Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a393030303a3a2f33362d3336203d3e20323633343231.roa
File:                     323830343a313630303a393030303a3a2f33362d3336203d3e20323633343231.roa (raw, json)
Hash identifier:          vBsZa08E15vKrprg9aKxupS+Os9Ah3Xq+OomHzMCs4s=
Subject key identifier:   01:5E:54:C2:CA:BC:D5:D7:1D:40:B9:E1:A8:D2:9C:CF:A2:57:16:B1
Certificate issuer:       /CN=A0FF9A83436226FF19D020B34271420BD55D7D05
Certificate serial:       4D863F4C22BD57433DF261C972AC121E884496CA
Authority key identifier: A0:FF:9A:83:43:62:26:FF:19:D0:20:B3:42:71:42:0B:D5:5D:7D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0FF9A83436226FF19D020B34271420BD55D7D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a393030303a3a2f33362d3336203d3e20323633343231.roa
Signing time:             Thu 25 Jul 2024 01:01:29 +0000
ROA not before:           Thu 25 Jul 2024 00:56:29 +0000
ROA not after:            Thu 24 Jul 2025 01:01:29 +0000
asID:                     263421
IP address blocks:        2804:1600:9000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:86:3f:4c:22:bd:57:43:3d:f2:61:c9:72:ac:12:1e:88:44:96:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0FF9A83436226FF19D020B34271420BD55D7D05
        Validity
            Not Before: Jul 25 00:56:29 2024 GMT
            Not After : Jul 24 01:01:29 2025 GMT
        Subject: CN=015E54C2CABCD5D71D40B9E1A8D29CCFA25716B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1c:be:47:22:77:c0:d7:89:7f:07:39:6f:a3:
                    9a:31:b2:da:d9:13:2c:a4:7c:3c:25:61:5a:b6:0d:
                    f0:22:dc:f7:7a:e1:db:a4:ad:91:85:a9:66:d6:73:
                    aa:c1:e6:91:87:ba:58:25:47:4e:2a:9f:aa:bd:c0:
                    3d:1a:3c:6f:2f:09:e4:76:34:88:b4:b9:82:3a:9f:
                    19:15:1c:f0:08:ff:50:3b:70:52:b3:30:16:e9:9d:
                    aa:04:33:33:d8:07:99:44:13:45:82:4a:e8:ff:39:
                    68:07:06:00:2c:ce:66:42:71:9a:43:b1:5d:8e:ff:
                    5b:a3:e4:a6:74:fc:5d:bf:13:9d:83:1e:5f:e6:ee:
                    c2:f7:f5:a9:58:dc:1a:d3:29:69:23:c7:82:a1:b8:
                    9c:a7:d2:f5:6d:0e:48:16:ec:7c:c5:8d:0a:43:a2:
                    a2:fa:d6:d7:d9:4f:1a:4c:f7:77:47:8a:e7:e9:d5:
                    91:12:42:8b:7e:07:e7:20:41:9b:fc:57:1e:d1:15:
                    e9:12:47:cc:cb:f9:c0:cf:1b:0d:f0:7d:1d:9b:1f:
                    19:eb:1b:9b:25:c3:38:05:d1:6f:5a:34:38:1b:92:
                    c2:07:12:47:af:68:1c:45:01:a8:67:0b:e6:72:f1:
                    dd:d8:de:95:f9:78:80:89:d6:e7:d6:f4:02:1a:dd:
                    a7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5E:54:C2:CA:BC:D5:D7:1D:40:B9:E1:A8:D2:9C:CF:A2:57:16:B1
            X509v3 Authority Key Identifier:
                keyid:A0:FF:9A:83:43:62:26:FF:19:D0:20:B3:42:71:42:0B:D5:5D:7D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/A0FF9A83436226FF19D020B34271420BD55D7D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0FF9A83436226FF19D020B34271420BD55D7D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/323830343a313630303a393030303a3a2f33362d3336203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1600:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6a:d1:13:af:64:1d:fa:93:03:40:3f:a7:f2:f5:fb:a7:6c:08:
         2b:b9:17:91:4f:22:29:e9:3e:8b:33:29:de:59:c6:59:a8:46:
         c5:0b:47:9b:a5:85:21:71:bb:a7:19:98:4f:2f:2e:f6:19:4a:
         29:21:56:a6:be:67:59:d5:28:fa:1f:bc:3b:e5:cd:f1:75:7c:
         34:ba:45:75:aa:05:3a:6f:17:d1:4e:7e:6d:2f:1a:58:a0:6b:
         40:5c:14:b1:74:b2:31:3e:b7:c8:cb:6e:13:39:40:f6:03:5d:
         b4:1d:fc:c0:1b:02:73:5b:8f:f9:53:ec:7c:53:98:3d:e5:91:
         bb:9e:b7:e5:41:d1:3d:58:0d:f5:67:70:fc:0a:2e:35:44:74:
         88:5e:27:d5:5f:80:a4:88:5e:02:dd:91:95:37:9c:18:78:24:
         8d:8c:fe:5b:63:97:cf:ab:8e:a0:b0:9a:e4:5b:46:bb:d5:62:
         98:75:71:19:10:ce:e0:a3:1d:07:56:8c:32:87:ee:6a:13:0e:
         42:2c:03:78:63:36:bc:8e:0c:c7:a6:64:88:72:10:8a:52:6b:
         26:ab:2b:48:35:fd:c5:e2:0c:6e:a2:c0:f9:9a:91:74:fc:3f:
         13:9b:65:67:de:3f:2c:21:6c:66:d5:c6:2c:c5:dc:86:a1:4c:
         1b:79:fd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 04:47:30 2024 by rpki-client on console-fra.rpki-client.org