Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/323830343a366364303a663131303a3a2f34342d3434203d3e20323730343934.roa
File:                     323830343a366364303a663131303a3a2f34342d3434203d3e20323730343934.roa (raw, json)
Hash identifier:          8nJKT/vcQXgf5lMvsdgPHpZPmKUO5qYnsK8mwyMYAEE=
Subject key identifier:   21:E3:62:8C:38:9B:44:2B:DE:DB:4C:B5:61:54:07:AE:A5:DC:65:58
Certificate issuer:       /CN=B4D98D45DAE595BEA52EF65521249698BEAC741A
Certificate serial:       025FAB1C98F091DA2693C3D72D7CCD509A3471F4
Authority key identifier: B4:D9:8D:45:DA:E5:95:BE:A5:2E:F6:55:21:24:96:98:BE:AC:74:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4D98D45DAE595BEA52EF65521249698BEAC741A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/323830343a366364303a663131303a3a2f34342d3434203d3e20323730343934.roa
Signing time:             Thu 18 Apr 2024 18:52:52 +0000
ROA not before:           Thu 18 Apr 2024 18:47:52 +0000
ROA not after:            Thu 17 Apr 2025 18:52:52 +0000
asID:                     270494
IP address blocks:        2804:6cd0:f110::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5f:ab:1c:98:f0:91:da:26:93:c3:d7:2d:7c:cd:50:9a:34:71:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4D98D45DAE595BEA52EF65521249698BEAC741A
        Validity
            Not Before: Apr 18 18:47:52 2024 GMT
            Not After : Apr 17 18:52:52 2025 GMT
        Subject: CN=21E3628C389B442BDEDB4CB5615407AEA5DC6558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8f:29:78:31:06:26:ff:49:55:f2:9f:9f:2a:
                    84:d8:ef:81:05:37:46:ff:38:0e:3f:d0:e9:d4:b6:
                    51:90:83:84:04:83:48:f5:df:41:1f:2f:84:2e:37:
                    eb:1d:65:8c:24:a7:b3:65:34:ab:fc:38:90:9e:c0:
                    82:02:bd:11:03:81:8c:ca:50:a3:ff:b9:f4:e1:b9:
                    33:cd:35:6b:9b:ae:ce:f6:37:e5:52:e3:5c:20:06:
                    d0:ca:b1:10:ab:47:5c:2a:ce:70:9a:a6:af:c5:93:
                    20:f1:49:d2:c1:5f:9b:6a:8f:90:5a:22:41:86:cb:
                    68:05:d5:44:c2:da:94:b2:dd:69:c9:75:45:db:84:
                    f6:e7:90:32:7c:3b:1c:79:43:97:b8:64:11:1e:d8:
                    8f:3c:9f:f3:ce:42:61:f7:e2:08:0d:c0:19:af:36:
                    ff:b8:15:08:e6:59:94:f8:1a:17:9c:2c:4e:48:5e:
                    2f:90:d8:8d:e4:0d:91:30:f4:63:9d:8f:b4:b1:09:
                    19:18:24:32:59:fe:de:4b:2e:22:94:a4:76:30:85:
                    57:e5:ea:fc:73:a4:73:bc:54:61:b7:16:de:9a:22:
                    56:1b:29:4e:24:50:b3:a2:e2:b7:7b:91:26:62:3a:
                    80:43:5e:7c:05:b1:b3:b0:9b:94:2f:d0:31:a3:84:
                    0e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E3:62:8C:38:9B:44:2B:DE:DB:4C:B5:61:54:07:AE:A5:DC:65:58
            X509v3 Authority Key Identifier:
                keyid:B4:D9:8D:45:DA:E5:95:BE:A5:2E:F6:55:21:24:96:98:BE:AC:74:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/B4D98D45DAE595BEA52EF65521249698BEAC741A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4D98D45DAE595BEA52EF65521249698BEAC741A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/323830343a366364303a663131303a3a2f34342d3434203d3e20323730343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6cd0:f110::/44

    Signature Algorithm: sha256WithRSAEncryption
         cf:93:45:78:7e:84:3f:ad:fa:8b:a4:18:40:ee:7a:b9:b2:40:
         63:2d:dd:fb:8f:74:4e:08:b5:65:4b:11:a5:86:ea:02:40:93:
         91:f5:20:3a:78:4f:33:f7:9a:1e:4e:8b:d9:d5:cf:9c:30:42:
         37:f9:9d:13:0d:e4:9d:eb:ea:26:c6:49:8c:40:9f:55:17:de:
         1a:2c:13:dd:20:f5:56:ea:37:f1:08:d0:47:55:bb:04:b0:68:
         08:d9:0d:28:b3:d5:8f:82:c5:48:74:0c:5a:8a:72:59:1a:63:
         51:85:fa:4a:e7:c3:b3:b6:a3:b2:12:82:36:d0:87:e9:6f:58:
         f0:f7:4c:cf:41:c5:0e:2b:1a:72:68:0e:ac:dc:7d:e6:31:9f:
         7e:9d:e7:3b:43:c0:61:fe:ad:f2:c4:f2:b9:af:cf:ef:55:69:
         7d:f5:9a:e6:6b:1c:71:6a:56:71:49:fa:5f:b9:d0:5b:43:d8:
         34:1d:0e:92:db:b6:6a:bb:2b:fe:66:04:e2:3e:b7:a8:a7:71:
         76:b6:a6:99:ec:38:4c:98:b0:15:a0:59:18:d9:6f:f4:8c:ab:
         e2:bb:9b:61:ff:7f:64:19:1e:9d:22:0e:8b:a1:4a:5a:42:66:
         9e:d3:90:da:ab:e4:a4:cb:e4:fa:50:3f:a8:26:ae:73:b3:90:
         ef:86:2b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 06:09:40 2024 by rpki-client on console-ams.rpki-client.org