Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a3a2f33332d3333203d3e20323732353636.roa
File:                     323830343a383533633a3a2f33332d3333203d3e20323732353636.roa (raw, json)
Hash identifier:          NjrDY216o+8mnuTa71Iejxl7QxXJOIuNZkZwZLV5z58=
Subject key identifier:   FA:F9:10:00:CF:54:C2:A8:93:F4:9D:D3:AF:16:1B:C0:98:DF:C7:0D
Certificate issuer:       /CN=BC166A864414ADD4DCD8CDB1ACBB6C48E8CF6A73
Certificate serial:       1EA79CDEC2CFA6A4662A52E3E5BDB7A4B613F76F
Authority key identifier: BC:16:6A:86:44:14:AD:D4:DC:D8:CD:B1:AC:BB:6C:48:E8:CF:6A:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC166A864414ADD4DCD8CDB1ACBB6C48E8CF6A73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a3a2f33332d3333203d3e20323732353636.roa
Signing time:             Wed 10 Jul 2024 13:59:32 +0000
ROA not before:           Wed 10 Jul 2024 13:54:32 +0000
ROA not after:            Wed 09 Jul 2025 13:59:32 +0000
asID:                     272566
IP address blocks:        2804:853c::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a7:9c:de:c2:cf:a6:a4:66:2a:52:e3:e5:bd:b7:a4:b6:13:f7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC166A864414ADD4DCD8CDB1ACBB6C48E8CF6A73
        Validity
            Not Before: Jul 10 13:54:32 2024 GMT
            Not After : Jul  9 13:59:32 2025 GMT
        Subject: CN=FAF91000CF54C2A893F49DD3AF161BC098DFC70D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:00:9c:33:8a:97:6a:de:95:0d:52:db:43:be:
                    0d:1d:26:71:92:5d:83:cb:9e:89:49:e2:0f:7a:6d:
                    8d:9c:c1:78:32:e0:ff:70:21:a8:36:df:b1:f8:a1:
                    c1:26:d7:63:cf:03:c7:57:8f:b1:8a:89:4b:01:f9:
                    1d:4d:f6:e7:f1:92:c3:95:d1:4b:67:99:06:6b:88:
                    92:0f:58:8a:4d:5c:07:dc:b4:ec:04:05:f9:c0:85:
                    6c:07:80:14:54:65:37:b3:79:bc:4f:cf:08:93:f3:
                    41:32:9e:04:55:34:d9:59:05:00:21:8b:08:1a:33:
                    c6:58:56:68:68:c9:e7:4d:b0:1c:d8:6a:cb:0f:a6:
                    ae:32:f0:ae:a0:47:30:6b:ab:4e:a3:8d:ca:d5:c0:
                    c1:f6:72:0b:cf:35:91:4c:d2:9c:75:be:53:18:81:
                    12:d0:5a:8c:f6:ff:ba:88:e5:bb:f5:75:b2:c5:db:
                    e0:c8:fd:1c:aa:4d:0b:61:78:50:aa:1b:f9:08:03:
                    3e:90:3b:6b:fe:d4:f0:32:48:7c:f2:3d:33:26:7c:
                    8d:52:69:41:52:cc:07:d5:75:1c:1e:14:eb:6f:13:
                    f6:b0:8a:94:38:cd:40:45:67:b2:3e:77:73:7e:23:
                    59:4a:48:d8:6d:84:c4:0d:9e:ae:cd:ac:3b:6f:62:
                    f9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F9:10:00:CF:54:C2:A8:93:F4:9D:D3:AF:16:1B:C0:98:DF:C7:0D
            X509v3 Authority Key Identifier:
                keyid:BC:16:6A:86:44:14:AD:D4:DC:D8:CD:B1:AC:BB:6C:48:E8:CF:6A:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/BC166A864414ADD4DCD8CDB1ACBB6C48E8CF6A73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC166A864414ADD4DCD8CDB1ACBB6C48E8CF6A73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a3a2f33332d3333203d3e20323732353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:853c::/33

    Signature Algorithm: sha256WithRSAEncryption
         18:51:a2:23:c9:5a:f1:0a:4e:42:93:aa:62:7e:68:9e:54:74:
         be:d7:a4:f8:cc:65:25:38:ff:ad:a9:44:b1:08:19:f1:a2:3d:
         26:07:c7:6f:6f:b5:c2:21:6b:76:2f:19:4e:b0:6f:26:a9:82:
         19:b8:aa:09:40:ce:38:e2:29:2a:0a:5a:0e:5d:ee:18:a4:ae:
         55:08:49:0d:5a:24:43:bf:2d:92:24:65:d7:80:0f:9f:e0:46:
         e3:10:39:45:45:e5:87:41:9d:b0:a9:0b:2e:92:9d:fb:53:18:
         52:8e:3f:87:a8:a9:1e:24:e1:b2:74:32:e7:69:58:05:a1:82:
         2c:36:30:33:d6:c1:9f:e4:81:e1:37:1f:61:80:ad:31:89:f4:
         d1:78:92:36:7e:36:bb:08:55:13:23:60:cf:3f:1e:9e:cd:a1:
         7d:c7:49:e5:ac:42:46:f3:be:5c:c7:82:a6:00:4d:39:82:b3:
         cb:0a:3e:3f:7f:18:fc:6d:34:10:73:19:92:4d:bb:10:f0:52:
         07:c3:e7:3f:71:fc:25:a5:de:a9:31:fa:9a:ce:d9:e0:75:e4:
         8b:b2:5b:25:d4:44:0f:9b:6c:ca:fc:2a:40:1c:09:bc:71:b9:
         f8:12:36:ac:17:f4:f6:a8:31:1a:2b:80:a7:ec:b5:30:7d:76:
         5f:1d:e3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 05:17:28 2024 by rpki-client on console-fra.rpki-client.org