Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a383030303a3a2f33352d3335203d3e20323632353738.roa
File:                     323830343a3635383a383030303a3a2f33352d3335203d3e20323632353738.roa (raw, json)
Hash identifier:          vlTQi6cHGdm4pYgwU7gsqBjuA7Cw5FnyIwWITyQ818k=
Subject key identifier:   DF:90:B6:6D:05:EE:31:3C:F0:60:D5:1B:B8:10:C9:7B:B7:A9:EC:E5
Certificate issuer:       /CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
Certificate serial:       10F9FD37818E4D39C62E71BC87C09FFB67681891
Authority key identifier: A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a383030303a3a2f33352d3335203d3e20323632353738.roa
Signing time:             Mon 29 Jul 2024 15:03:34 +0000
ROA not before:           Mon 29 Jul 2024 14:58:34 +0000
ROA not after:            Mon 28 Jul 2025 15:03:34 +0000
asID:                     262578
IP address blocks:        2804:658:8000::/35 maxlen: 35

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f9:fd:37:81:8e:4d:39:c6:2e:71:bc:87:c0:9f:fb:67:68:18:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
        Validity
            Not Before: Jul 29 14:58:34 2024 GMT
            Not After : Jul 28 15:03:34 2025 GMT
        Subject: CN=DF90B66D05EE313CF060D51BB810C97BB7A9ECE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f2:f9:85:52:29:52:2c:c5:9d:aa:33:de:fb:
                    da:22:9f:07:d6:96:8d:ee:81:02:0d:9b:01:37:25:
                    d3:55:58:c8:97:df:e4:36:6c:3c:93:11:3f:73:52:
                    ee:3b:31:f5:8b:26:23:9c:e0:69:c0:93:a4:87:da:
                    94:dc:df:e2:28:da:0a:d4:5f:2f:12:05:0e:8a:f9:
                    da:b4:b4:1b:f4:2b:da:3a:80:c7:94:cb:7c:12:2b:
                    0f:53:dd:63:0d:61:fb:0c:9c:88:50:a6:cc:8a:99:
                    26:ea:7b:b4:cf:96:5f:ca:69:c8:27:ad:25:1e:c4:
                    3c:3d:84:14:90:7f:0f:9c:26:ec:ac:83:ff:b8:c3:
                    1e:e3:3f:9a:32:56:d3:f6:f6:7c:ca:db:73:87:82:
                    52:2b:5c:b0:9a:ff:c2:92:76:81:e4:d8:66:f0:b6:
                    37:a7:bf:fd:06:52:70:6d:cb:a7:bf:be:1d:4a:98:
                    e7:ab:68:70:16:ba:0d:77:ea:37:b8:b8:ff:fe:01:
                    86:8b:6d:82:65:b5:bb:03:df:38:32:c3:0f:8a:35:
                    61:b9:b7:82:81:5b:1a:ca:80:29:38:c1:22:12:ad:
                    67:9e:03:4d:7e:57:9d:dd:54:61:8b:89:f5:df:64:
                    96:b5:37:ea:0e:ad:38:93:e1:af:59:ed:60:cd:60:
                    4b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:90:B6:6D:05:EE:31:3C:F0:60:D5:1B:B8:10:C9:7B:B7:A9:EC:E5
            X509v3 Authority Key Identifier:
                keyid:A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a383030303a3a2f33352d3335203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:658:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         19:91:02:dd:e4:52:ce:28:c0:ca:b5:4e:bf:05:64:a5:e8:ee:
         10:53:1e:f7:09:33:14:86:f0:09:98:be:05:a3:69:81:77:43:
         5b:c0:9f:0d:8d:da:e8:c9:87:22:c9:96:c2:93:a3:89:c1:1e:
         19:a7:62:87:31:80:f6:bd:c3:6b:2f:d5:1f:88:f3:f5:01:b0:
         33:64:e9:70:5b:2c:cb:da:9c:03:9d:e6:bb:44:5b:88:c3:96:
         b9:ec:2d:8e:89:04:3f:d2:37:d9:c2:66:7b:2e:8f:54:fd:d2:
         c0:85:4a:e0:eb:2c:71:b5:fc:80:9e:c0:67:76:3f:fc:e3:3b:
         83:17:bb:f7:e5:9e:5e:d1:1b:3f:c0:9c:89:d3:b5:b8:a2:e0:
         34:0c:81:a3:34:16:2f:00:00:6b:f1:7d:83:91:2e:23:e1:e7:
         4a:7b:c4:db:86:c2:66:1d:41:7c:f9:80:db:ff:dc:73:b0:86:
         4d:9f:dd:6e:a5:38:79:28:99:a2:d9:44:d8:cd:2a:18:87:0e:
         ef:10:f0:8e:9f:ab:c2:78:60:3a:14:6f:15:f8:99:3b:14:a5:
         c9:8d:64:de:32:7e:ec:14:35:f9:6b:5b:fb:e2:a5:c8:37:fc:
         c7:ce:ed:82:23:66:77:30:d3:03:31:41:02:64:ab:b0:98:0e:
         57:80:29:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:32:10 2024 by rpki-client on console-fra.rpki-client.org