Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/2/323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa
File:                     323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa (raw, json)
Hash identifier:          pUScRmpk1r2T4CcEVANvFrTEKTkP1GRUXFsqssxzCK8=
Subject key identifier:   E0:A9:09:46:F8:B3:D4:74:8E:FA:35:B2:33:4B:0B:1B:BF:17:F4:86
Certificate issuer:       /CN=B82D4FBED9458B4F700D74E565347A95A08877D7
Certificate serial:       53DBD896A1E42B5C4FB3A2D2144D70E6907B5856
Authority key identifier: B8:2D:4F:BE:D9:45:8B:4F:70:0D:74:E5:65:34:7A:95:A0:88:77:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B82D4FBED9458B4F700D74E565347A95A08877D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/2/323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa
Signing time:             Mon 09 Sep 2024 16:56:24 +0000
ROA not before:           Mon 09 Sep 2024 16:51:24 +0000
ROA not after:            Mon 08 Sep 2025 16:56:24 +0000
asID:                     273679
IP address blocks:        2801:80:4000::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:db:d8:96:a1:e4:2b:5c:4f:b3:a2:d2:14:4d:70:e6:90:7b:58:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B82D4FBED9458B4F700D74E565347A95A08877D7
        Validity
            Not Before: Sep  9 16:51:24 2024 GMT
            Not After : Sep  8 16:56:24 2025 GMT
        Subject: CN=E0A90946F8B3D4748EFA35B2334B0B1BBF17F486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1f:6d:e8:fe:2b:1d:1b:eb:d7:80:68:48:48:
                    6a:88:1e:95:6c:0b:6a:14:e0:11:91:8b:97:00:9d:
                    d9:05:ef:55:2c:43:d7:b9:03:d6:a5:90:cd:a8:50:
                    66:28:b4:77:03:5e:d3:b5:11:e6:f0:27:c5:17:35:
                    c9:67:ed:f0:7f:a1:2f:63:70:b9:17:d8:0c:7e:2c:
                    b5:19:7f:81:87:28:db:cf:03:b3:3e:f5:db:18:f1:
                    b3:f0:44:ec:54:92:02:73:64:b9:95:ff:f1:a4:b3:
                    49:cb:20:0d:bc:b1:83:b2:7f:2f:fd:93:ff:18:ba:
                    5b:8c:87:0b:ac:11:12:1c:5d:52:09:f8:d8:dd:fd:
                    33:34:3a:d8:fa:19:81:d3:80:22:64:ad:95:61:70:
                    c2:ae:e6:55:18:8d:0a:d5:1a:31:b2:dd:2a:8e:e7:
                    a0:cc:34:7a:f6:12:5f:64:79:11:79:74:2c:ef:ad:
                    5f:8c:64:dd:f2:d1:51:0e:07:54:d0:ba:30:cc:4a:
                    a1:29:b3:c5:1c:8c:d4:8a:bb:52:ed:13:2a:8d:37:
                    5a:23:81:f4:86:59:54:32:32:96:37:a6:4c:11:35:
                    26:db:57:8a:23:31:ca:30:41:dd:c9:12:f2:f0:6c:
                    fa:93:bb:43:21:ce:5a:3e:42:4e:eb:65:4f:35:e5:
                    2d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A9:09:46:F8:B3:D4:74:8E:FA:35:B2:33:4B:0B:1B:BF:17:F4:86
            X509v3 Authority Key Identifier:
                keyid:B8:2D:4F:BE:D9:45:8B:4F:70:0D:74:E5:65:34:7A:95:A0:88:77:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/2/B82D4FBED9458B4F700D74E565347A95A08877D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B82D4FBED9458B4F700D74E565347A95A08877D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/2/323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         36:8c:73:fb:61:7c:00:eb:be:96:f0:40:85:1a:82:84:c1:0b:
         70:04:74:ed:b8:2c:cb:80:47:a4:7a:e6:27:d1:91:76:3a:13:
         12:9e:f2:61:23:d2:96:bd:c5:48:7d:df:81:88:11:55:48:67:
         5d:95:fa:5f:ab:6a:04:b8:a9:59:6e:26:22:f1:e6:90:77:41:
         af:c2:d6:b9:1e:bd:8d:db:f0:17:33:30:d1:65:5d:88:16:7e:
         cf:ff:82:a7:ce:df:99:8c:33:8b:af:f5:72:d1:d3:4d:c9:fa:
         a2:aa:82:07:10:a8:72:b1:2b:f4:1c:f9:51:e3:38:21:5d:08:
         fd:83:4e:5d:93:86:28:bf:d6:db:25:48:c3:bf:33:37:6a:4e:
         bd:41:2a:bd:42:a9:06:18:e0:bd:0e:ce:ae:42:d8:aa:7f:77:
         4a:8f:41:51:1c:ff:b3:1d:22:65:0b:3e:64:ce:43:78:4c:05:
         67:49:c5:1a:cc:26:28:90:4b:46:15:72:cb:14:5a:16:a2:af:
         61:96:d3:2d:b8:ab:13:d1:b2:b9:2f:ba:f4:19:a7:73:21:51:
         b8:6f:45:44:2c:2d:ce:72:1b:3b:c0:62:28:17:4b:9c:32:73:
         cd:07:2b:e2:5c:07:8b:86:d4:18:4f:8a:61:1c:46:e3:4c:f2:
         c5:79:81:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 05:22:20 2024 by rpki-client on console-ams.rpki-client.org