Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/323830343a336138383a3a2f33322d3438203d3e20323636303934.roa
File:                     323830343a336138383a3a2f33322d3438203d3e20323636303934.roa (raw, json)
Hash identifier:          gHRFWx6AFvPGkozGuPoURLTxASoVxhPPE1IFJgqkQnU=
Subject key identifier:   8F:82:A2:01:93:19:E7:45:63:90:BB:72:29:AD:76:8F:E9:BC:D9:E4
Certificate issuer:       /CN=68CCA379DB57908B4DA691FC2C9431DE082C3C08
Certificate serial:       ED41F6BF0321DBC27CE5B2A4F252677830D44F
Authority key identifier: 68:CC:A3:79:DB:57:90:8B:4D:A6:91:FC:2C:94:31:DE:08:2C:3C:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CCA379DB57908B4DA691FC2C9431DE082C3C08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/323830343a336138383a3a2f33322d3438203d3e20323636303934.roa
Signing time:             Wed 24 Apr 2024 20:42:18 +0000
ROA not before:           Wed 24 Apr 2024 20:37:18 +0000
ROA not after:            Wed 23 Apr 2025 20:42:18 +0000
asID:                     266094
IP address blocks:        2804:3a88::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ed:41:f6:bf:03:21:db:c2:7c:e5:b2:a4:f2:52:67:78:30:d4:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68CCA379DB57908B4DA691FC2C9431DE082C3C08
        Validity
            Not Before: Apr 24 20:37:18 2024 GMT
            Not After : Apr 23 20:42:18 2025 GMT
        Subject: CN=8F82A2019319E7456390BB7229AD768FE9BCD9E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:39:4a:a3:4e:b6:e8:87:7d:43:fe:d8:b3:72:
                    cb:23:3d:ca:fd:59:76:f3:56:4a:d6:23:ad:c2:05:
                    ee:30:26:b4:01:21:fc:47:5d:5c:a1:75:1b:b3:4f:
                    ae:ff:2a:ee:a2:1d:3b:50:de:53:ca:ce:45:fe:92:
                    6d:a7:d0:44:3b:10:a7:0d:d2:6e:9d:b5:4c:8d:51:
                    02:56:0a:2e:e7:2b:c6:90:6f:a5:3c:36:5e:d7:87:
                    bd:aa:42:93:d6:65:15:2e:90:39:ac:9c:11:9d:9a:
                    9d:d5:6f:30:ac:25:ef:03:12:b9:49:9e:f8:70:03:
                    4f:f2:05:5f:f2:f2:4c:e3:1f:14:7b:b2:3e:cd:91:
                    99:56:2c:7b:55:7f:d4:1d:0e:a6:2e:66:85:5e:69:
                    d3:8a:11:73:2a:9b:23:cd:01:ca:57:fb:3d:15:96:
                    72:2b:df:46:99:54:59:b1:54:b1:4e:7e:40:95:db:
                    9d:54:80:2c:0b:b2:03:14:8b:b1:9e:a7:2e:3f:f8:
                    76:44:64:41:d0:7e:43:3c:ce:66:3b:3e:b7:2f:e8:
                    d7:98:04:5a:f7:b4:3b:98:ed:95:66:f6:a2:77:d2:
                    cd:94:98:1a:3d:59:d3:96:32:0a:4d:41:60:5c:80:
                    10:76:7c:6f:35:98:f5:f4:67:bf:cd:98:64:1f:72:
                    78:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:82:A2:01:93:19:E7:45:63:90:BB:72:29:AD:76:8F:E9:BC:D9:E4
            X509v3 Authority Key Identifier:
                keyid:68:CC:A3:79:DB:57:90:8B:4D:A6:91:FC:2C:94:31:DE:08:2C:3C:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/68CCA379DB57908B4DA691FC2C9431DE082C3C08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CCA379DB57908B4DA691FC2C9431DE082C3C08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/323830343a336138383a3a2f33322d3438203d3e20323636303934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a88::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:59:07:7e:11:ee:c6:8f:da:3b:ae:16:14:f6:27:82:f7:f0:
         48:c8:00:42:6e:15:76:4a:c3:31:29:7e:f2:51:eb:ca:57:90:
         62:38:56:ba:23:59:f5:1e:f6:a2:c1:8a:31:6c:46:1d:a7:a1:
         3e:ce:04:98:ae:4f:f6:95:17:da:6a:06:b0:7a:3d:03:b0:85:
         47:53:8b:29:5d:00:f0:26:c0:c8:10:9f:62:4e:fe:fe:33:fa:
         7e:fc:c3:5b:0c:04:dd:af:bd:95:f2:2d:eb:aa:f0:62:f9:04:
         39:80:49:27:77:19:88:db:88:c1:3e:0e:32:a1:02:b1:21:4c:
         bd:dd:06:1f:2c:eb:d1:48:75:e9:2b:c7:64:ad:3b:2e:0e:23:
         3d:75:7d:e7:34:18:55:5b:4d:78:64:73:32:98:38:63:a8:81:
         0e:48:92:15:ef:4e:f6:f1:38:b9:8a:f5:84:1f:ca:63:2d:bc:
         66:a3:56:f3:6c:ee:12:6c:6b:19:a6:d8:48:18:55:50:61:de:
         8a:47:bf:5d:c4:08:34:2b:d1:47:83:48:aa:08:87:40:7b:1f:
         be:08:7c:8b:7f:72:c2:25:65:32:e3:3b:2c:99:9f:a7:c4:1d:
         a2:f2:55:a6:ee:5e:ca:76:9d:88:36:ec:2e:b5:92:c4:83:df:
         4b:71:f5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 18:41:18 2024 by rpki-client on console-fra.rpki-client.org