Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/323830343a353536633a3a2f33332d3333203d3e20323637393334.roa
File:                     323830343a353536633a3a2f33332d3333203d3e20323637393334.roa (raw, json)
Hash identifier:          RRtqlsy0WkGvV0pW9EQrQb5TYY3+yPfCb1VPuO1zxdk=
Subject key identifier:   0F:F3:46:0B:A7:64:37:AF:B4:F2:B8:DD:D7:B7:4B:20:96:17:B0:F8
Certificate issuer:       /CN=3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B
Certificate serial:       15975FFDBB79798A7F6DE6307DAF49FB973DF88D
Authority key identifier: 3F:AF:66:8A:2A:7B:49:E1:C5:1B:F4:8C:7C:EA:FB:6F:AC:37:57:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/323830343a353536633a3a2f33332d3333203d3e20323637393334.roa
Signing time:             Thu 04 Apr 2024 19:03:22 +0000
ROA not before:           Thu 04 Apr 2024 18:58:22 +0000
ROA not after:            Thu 03 Apr 2025 19:03:22 +0000
asID:                     267934
IP address blocks:        2804:556c::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:97:5f:fd:bb:79:79:8a:7f:6d:e6:30:7d:af:49:fb:97:3d:f8:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B
        Validity
            Not Before: Apr  4 18:58:22 2024 GMT
            Not After : Apr  3 19:03:22 2025 GMT
        Subject: CN=0FF3460BA76437AFB4F2B8DDD7B74B209617B0F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d6:56:9a:15:c5:63:5d:fe:01:1e:9c:8d:ea:
                    bf:88:18:69:e0:e9:73:dc:a7:1f:5e:5d:35:dc:c5:
                    2a:47:4f:72:f9:dd:89:e0:29:6b:1d:31:0d:f5:39:
                    64:4c:ca:0e:6b:44:cf:a2:98:66:8c:ac:1e:c7:ab:
                    fb:39:b0:fb:44:13:b7:9f:d6:3c:d0:5f:55:10:10:
                    2c:ba:32:74:39:82:02:4a:0b:da:0f:83:b6:18:42:
                    82:7f:8a:86:70:5a:a7:c8:b0:00:a9:f7:13:dc:33:
                    a2:ff:95:cd:8c:0f:6b:1d:bb:2c:b9:f8:90:e6:be:
                    e2:f9:8c:7c:42:f9:db:2a:3d:5c:36:b0:64:38:87:
                    74:c8:54:57:09:99:97:93:35:3c:13:9e:4d:f5:75:
                    1a:71:52:45:cf:e7:7b:a0:8f:16:77:bd:af:3b:14:
                    5d:4d:79:b0:da:8d:6f:63:5d:5d:8b:66:17:fc:9f:
                    a3:ce:57:22:63:d3:2e:9f:b8:d6:bd:33:a7:f2:b9:
                    9e:6e:de:b2:b6:3e:ad:74:6c:5a:f9:eb:26:60:25:
                    55:90:0b:2a:18:34:a0:3c:2c:bd:36:c1:fc:e6:4e:
                    bf:3b:a0:57:44:2a:20:38:20:cd:04:ea:c2:da:26:
                    de:84:9f:d2:ce:ec:21:65:48:a0:60:4d:05:f3:69:
                    5d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F3:46:0B:A7:64:37:AF:B4:F2:B8:DD:D7:B7:4B:20:96:17:B0:F8
            X509v3 Authority Key Identifier:
                keyid:3F:AF:66:8A:2A:7B:49:E1:C5:1B:F4:8C:7C:EA:FB:6F:AC:37:57:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/323830343a353536633a3a2f33332d3333203d3e20323637393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:556c::/33

    Signature Algorithm: sha256WithRSAEncryption
         78:e5:d9:27:a7:6a:65:a2:db:5b:5f:f1:7e:b3:45:ab:6b:f6:
         40:aa:98:a1:86:4d:bb:e3:9a:79:c0:88:7b:73:fc:3c:92:87:
         be:a5:4b:f9:f4:61:18:b9:44:be:7c:ff:3f:d5:78:ca:d4:23:
         8f:91:63:c6:04:36:9b:85:dc:d6:4a:39:42:fe:de:86:2e:ca:
         f7:d7:29:a4:81:a0:fd:22:18:99:9d:e4:fa:c9:23:7e:c2:ec:
         49:ae:e7:88:6a:13:71:8a:46:b3:5c:5d:42:bd:3a:c8:ac:78:
         90:14:08:93:f2:8f:e9:c2:3b:09:cc:2c:f6:f9:76:be:c0:8b:
         61:0a:f1:c6:f3:f5:a3:d9:ce:3f:4f:8e:11:36:60:b6:bd:4c:
         37:23:3e:2c:c1:9e:b9:97:eb:45:b9:b1:13:e0:a7:c0:e5:97:
         65:01:d5:5f:2b:c4:8e:98:ae:ec:1f:d9:2f:0d:98:5c:76:51:
         99:a9:f6:87:7a:05:29:5f:90:8f:94:62:f6:0c:f8:10:76:39:
         66:15:e6:45:01:98:7c:85:da:c5:fa:5e:16:2a:76:43:3a:44:
         ca:a1:62:46:50:94:3c:11:55:64:b7:fc:5e:ca:e3:0e:29:a0:
         7a:fc:5d:77:01:0d:f3:3a:6c:6d:60:40:06:92:52:bd:72:2b:
         a9:fb:ef:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 12:33:45 2024 by rpki-client on console-ams.rpki-client.org