Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/323830343a333531383a3a2f33342d3334203d3e20323635353030.roa
File:                     323830343a333531383a3a2f33342d3334203d3e20323635353030.roa (raw, json)
Hash identifier:          HhBQbZ7Djm0cdQojXUzKAk8fO3j3YlDTPBLd9Sr7Ps0=
Subject key identifier:   11:E0:5D:89:C0:8B:CE:05:0B:DE:E6:C2:1F:9B:3F:09:D1:B3:C3:E7
Certificate issuer:       /CN=2B36FD67FD146F6ABC421C609744891EA7512F17
Certificate serial:       158D7480547B2BBCBEF21DB710B38D6BB1D21C29
Authority key identifier: 2B:36:FD:67:FD:14:6F:6A:BC:42:1C:60:97:44:89:1E:A7:51:2F:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B36FD67FD146F6ABC421C609744891EA7512F17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/323830343a333531383a3a2f33342d3334203d3e20323635353030.roa
Signing time:             Thu 04 Apr 2024 05:43:34 +0000
ROA not before:           Thu 04 Apr 2024 05:38:34 +0000
ROA not after:            Thu 03 Apr 2025 05:43:34 +0000
asID:                     265500
IP address blocks:        2804:3518::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:8d:74:80:54:7b:2b:bc:be:f2:1d:b7:10:b3:8d:6b:b1:d2:1c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B36FD67FD146F6ABC421C609744891EA7512F17
        Validity
            Not Before: Apr  4 05:38:34 2024 GMT
            Not After : Apr  3 05:43:34 2025 GMT
        Subject: CN=11E05D89C08BCE050BDEE6C21F9B3F09D1B3C3E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7e:d8:4c:68:cd:4b:06:7b:29:a2:e1:30:43:
                    6c:c0:11:c9:64:09:ca:5b:af:30:9f:61:7d:8c:f6:
                    7a:f7:6a:6c:4f:04:de:97:4d:3c:da:e3:67:19:cd:
                    5e:75:75:1d:7e:3b:ab:b3:75:44:ef:c9:66:34:19:
                    a3:bd:01:e3:c8:84:e3:a5:c3:72:7a:18:8b:fd:f0:
                    32:af:28:83:02:62:7b:54:ab:3e:dd:80:a0:a1:57:
                    43:5a:7b:19:39:c2:06:d4:f2:96:be:5a:f1:8e:d5:
                    1f:1f:26:c0:43:2e:9c:f7:1f:48:5d:38:30:87:5e:
                    b2:5a:8c:8a:1c:7c:6a:1d:fa:72:a2:cc:ee:70:b0:
                    d5:a7:93:78:43:78:15:f1:42:56:c7:15:ed:94:7a:
                    06:d0:ed:51:12:4e:2e:09:92:4a:e2:25:bd:a6:24:
                    10:d6:fe:e0:ca:ab:01:bd:c2:77:8e:5a:05:d8:1c:
                    9e:3f:7c:3b:5c:b6:40:7e:b2:fe:86:8e:21:5d:32:
                    e0:1b:cc:1e:1a:45:c8:be:a2:5d:db:87:f7:86:b5:
                    5c:e6:79:7d:4a:a7:b6:1a:3f:a7:fb:ee:18:41:86:
                    1c:e0:84:66:21:b3:6d:22:b7:cc:e7:13:5d:cb:f5:
                    65:b9:cb:49:e2:32:00:71:18:2e:40:04:53:f1:7c:
                    a8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E0:5D:89:C0:8B:CE:05:0B:DE:E6:C2:1F:9B:3F:09:D1:B3:C3:E7
            X509v3 Authority Key Identifier:
                keyid:2B:36:FD:67:FD:14:6F:6A:BC:42:1C:60:97:44:89:1E:A7:51:2F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/2B36FD67FD146F6ABC421C609744891EA7512F17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B36FD67FD146F6ABC421C609744891EA7512F17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/323830343a333531383a3a2f33342d3334203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3518::/34

    Signature Algorithm: sha256WithRSAEncryption
         ad:37:85:55:a4:05:ab:ee:72:70:ba:d2:be:11:07:bf:8f:ab:
         7b:83:c0:22:dd:f6:ad:3e:b6:c3:60:57:b3:f8:c6:02:2b:b2:
         02:bf:cd:ed:e3:ab:1f:27:ec:5a:31:70:a1:fa:eb:e0:dc:04:
         c0:ce:71:b0:de:2e:62:b6:2c:09:e4:5b:1f:44:3f:af:b9:3e:
         e1:a9:8a:5a:ec:f9:7d:7c:4b:cb:cd:ca:ac:b1:99:e5:d3:8e:
         95:83:75:89:a7:12:d5:81:08:b4:37:d7:eb:43:0d:12:75:a6:
         2e:df:f2:9e:c2:12:0e:f7:52:70:3d:7a:f7:59:10:a5:e6:e3:
         90:85:20:e4:e4:4b:98:cd:24:9c:67:4f:c6:10:72:42:4f:fd:
         09:fc:b5:1f:cc:51:1b:04:68:4f:03:ac:ad:ea:b3:d1:9b:5d:
         4a:69:6b:d0:2d:ad:cb:c0:7a:07:de:63:94:4c:5f:4f:82:7b:
         19:28:d6:82:9a:73:ad:bb:67:4d:24:de:0d:42:73:41:a8:b6:
         c8:20:1d:cb:47:44:83:4c:b3:4b:fc:26:02:16:3b:5b:3f:49:
         c3:6b:7d:a2:9f:23:80:2b:ec:1d:1d:32:3d:d3:62:06:bf:f8:
         31:b3:90:5c:f3:1c:6a:19:36:7c:a7:af:79:f9:77:c8:c3:34:
         6e:df:19:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 00:23:35 2024 by rpki-client on console-fra.rpki-client.org