Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/323830343a363538633a633030303a3a2f33342d3334203d3e20323639343939.roa
File:                     323830343a363538633a633030303a3a2f33342d3334203d3e20323639343939.roa (raw, json)
Hash identifier:          m59q4ksTymGtrzHsNPe3hyoRUU5YfFIhZ8IJtKoSmtU=
Subject key identifier:   4D:66:A9:E5:B6:EF:4C:63:E3:F3:16:01:31:71:FE:31:F5:D4:4F:CA
Certificate issuer:       /CN=21F66D4308816E7B47F6912EBBE7513585A59B9D
Certificate serial:       1837C68C7E5919DD49AE881612D787BFACFC2A42
Authority key identifier: 21:F6:6D:43:08:81:6E:7B:47:F6:91:2E:BB:E7:51:35:85:A5:9B:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/323830343a363538633a633030303a3a2f33342d3334203d3e20323639343939.roa
Signing time:             Thu 05 Sep 2024 19:37:12 +0000
ROA not before:           Thu 05 Sep 2024 19:32:12 +0000
ROA not after:            Thu 04 Sep 2025 19:37:12 +0000
asID:                     269499
IP address blocks:        2804:658c:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:37:c6:8c:7e:59:19:dd:49:ae:88:16:12:d7:87:bf:ac:fc:2a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F66D4308816E7B47F6912EBBE7513585A59B9D
        Validity
            Not Before: Sep  5 19:32:12 2024 GMT
            Not After : Sep  4 19:37:12 2025 GMT
        Subject: CN=4D66A9E5B6EF4C63E3F316013171FE31F5D44FCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6e:04:a4:13:54:8d:f8:c2:d0:07:1d:e5:9f:
                    04:a4:b0:75:fc:77:fe:6e:2f:25:a2:fc:a3:5e:5d:
                    9d:98:6a:2d:0f:02:00:85:c6:9b:bc:42:7c:60:7e:
                    9d:1b:e4:4b:f9:5a:b9:22:cb:46:5b:89:04:b7:be:
                    83:b4:4b:5f:a7:4c:2b:30:5c:69:45:8c:a4:c9:8a:
                    06:d9:f8:54:48:e8:b7:d6:c2:44:3b:8a:eb:3a:dc:
                    f0:db:4f:55:50:98:c3:f9:e9:1b:ea:20:bc:52:8e:
                    c8:6a:8c:71:40:46:20:56:f2:16:38:88:93:0d:79:
                    5f:da:d0:56:70:ed:41:14:ae:91:46:44:34:74:0f:
                    8a:93:ca:8b:52:1b:93:41:c8:b7:f6:96:7b:d7:33:
                    84:41:90:09:26:0e:ad:74:f6:7f:b1:13:64:30:42:
                    c2:95:21:79:64:f0:52:a7:d7:e6:fb:f7:3c:bd:63:
                    16:18:92:94:e3:bc:37:0b:d4:82:ef:7f:3b:65:cf:
                    e3:d7:1d:f1:da:45:c2:22:d6:d7:78:7d:92:62:ce:
                    31:77:dd:3b:4b:62:be:da:b7:66:e9:91:65:14:48:
                    f8:32:05:2a:93:97:02:ef:d2:3f:c0:bc:ca:ff:a5:
                    34:73:3c:ca:ce:1e:8c:33:54:7a:6c:5d:a9:d3:7b:
                    d8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:66:A9:E5:B6:EF:4C:63:E3:F3:16:01:31:71:FE:31:F5:D4:4F:CA
            X509v3 Authority Key Identifier:
                keyid:21:F6:6D:43:08:81:6E:7B:47:F6:91:2E:BB:E7:51:35:85:A5:9B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/323830343a363538633a633030303a3a2f33342d3334203d3e20323639343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:658c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5a:0f:7f:c7:a9:48:69:71:07:ec:d3:db:bb:de:b9:25:07:6a:
         3c:5c:aa:7c:ca:c0:7d:9c:61:b0:8c:67:85:72:88:59:7e:57:
         3b:5a:41:01:c6:b3:66:b4:aa:e6:42:02:a8:99:3b:2a:be:b2:
         b4:ac:03:a4:be:76:6e:8e:c7:e1:c6:92:a7:99:fe:6d:e2:d9:
         d8:68:73:71:1f:35:00:10:1f:f7:12:fa:66:d4:e2:f7:c4:65:
         88:c8:b4:fd:9a:20:df:75:c9:9c:e0:ea:4b:7c:80:d3:03:d2:
         f6:98:88:ba:31:3d:1a:e6:8d:db:fc:b5:f7:52:d2:55:eb:46:
         92:ef:7b:b1:e8:94:da:4b:ad:f3:12:68:c5:05:e8:c4:7f:c1:
         d2:1a:71:e7:55:17:56:2e:cb:18:cb:f9:ac:d5:46:ad:8c:a9:
         7c:74:c2:22:1a:19:bb:4f:83:ad:70:78:d4:2b:33:64:85:c1:
         63:89:69:23:7f:6f:da:1b:5d:9a:d5:d8:57:79:b8:a8:b9:b6:
         df:54:be:a2:89:3e:1f:77:c2:ed:0f:f7:fa:85:9b:0b:bc:37:
         a7:61:1e:53:e2:ee:6f:35:72:66:63:13:ae:e9:69:f1:d0:0f:
         f2:c3:31:15:63:6a:db:7e:48:39:e2:40:6e:01:e0:d4:1a:73:
         5e:cd:b7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 16:41:12 2024 by rpki-client on console-fra.rpki-client.org