:be:5b:cd:4f:61:93:8c:72:42:9a:46:ca:92:
         e4:01:6a:70:c5:e1:8d:ad:0a:33:8f:0b:ab:68:e0:87:ec:71:
         09:02:98:2d:a1:20:8e:99:1f:ef:4c:92:2f:27:fd:55:fe:21:
         db:54:eb:30:4d:d7:6a:37:01:63:a7:02:1c:9c:c0:d0:07:50:
         3d:ca:ab:3f:5f:ab:12:83:cb:29:cf:fe:66:8b:c9:13:1a:05:
         f1:f4:a6:31:0d:89:31:aa:ad:12:fe:15:00:72:e7:ed:5f:fe:
         f5:3c:48:d5:14:e5:61:69:97:26:73:c9:44:13:22:56:6c:ba:
         32:0a:92:a1:3f:a0:83:f8:e0:66:a3:4a:7b:40:da:b8:e5:38:
         5f:64:62:aa:67:1e:28:c8:fa:aa:4a:4a:b1:90:fa:95:ba:c8:
         62:6e:64:76:66:02:38:d6:e7:fc:7e:f1:6e:5d:03:84:6a:5b:
         8a:a4:9d:cf:92:f4:57:7f:df:50:88:4e:05:97:c4:a8:8c:d3:
         76:3e:a6:d3:f2:9c:1a:62:4f:e9:1d:83:82:11:7e:4f:3d:b2:
         9a:40:10:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 17:49:48 2024 by rpki-client on console-ams.rpki-client.org