Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a31393a3a2f34382d3438203d3e20323633353431.roa
File:                     323830343a313339383a31393a3a2f34382d3438203d3e20323633353431.roa (raw, json)
Hash identifier:          tE69MARmRuP31MwuP5iBQgIWGAiR+GilGdjdPlT1EOc=
Subject key identifier:   17:23:CF:E6:70:BC:FD:76:34:B8:8A:ED:99:1B:54:BC:BB:E6:9A:2A
Certificate issuer:       /CN=AB6EBC1B7182C64982948DD7B8CB166F20C4649E
Certificate serial:       68377FE29B3313F8AB9482114AD5A4B0664EF729
Authority key identifier: AB:6E:BC:1B:71:82:C6:49:82:94:8D:D7:B8:CB:16:6F:20:C4:64:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a31393a3a2f34382d3438203d3e20323633353431.roa
Signing time:             Tue 11 Jun 2024 18:08:17 +0000
ROA not before:           Tue 11 Jun 2024 18:03:17 +0000
ROA not after:            Tue 10 Jun 2025 18:08:17 +0000
asID:                     263541
IP address blocks:        2804:1398:19::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:37:7f:e2:9b:33:13:f8:ab:94:82:11:4a:d5:a4:b0:66:4e:f7:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB6EBC1B7182C64982948DD7B8CB166F20C4649E
        Validity
            Not Before: Jun 11 18:03:17 2024 GMT
            Not After : Jun 10 18:08:17 2025 GMT
        Subject: CN=1723CFE670BCFD7634B88AED991B54BCBBE69A2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f5:fb:bf:36:70:6d:9b:ba:90:0a:d7:d8:45:
                    f7:3b:fc:25:3d:69:98:44:40:07:81:bf:ea:0b:08:
                    84:72:e2:45:1b:92:52:c8:9b:7b:e9:b6:0e:eb:d0:
                    15:d4:a7:f4:42:19:f9:e7:be:80:d6:17:60:43:c4:
                    ec:ed:6a:b3:88:1f:81:86:c4:d7:97:bc:35:b9:d7:
                    71:88:ea:a3:04:27:1e:79:80:83:ae:fe:94:57:89:
                    3a:d1:a3:24:25:23:08:e0:72:03:2b:f7:48:7e:6a:
                    5e:fe:33:0d:f9:23:87:57:c2:60:f7:11:21:69:47:
                    8e:f6:16:7a:57:17:92:98:d7:5a:aa:df:a4:18:5d:
                    e4:1f:0d:36:7e:be:bc:a0:a6:5b:fb:bd:44:98:de:
                    bb:dc:37:2a:f4:9e:7d:01:7a:c9:5f:4f:87:6c:23:
                    8a:f0:79:ca:37:92:ef:ec:04:12:87:0b:c8:fc:48:
                    d0:ad:df:b4:4c:1a:dd:96:27:93:45:0e:9a:b3:0b:
                    6a:6f:dd:13:c8:51:c5:a9:c4:5d:56:17:40:ce:b0:
                    9d:94:6a:46:67:f1:b9:e4:3f:0f:86:c8:33:d1:7f:
                    f2:87:d7:f5:ab:3a:25:08:73:e8:43:18:5a:8d:96:
                    97:44:ad:e8:bd:80:86:6f:88:b4:39:18:4c:0d:3e:
                    6d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:23:CF:E6:70:BC:FD:76:34:B8:8A:ED:99:1B:54:BC:BB:E6:9A:2A
            X509v3 Authority Key Identifier:
                keyid:AB:6E:BC:1B:71:82:C6:49:82:94:8D:D7:B8:CB:16:6F:20:C4:64:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a31393a3a2f34382d3438203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1398:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:f0:f5:ec:b0:4c:3a:66:42:04:5e:48:87:d9:37:a2:8c:80:
         eb:9c:42:50:76:33:d2:3e:51:65:7d:a7:98:37:8c:a9:f7:9c:
         3b:69:03:1c:16:03:f5:09:33:78:6d:1d:1e:ad:bd:78:5a:fe:
         62:cf:44:7a:99:39:f8:16:4b:37:fb:38:34:4e:fd:c9:7e:32:
         88:65:4d:de:10:2c:2c:f0:70:23:f0:14:22:94:3a:b6:0c:a0:
         d7:25:95:5b:d6:68:a8:c6:38:d6:16:cf:e4:c7:6d:a2:d7:02:
         9b:3e:7f:58:6a:df:27:47:46:cf:90:bb:db:ae:24:e1:9a:a9:
         fa:2d:a8:ba:d5:66:61:32:88:bd:25:17:46:4f:7b:1f:08:8d:
         53:86:03:56:12:dc:9d:45:8e:83:f2:88:80:e0:eb:6a:75:40:
         43:b1:96:61:b8:b3:59:4e:5a:87:3f:5a:7d:7b:8b:06:aa:4b:
         b0:0d:6f:70:84:f5:56:1f:84:46:82:c6:ed:39:1d:40:8a:8f:
         8c:2f:b6:3e:bb:4d:c8:2e:65:e2:f9:c6:e9:6b:c4:f2:bf:ce:
         39:42:ca:c1:88:e5:b4:4b:84:89:28:31:8e:35:a1:1f:ea:28:
         41:77:78:88:79:f7:a5:5f:51:28:17:5f:5b:ba:df:8f:64:3e:
         38:35:fc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 19:49:08 2024 by rpki-client on console-ams.rpki-client.org