Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a343030303a3a2f33342d3334203d3e20323732353636.roa
File:                     323830343a383533633a343030303a3a2f33342d3334203d3e20323732353636.roa (raw, json)
Hash identifier:          pVa5xl7LgArEwPijfN2vYDHPO2pRPMTHpM2JRKxLyUo=
Subject key identifier:   EC:19:8C:C6:A4:EA:35:01:3B:B4:E4:E5:2D:03:92:35:FD:B2:0F:24
Certificate issuer:       /CN=BC166A864414ADD4DCD8CDB1ACBB6C48E8CF6A73
Certificate serial:       4C93EA5FC0846029D97A1E060BABBE8B392A8A43
Authority key identifier: BC:16:6A:86:44:14:AD:D4:DC:D8:CD:B1:AC:BB:6C:48:E8:CF:6A:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC166A864414ADD4DCD8CDB1ACBB6C48E8CF6A73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a343030303a3a2f33342d3334203d3e20323732353636.roa
Signing time:             Wed 10 Jul 2024 13:59:32 +0000
ROA not before:           Wed 10 Jul 2024 13:54:32 +0000
ROA not after:            Wed 09 Jul 2025 13:59:32 +0000
asID:                     272566
IP address blocks:        2804:853c:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:93:ea:5f:c0:84:60:29:d9:7a:1e:06:0b:ab:be:8b:39:2a:8a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC166A864414ADD4DCD8CDB1ACBB6C48E8CF6A73
        Validity
            Not Before: Jul 10 13:54:32 2024 GMT
            Not After : Jul  9 13:59:32 2025 GMT
        Subject: CN=EC198CC6A4EA35013BB4E4E52D039235FDB20F24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d2:7a:81:44:25:12:f4:7e:b0:2b:49:2e:ba:
                    1e:15:5b:c5:cb:34:4c:03:7a:80:d4:3e:66:ab:bf:
                    bf:18:db:82:e8:11:eb:e5:bc:bb:30:c7:ac:f2:de:
                    88:e4:18:7e:b0:45:8b:2a:36:38:f7:51:68:a1:05:
                    68:9f:a5:24:31:82:0d:2e:b7:71:fd:2b:e1:b2:71:
                    9c:f2:db:41:d4:87:f4:a2:53:9b:ca:4b:8d:5f:3f:
                    5c:8d:d6:a8:f7:86:f0:1a:2a:3c:25:2e:75:b4:b5:
                    cd:6a:0a:d5:55:89:e8:de:5e:57:64:ce:57:cd:0f:
                    2d:f2:11:8f:ba:fe:91:eb:71:da:b0:58:ac:c9:cd:
                    6f:4f:90:99:48:06:af:55:14:b7:23:a6:54:5f:db:
                    87:62:23:25:50:fb:55:63:b6:d7:f3:fa:40:8c:bc:
                    2e:57:bf:5b:4c:ae:cb:de:db:3a:64:e8:0a:c7:32:
                    59:e7:6c:5f:0d:f3:44:1e:0d:a4:0a:0c:a5:08:6d:
                    64:70:bd:58:2a:fb:13:c4:08:20:53:ed:4a:65:1f:
                    fd:14:05:42:c9:aa:78:15:10:49:7b:d5:ba:2a:88:
                    db:9b:e7:14:41:dd:a5:bc:a6:45:cd:66:af:ba:e8:
                    0c:b8:c0:02:f0:cd:08:47:6d:47:8d:56:b7:68:b0:
                    56:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:19:8C:C6:A4:EA:35:01:3B:B4:E4:E5:2D:03:92:35:FD:B2:0F:24
            X509v3 Authority Key Identifier:
                keyid:BC:16:6A:86:44:14:AD:D4:DC:D8:CD:B1:AC:BB:6C:48:E8:CF:6A:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/BC166A864414ADD4DCD8CDB1ACBB6C48E8CF6A73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC166A864414ADD4DCD8CDB1ACBB6C48E8CF6A73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a343030303a3a2f33342d3334203d3e20323732353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:853c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6e:4f:5a:ca:1c:15:c2:20:ac:3a:be:c7:46:fb:a1:7c:84:5c:
         8f:14:7e:11:45:65:1a:6c:70:73:6f:03:b0:07:bb:6f:9f:26:
         a5:9a:fc:37:c7:3d:54:73:1f:eb:e1:32:e1:67:ca:ac:5c:ed:
         75:b8:c2:58:32:0a:4f:9e:90:ba:6b:42:2e:1f:53:91:26:dc:
         2f:80:00:c0:1c:c3:34:e2:7e:b2:68:05:27:b2:1e:04:37:66:
         3f:c6:ed:6f:1a:d9:de:9b:10:f4:ec:8b:e5:4b:3a:13:44:47:
         b7:e1:88:b4:a9:c2:0b:b0:3d:ca:72:9a:6c:fe:58:c0:09:3f:
         33:fa:b4:5c:8d:76:b1:52:5b:95:e7:e0:b2:d8:0c:74:da:43:
         59:08:fd:02:0b:e8:9e:ad:27:a9:42:bb:61:33:4c:68:9c:45:
         03:50:8d:38:17:51:4a:68:25:8d:d3:b8:32:84:6a:fc:2f:15:
         44:ef:ac:df:98:d8:a8:c7:32:02:78:8c:bc:19:40:9d:e5:62:
         6a:68:9c:6e:50:4e:f1:54:6a:3c:ff:ca:c2:85:7b:1a:cb:64:
         71:cd:7e:23:ed:99:41:29:80:31:11:b9:27:70:36:d6:4f:e0:
         89:5a:c5:16:7e:00:8e:7a:29:c0:e8:61:6f:d8:09:f0:88:bc:
         99:1f:63:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 05:17:28 2024 by rpki-client on console-fra.rpki-client.org