Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/323830343a353536633a383030303a3a2f33332d3333203d3e20323637393334.roa
File:                     323830343a353536633a383030303a3a2f33332d3333203d3e20323637393334.roa (raw, json)
Hash identifier:          vJyVe8t0gIFPykBHv29ExgiNuJp/sXGhG/cfCMgsH40=
Subject key identifier:   15:4C:86:85:1D:E7:23:FB:C8:AB:C1:ED:1F:D7:BA:14:22:11:54:78
Certificate issuer:       /CN=3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B
Certificate serial:       393C4616938F27859C8EF9F661987C0EC0F4C072
Authority key identifier: 3F:AF:66:8A:2A:7B:49:E1:C5:1B:F4:8C:7C:EA:FB:6F:AC:37:57:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/323830343a353536633a383030303a3a2f33332d3333203d3e20323637393334.roa
Signing time:             Thu 04 Apr 2024 19:03:23 +0000
ROA not before:           Thu 04 Apr 2024 18:58:23 +0000
ROA not after:            Thu 03 Apr 2025 19:03:23 +0000
asID:                     267934
IP address blocks:        2804:556c:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:3c:46:16:93:8f:27:85:9c:8e:f9:f6:61:98:7c:0e:c0:f4:c0:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B
        Validity
            Not Before: Apr  4 18:58:23 2024 GMT
            Not After : Apr  3 19:03:23 2025 GMT
        Subject: CN=154C86851DE723FBC8ABC1ED1FD7BA1422115478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a9:bf:c0:42:22:42:13:83:3a:09:b5:b2:fe:
                    c6:b1:7d:f9:ba:f8:cb:0c:5d:ab:d7:98:26:50:0d:
                    d8:a8:07:4f:ba:1c:a2:b0:5a:29:54:d4:1e:3c:1e:
                    b0:9f:b2:bf:6b:2f:18:b0:0b:7c:a3:b1:cf:e3:bb:
                    11:6a:2b:4b:3f:7c:22:db:bc:38:6e:f2:64:7e:48:
                    bb:77:ed:fa:02:c3:9f:20:29:5d:1d:88:fe:2c:f3:
                    a2:fc:1f:b1:53:8f:f2:50:5d:ee:23:c5:e3:5f:0b:
                    7c:58:9e:91:0d:91:cd:67:fb:8f:33:49:cc:cd:ff:
                    c5:4e:7d:02:e2:29:a4:6f:b9:b3:57:cc:84:ce:a7:
                    7f:30:e6:8f:7b:a2:3a:6b:14:57:75:e3:17:6a:54:
                    74:a2:bf:7b:04:c2:91:0d:a6:ed:00:d3:8b:4a:64:
                    7c:31:91:56:9e:64:ad:8e:91:6d:5c:07:24:a1:31:
                    8e:da:fb:6e:a9:54:05:78:a1:dd:d5:34:85:83:92:
                    09:ab:f7:47:18:ba:8c:53:f6:63:34:8c:ab:78:97:
                    84:a7:cf:76:98:57:a8:4c:9d:9b:60:e0:6e:49:70:
                    12:bf:96:20:6a:4c:b1:22:2b:a1:69:c1:84:3e:61:
                    64:a8:de:20:94:db:08:59:33:18:4d:2a:96:00:9d:
                    38:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4C:86:85:1D:E7:23:FB:C8:AB:C1:ED:1F:D7:BA:14:22:11:54:78
            X509v3 Authority Key Identifier:
                keyid:3F:AF:66:8A:2A:7B:49:E1:C5:1B:F4:8C:7C:EA:FB:6F:AC:37:57:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/323830343a353536633a383030303a3a2f33332d3333203d3e20323637393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:556c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         82:19:a5:84:d5:e1:cd:fa:dc:38:5e:65:da:f3:74:84:ce:75:
         8d:be:34:0a:f7:a2:5c:72:77:c9:a2:6a:a4:dd:b7:c3:1d:0a:
         71:d3:1a:b4:12:09:63:da:13:b5:59:4e:e8:71:a5:42:e7:33:
         db:e1:96:67:81:51:82:5e:78:eb:16:6c:58:90:a0:03:47:ea:
         aa:9b:06:72:d2:c7:fa:29:46:f4:7f:d0:6c:a0:61:68:9d:dd:
         be:07:69:4e:29:9d:7a:bd:6e:07:35:da:77:43:18:6f:bc:e0:
         28:8a:10:75:f1:09:35:60:fe:29:56:cd:fa:50:c1:31:e9:1d:
         78:a1:1a:2f:e5:c5:f1:31:23:e3:86:82:78:ae:bb:51:8e:1f:
         ea:47:f8:44:a9:b3:86:5f:06:cd:e1:79:d2:09:32:aa:b7:39:
         59:fb:6e:38:6b:3e:52:d5:07:7c:f9:d0:f7:7d:a7:7c:96:ae:
         b4:4d:93:20:24:15:54:fb:b5:a0:d4:7a:91:42:ee:3d:3f:20:
         65:3b:90:95:31:8c:ba:4d:74:d6:d2:0f:e8:c5:40:74:94:15:
         bd:57:64:09:32:1e:d8:9d:41:7f:58:12:7a:bf:ef:81:a4:ba:
         3c:64:83:7e:27:74:97:79:6f:04:d1:f3:53:8f:9b:3e:35:bc:
         e0:15:a4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 13:09:04 2024 by rpki-client on console-fra.rpki-client.org