Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a383030303a3a2f33332d3333203d3e20323639343131.roa
File:                     323830343a363432633a383030303a3a2f33332d3333203d3e20323639343131.roa (raw, json)
Hash identifier:          zQG4PK5z0e/qN2vBm8XpIUYN0fGTZMuiVtQhiKbXl+E=
Subject key identifier:   A2:82:0B:D2:AC:C2:7A:6E:44:EC:FB:74:E7:EC:35:BA:EB:2F:7D:45
Certificate issuer:       /CN=B1D59FFBE00FE7A5A6E9BA3355FD28DB94D70590
Certificate serial:       2D011785CC894587E5454DEF1DC03CC682A4DFB4
Authority key identifier: B1:D5:9F:FB:E0:0F:E7:A5:A6:E9:BA:33:55:FD:28:DB:94:D7:05:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1D59FFBE00FE7A5A6E9BA3355FD28DB94D70590.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a383030303a3a2f33332d3333203d3e20323639343131.roa
Signing time:             Wed 09 Oct 2024 18:17:00 +0000
ROA not before:           Wed 09 Oct 2024 18:12:00 +0000
ROA not after:            Wed 08 Oct 2025 18:17:00 +0000
asID:                     269411
IP address blocks:        2804:642c:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:01:17:85:cc:89:45:87:e5:45:4d:ef:1d:c0:3c:c6:82:a4:df:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1D59FFBE00FE7A5A6E9BA3355FD28DB94D70590
        Validity
            Not Before: Oct  9 18:12:00 2024 GMT
            Not After : Oct  8 18:17:00 2025 GMT
        Subject: CN=A2820BD2ACC27A6E44ECFB74E7EC35BAEB2F7D45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d7:63:bc:9b:e9:1e:1f:5c:90:81:d1:bb:56:
                    d6:bb:20:6e:5d:76:19:e4:6d:08:d2:a5:12:40:23:
                    1b:82:c6:38:fa:95:d0:a6:8a:c0:87:5f:0e:37:bb:
                    cc:a6:78:2f:b2:0d:00:8e:65:82:3b:90:7a:2b:dd:
                    e6:ff:99:df:d4:6f:c6:8a:12:ea:b8:b4:de:98:cd:
                    35:e5:88:2e:9a:a8:a6:1c:33:f3:48:2d:9c:ec:67:
                    7e:cb:06:c2:a2:c1:59:7d:3c:ad:4b:a5:1b:01:d8:
                    5e:43:1b:ba:7b:53:27:d1:22:8b:be:36:b8:32:56:
                    2a:fe:bc:08:10:51:d1:2b:27:4f:62:0c:e0:33:1b:
                    2f:ab:38:ba:fe:65:58:56:9d:72:4a:c6:2f:69:a3:
                    a7:2d:9b:e8:39:df:b4:d6:bb:da:7c:6e:a1:f4:63:
                    f0:cc:1a:d8:64:6a:73:79:37:23:69:f4:9a:2f:92:
                    28:e6:83:7e:b5:72:70:19:1a:94:e0:5f:16:ec:89:
                    5e:8b:a7:5b:32:46:b8:bc:2d:fe:b0:6a:d4:97:15:
                    87:5c:0d:97:88:f9:6d:62:93:69:88:e3:f1:f2:4d:
                    8e:d4:64:42:35:f3:9f:8c:8e:12:df:64:14:62:ae:
                    2b:1a:b5:2e:bc:fc:a1:8a:71:f4:51:32:d3:3a:41:
                    df:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:82:0B:D2:AC:C2:7A:6E:44:EC:FB:74:E7:EC:35:BA:EB:2F:7D:45
            X509v3 Authority Key Identifier:
                keyid:B1:D5:9F:FB:E0:0F:E7:A5:A6:E9:BA:33:55:FD:28:DB:94:D7:05:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/B1D59FFBE00FE7A5A6E9BA3355FD28DB94D70590.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1D59FFBE00FE7A5A6E9BA3355FD28DB94D70590.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a383030303a3a2f33332d3333203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:642c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9f:93:a4:2d:07:93:29:6a:20:89:02:b1:46:96:90:91:ef:b9:
         20:83:ab:61:4d:92:2a:4a:de:90:05:6f:bb:76:12:7c:b5:3f:
         95:a5:cd:c3:da:89:9f:0c:40:fc:92:2c:c7:1e:44:3b:4e:37:
         72:d0:98:05:87:8d:04:de:14:7c:83:ad:79:9a:f3:c8:86:c4:
         cc:44:cd:c2:3f:13:f9:df:a6:e1:bf:f1:3d:4b:72:fa:66:09:
         e6:29:c6:37:3b:e7:b8:56:24:7b:a1:74:3c:61:f4:a9:13:b0:
         19:a6:6d:7f:50:27:9f:8e:8f:20:0a:03:e2:c2:1e:03:0a:ae:
         3c:b2:33:bc:75:f5:5e:0c:11:20:a5:80:16:f3:69:e1:bd:9a:
         a8:d9:29:93:e3:58:cb:f0:21:1b:b5:58:80:ae:59:21:fd:42:
         84:d1:f5:49:c0:51:95:c8:2c:f2:ed:f3:7c:c9:3b:55:2f:e3:
         e8:30:d3:62:47:49:8d:ee:bf:7e:9c:59:0e:38:e2:77:f4:6e:
         10:93:6d:dd:d3:fd:d2:10:4e:d7:cf:f1:f4:24:68:e6:82:41:
         c5:7a:74:7d:e6:1c:ae:be:ae:45:2b:03:c1:c7:3d:c3:ff:56:
         b9:2a:fc:f7:6d:1b:6b:26:2c:79:bb:08:a8:65:f5:94:8c:82:
         af:e8:a8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 23:32:24 2024 by rpki-client on console-fra.rpki-client.org