Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/323830343a333531383a343030303a3a2f33342d3334203d3e20323635353030.roa
File:                     323830343a333531383a343030303a3a2f33342d3334203d3e20323635353030.roa (raw, json)
Hash identifier:          djUMromgMZqMGeTlpDLJnWCSYzmvQ03trF9JkGiKZ7s=
Subject key identifier:   FF:A3:52:8D:E2:65:07:8C:DB:03:E9:79:34:FC:E4:4B:C5:32:DF:D2
Certificate issuer:       /CN=2B36FD67FD146F6ABC421C609744891EA7512F17
Certificate serial:       6CFD3987D8444947E56FABA5AFBF39B5025957E9
Authority key identifier: 2B:36:FD:67:FD:14:6F:6A:BC:42:1C:60:97:44:89:1E:A7:51:2F:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B36FD67FD146F6ABC421C609744891EA7512F17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/323830343a333531383a343030303a3a2f33342d3334203d3e20323635353030.roa
Signing time:             Thu 04 Apr 2024 05:43:33 +0000
ROA not before:           Thu 04 Apr 2024 05:38:33 +0000
ROA not after:            Thu 03 Apr 2025 05:43:33 +0000
asID:                     265500
IP address blocks:        2804:3518:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:fd:39:87:d8:44:49:47:e5:6f:ab:a5:af:bf:39:b5:02:59:57:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B36FD67FD146F6ABC421C609744891EA7512F17
        Validity
            Not Before: Apr  4 05:38:33 2024 GMT
            Not After : Apr  3 05:43:33 2025 GMT
        Subject: CN=FFA3528DE265078CDB03E97934FCE44BC532DFD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:14:6d:23:27:23:6c:f5:17:72:28:31:4d:78:
                    8d:e9:29:81:92:a7:c1:05:12:ec:eb:43:94:02:26:
                    05:12:8a:e2:b0:84:be:b1:0b:ab:26:c9:bd:01:df:
                    7e:09:06:c1:ca:09:6d:df:33:0d:b7:48:01:d5:15:
                    90:88:46:59:b9:97:90:cc:71:29:62:c3:1e:a1:0b:
                    46:25:64:b9:9b:50:1f:07:1e:89:c0:ac:00:7b:19:
                    37:60:fd:a0:c3:36:46:88:ff:dc:2d:ce:93:0c:82:
                    19:9d:d7:0f:78:ac:98:1c:5c:c9:77:2d:c4:3c:3a:
                    88:e0:88:c1:9f:05:36:47:a6:8d:25:53:ee:11:dc:
                    34:ba:7b:4b:34:1f:b9:fa:be:40:8e:3b:aa:54:65:
                    65:49:68:e9:41:93:7e:71:00:7a:ad:7e:c5:62:52:
                    73:c7:3c:7b:74:19:9f:8f:d4:a6:4d:dc:46:9f:67:
                    9d:9f:cd:31:bd:15:f0:23:ca:9b:24:06:bb:35:9f:
                    58:a2:f7:dd:4b:f5:c5:3b:c2:68:03:e3:c0:98:ee:
                    91:97:9f:b0:21:77:64:6a:34:a7:bf:87:6f:12:76:
                    9e:41:d0:1d:77:e1:93:e0:0f:91:bc:54:08:db:cd:
                    80:9b:3a:23:9b:b9:55:36:21:4d:d8:84:82:2c:da:
                    05:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A3:52:8D:E2:65:07:8C:DB:03:E9:79:34:FC:E4:4B:C5:32:DF:D2
            X509v3 Authority Key Identifier:
                keyid:2B:36:FD:67:FD:14:6F:6A:BC:42:1C:60:97:44:89:1E:A7:51:2F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/2B36FD67FD146F6ABC421C609744891EA7512F17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B36FD67FD146F6ABC421C609744891EA7512F17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/323830343a333531383a343030303a3a2f33342d3334203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3518:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4f:22:0a:e1:43:1d:aa:53:31:74:d9:06:b5:66:4a:d0:eb:fb:
         9c:0a:29:15:9c:56:5e:6f:fe:9d:1c:1c:3a:b3:cd:2b:d7:f8:
         28:4f:b6:ca:2c:12:06:20:1d:9a:5b:c4:46:46:7b:f7:a9:c4:
         44:29:f5:39:56:40:c6:88:ed:cf:81:4a:e9:27:2d:04:bc:d9:
         42:1d:2b:42:36:4b:a2:1e:be:43:f6:22:cf:96:a5:90:6e:b5:
         4b:0c:96:31:fa:83:6a:e7:f0:d5:64:4a:a2:bf:0d:44:7d:95:
         ce:69:3f:4d:93:d9:d1:59:62:4c:c9:33:ab:6b:41:3f:70:77:
         a1:e2:a0:23:38:74:65:67:45:cf:19:b0:ee:b0:79:bb:f9:73:
         92:87:43:07:0c:3b:3d:9d:98:a6:f9:df:65:d5:51:7d:96:55:
         fa:72:84:b9:19:85:9b:29:1b:d3:c6:8b:71:b2:cf:1f:da:09:
         d4:07:68:58:34:c0:65:7b:0c:7f:8b:ca:5d:3c:43:93:df:cf:
         78:26:ad:c0:83:f0:88:61:7a:91:45:d8:a6:8c:d6:c3:9b:76:
         a9:93:1e:2f:d1:63:d5:e9:0f:9e:f1:2f:0e:6e:6f:4b:f4:1e:
         ed:8a:20:c8:5a:22:29:f2:a3:ec:fa:3e:b4:d5:2d:5e:59:81:
         d8:e1:a7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 00:23:35 2024 by rpki-client on console-fra.rpki-client.org