Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/323830343a343339383a3a2f33322d3438203d3e20323637353738.roa
File:                     323830343a343339383a3a2f33322d3438203d3e20323637353738.roa (raw, json)
Hash identifier:          G/RssWLgJYD3LpMqXlvH9qWEtw7gq7erDGU0phJPvqQ=
Subject key identifier:   3B:DB:A4:E0:18:59:54:91:CA:A4:0D:6E:34:27:7E:62:FB:B0:70:B6
Certificate issuer:       /CN=C54DE33022CD4D3A53CEC70AD26EF7C0CA091205
Certificate serial:       7AACD90399FE5D26F1B96D8281E40EC49FEE44BA
Authority key identifier: C5:4D:E3:30:22:CD:4D:3A:53:CE:C7:0A:D2:6E:F7:C0:CA:09:12:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C54DE33022CD4D3A53CEC70AD26EF7C0CA091205.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/323830343a343339383a3a2f33322d3438203d3e20323637353738.roa
Signing time:             Sat 13 Jul 2024 22:19:49 +0000
ROA not before:           Sat 13 Jul 2024 22:14:49 +0000
ROA not after:            Sat 12 Jul 2025 22:19:49 +0000
asID:                     267578
IP address blocks:        2804:4398::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ac:d9:03:99:fe:5d:26:f1:b9:6d:82:81:e4:0e:c4:9f:ee:44:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C54DE33022CD4D3A53CEC70AD26EF7C0CA091205
        Validity
            Not Before: Jul 13 22:14:49 2024 GMT
            Not After : Jul 12 22:19:49 2025 GMT
        Subject: CN=3BDBA4E018595491CAA40D6E34277E62FBB070B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bf:23:2a:90:ed:4c:b5:1b:ee:e5:dc:6f:f5:
                    a1:b3:38:e9:02:c5:56:af:0e:fc:02:16:63:18:b2:
                    d7:7c:cf:76:b4:97:89:2a:ae:9e:8a:fd:1d:22:e9:
                    61:7e:1c:1c:6a:90:9d:6e:95:d5:53:d3:22:80:ff:
                    cd:81:94:79:3a:42:a9:b2:a2:fc:58:32:a1:2c:cd:
                    40:79:0d:d6:0c:8e:a6:a0:5b:b4:34:f3:cd:00:ce:
                    87:53:60:d5:90:02:dc:78:91:83:bc:45:3d:8c:8d:
                    e6:96:89:ef:6e:bd:bf:9a:48:28:eb:bc:0c:26:0d:
                    71:ef:d7:55:db:47:82:ba:03:22:8c:0a:af:23:6b:
                    81:6b:12:ae:bf:a0:45:ef:e9:a6:99:f2:96:1f:db:
                    ef:78:bf:f8:93:35:6b:46:09:d6:bf:de:35:65:0e:
                    e9:e2:88:d3:8a:27:ee:f3:1a:ac:42:e2:76:26:05:
                    7d:94:d4:ad:12:70:30:41:02:f3:e9:ad:0a:f3:36:
                    37:25:a6:87:f7:76:48:56:0f:00:ed:80:03:86:36:
                    33:bf:5e:83:f0:55:25:94:97:0e:b7:36:ec:94:6f:
                    e0:75:76:fe:06:5c:b1:ec:ae:7a:67:28:68:60:ec:
                    76:36:6b:3d:4a:0a:22:0f:dc:7d:76:06:15:46:c2:
                    81:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:DB:A4:E0:18:59:54:91:CA:A4:0D:6E:34:27:7E:62:FB:B0:70:B6
            X509v3 Authority Key Identifier:
                keyid:C5:4D:E3:30:22:CD:4D:3A:53:CE:C7:0A:D2:6E:F7:C0:CA:09:12:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/C54DE33022CD4D3A53CEC70AD26EF7C0CA091205.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C54DE33022CD4D3A53CEC70AD26EF7C0CA091205.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/323830343a343339383a3a2f33322d3438203d3e20323637353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4398::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:98:e9:58:d2:65:c7:ab:38:e9:12:11:70:17:ed:ce:91:ef:
         59:06:c4:ca:17:d4:f3:ac:15:f4:a9:e7:74:d5:a4:a6:b4:95:
         84:f9:6c:b7:98:ef:ee:c7:de:6f:44:ba:76:c0:64:d6:ee:52:
         fe:61:e1:a3:68:10:f4:06:1d:34:3f:14:e1:db:f3:b9:56:b4:
         3c:e7:16:78:78:0f:b0:6a:7c:f9:ac:a3:72:c8:26:31:95:11:
         da:c0:bb:a8:21:b6:30:d7:a7:5d:0f:c0:1d:ab:0d:22:3c:62:
         33:64:fd:ad:36:e1:02:02:7f:db:c9:54:9a:91:b1:ac:0e:8e:
         19:cb:a9:a3:d4:07:65:59:f3:43:0f:36:af:57:55:2e:7e:fd:
         45:8e:39:41:0d:40:54:69:f7:02:74:63:6e:0d:c0:f0:fa:dd:
         28:99:b7:fe:8f:7a:16:9d:16:fa:04:7c:df:14:4a:0c:ce:a2:
         a6:7b:9e:d0:71:a7:fc:23:de:f7:82:e4:37:9d:e1:bd:26:8e:
         18:4d:82:48:96:01:b1:02:91:3e:30:98:0f:a3:08:e1:de:e3:
         19:b3:0b:94:7a:0b:21:26:6f:1f:ce:e7:fa:07:a9:3f:fc:05:
         9e:d4:5b:29:3e:ea:b0:dd:46:a8:cb:c3:13:36:30:90:52:ec:
         d2:6e:e8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 18:24:54 2024 by rpki-client on console-fra.rpki-client.org