Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a31623a3a2f34382d3438203d3e20323633353431.roa
File:                     323830343a313339383a31623a3a2f34382d3438203d3e20323633353431.roa (raw, json)
Hash identifier:          Y761tASCygNkC+4e1cxuWWEMwG4xAqv69+OdbrRmKD0=
Subject key identifier:   2E:E0:21:CF:4B:40:F0:93:FC:80:25:4C:F1:A2:DF:22:03:62:DA:B1
Certificate issuer:       /CN=AB6EBC1B7182C64982948DD7B8CB166F20C4649E
Certificate serial:       201155F998588A71214DE317C919C0B61C756561
Authority key identifier: AB:6E:BC:1B:71:82:C6:49:82:94:8D:D7:B8:CB:16:6F:20:C4:64:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a31623a3a2f34382d3438203d3e20323633353431.roa
Signing time:             Tue 11 Jun 2024 18:08:33 +0000
ROA not before:           Tue 11 Jun 2024 18:03:33 +0000
ROA not after:            Tue 10 Jun 2025 18:08:33 +0000
asID:                     263541
IP address blocks:        2804:1398:1b::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:11:55:f9:98:58:8a:71:21:4d:e3:17:c9:19:c0:b6:1c:75:65:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB6EBC1B7182C64982948DD7B8CB166F20C4649E
        Validity
            Not Before: Jun 11 18:03:33 2024 GMT
            Not After : Jun 10 18:08:33 2025 GMT
        Subject: CN=2EE021CF4B40F093FC80254CF1A2DF220362DAB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c5:ea:d0:90:39:7e:a7:51:f1:f3:64:14:7f:
                    b4:4a:08:dc:14:14:88:8f:dc:02:64:6d:3d:8b:7c:
                    36:32:4d:42:f3:4c:b7:1d:49:44:0f:e8:db:c1:53:
                    53:97:80:69:04:6f:be:7e:53:f4:e0:7f:5d:65:5d:
                    54:1a:3a:6c:15:cd:18:2c:d0:77:5d:1d:e5:d5:c9:
                    07:64:23:59:23:f0:3d:90:2e:01:70:88:17:28:2b:
                    4d:c1:63:0d:cd:7f:13:b3:6e:7f:83:5a:a7:56:d0:
                    ad:40:0a:09:77:98:8b:37:61:f5:b8:5a:4d:a3:0f:
                    7b:32:8d:cb:4c:71:c2:0f:59:3d:90:05:1c:e1:37:
                    d4:dc:cc:66:d9:de:e7:7f:87:2c:09:d5:27:2b:2a:
                    5d:37:5a:e3:01:25:4c:df:10:b0:83:51:d3:34:38:
                    c0:b8:01:5f:70:6f:37:d7:9b:5f:5f:70:23:17:f8:
                    bc:e1:08:70:88:8e:95:ec:ab:45:f1:03:58:3d:de:
                    17:85:5f:84:10:93:68:61:ed:af:d0:42:cd:4e:7e:
                    59:28:08:9d:d4:96:78:8b:c7:b3:50:1f:20:bf:70:
                    86:96:cd:4a:03:74:68:90:8a:98:e3:ab:9a:a4:92:
                    4d:71:ea:15:9d:7f:39:a2:06:45:6c:d1:81:ac:ba:
                    9c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E0:21:CF:4B:40:F0:93:FC:80:25:4C:F1:A2:DF:22:03:62:DA:B1
            X509v3 Authority Key Identifier:
                keyid:AB:6E:BC:1B:71:82:C6:49:82:94:8D:D7:B8:CB:16:6F:20:C4:64:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6EBC1B7182C64982948DD7B8CB166F20C4649E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a31623a3a2f34382d3438203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1398:1b::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:fc:61:46:f4:de:97:99:9b:ce:fb:9e:a8:fd:71:a2:3d:11:
         6b:9b:c0:3b:61:22:17:cb:27:4c:e3:c8:0d:01:5a:81:1e:83:
         e1:da:93:3e:75:c8:e4:13:f0:39:6d:29:71:ca:01:00:cb:cf:
         71:af:5c:9d:ad:d0:71:3d:83:71:41:89:f6:e2:fc:62:2b:cc:
         03:72:66:ca:d0:66:bb:e7:2a:a5:2a:cb:f9:da:f8:19:91:c0:
         45:67:fc:4f:09:1b:28:ba:39:7e:54:4b:f6:98:ac:f3:7d:89:
         48:e6:0a:35:cc:b2:a2:91:e8:98:4e:b0:8d:bd:f3:22:20:7d:
         94:65:6c:29:ed:b2:02:2b:56:d6:5e:35:61:2a:79:99:73:b5:
         ad:a8:53:87:42:a5:93:2f:00:71:c5:9d:c0:1a:0e:d1:a2:b1:
         6a:6e:f7:f3:db:55:09:01:23:23:61:b8:85:ab:48:e0:2e:46:
         9d:ec:ef:aa:49:f8:5a:3d:17:f4:7b:01:9c:d0:08:2f:54:a4:
         ec:69:1a:81:86:d3:b1:30:cc:61:12:5b:44:52:53:4c:cf:d4:
         b0:d2:12:fd:10:78:45:0b:48:86:5a:df:5f:54:fc:a5:fa:1b:
         47:19:a2:cc:bf:04:6d:01:62:2d:6e:55:a6:c7:51:77:7a:33:
         4a:b6:c4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 19:38:55 2024 by rpki-client on console-fra.rpki-client.org