Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a3a2f33342d3334203d3e20323732353636.roa
File:                     323830343a383533633a3a2f33342d3334203d3e20323732353636.roa (raw, json)
Hash identifier:          uWhQu5Ox1L2v6HrJPvYZBmdH1STB77yb95ZL4PTi50o=
Subject key identifier:   AA:8A:2D:FB:6D:62:C0:4B:96:A5:85:15:2F:5F:7F:96:D0:54:4F:C7
Certificate issuer:       /CN=BC166A864414ADD4DCD8CDB1ACBB6C48E8CF6A73
Certificate serial:       1562E1D53B023DC010895D4DE2D538984DE8FC8A
Authority key identifier: BC:16:6A:86:44:14:AD:D4:DC:D8:CD:B1:AC:BB:6C:48:E8:CF:6A:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC166A864414ADD4DCD8CDB1ACBB6C48E8CF6A73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a3a2f33342d3334203d3e20323732353636.roa
Signing time:             Wed 10 Jul 2024 13:59:33 +0000
ROA not before:           Wed 10 Jul 2024 13:54:33 +0000
ROA not after:            Wed 09 Jul 2025 13:59:33 +0000
asID:                     272566
IP address blocks:        2804:853c::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:62:e1:d5:3b:02:3d:c0:10:89:5d:4d:e2:d5:38:98:4d:e8:fc:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC166A864414ADD4DCD8CDB1ACBB6C48E8CF6A73
        Validity
            Not Before: Jul 10 13:54:33 2024 GMT
            Not After : Jul  9 13:59:33 2025 GMT
        Subject: CN=AA8A2DFB6D62C04B96A585152F5F7F96D0544FC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b7:26:f6:91:e9:6c:b5:47:f8:71:e1:b6:a6:
                    6c:88:25:c7:d5:41:c2:d2:40:e7:3b:5c:8f:78:e8:
                    aa:cf:8d:87:bd:55:a6:86:e0:87:ef:b1:30:fe:c1:
                    59:db:df:9c:3a:9e:f4:6e:c1:34:6e:2e:4f:b3:8d:
                    1a:4d:de:b7:d7:c3:0b:53:d6:ee:1b:fa:45:cd:87:
                    4f:0a:17:f8:73:50:5d:a7:a4:fb:6c:44:30:d4:6e:
                    58:cd:0b:b7:3d:b4:0a:24:10:95:6f:67:55:c5:01:
                    f5:1c:cf:99:fc:5d:4a:fa:16:07:cb:71:3d:35:70:
                    4c:8d:f1:a2:77:f1:8d:b0:20:59:4c:1e:bd:6f:07:
                    87:c9:08:e2:15:3b:c1:bb:79:59:8e:fb:d0:50:5a:
                    fc:b4:9d:4a:fe:f4:9a:fb:b4:f6:ad:1a:25:e9:82:
                    e7:9e:3d:84:91:c3:f8:04:12:b1:24:e0:95:4e:3a:
                    f8:66:2d:7a:66:04:ef:8c:0e:f7:65:bd:03:cc:e0:
                    a5:2b:ba:6b:aa:e1:7d:9f:b8:18:36:a5:64:77:b4:
                    1f:9b:d6:ae:2c:3b:e6:6e:ce:6f:42:ae:ad:e4:09:
                    da:2d:07:cc:f9:2c:6d:77:a9:15:f8:00:46:86:d6:
                    39:6e:06:14:b9:cd:7a:92:0d:e1:37:0d:e2:cd:98:
                    75:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8A:2D:FB:6D:62:C0:4B:96:A5:85:15:2F:5F:7F:96:D0:54:4F:C7
            X509v3 Authority Key Identifier:
                keyid:BC:16:6A:86:44:14:AD:D4:DC:D8:CD:B1:AC:BB:6C:48:E8:CF:6A:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/BC166A864414ADD4DCD8CDB1ACBB6C48E8CF6A73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC166A864414ADD4DCD8CDB1ACBB6C48E8CF6A73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a3a2f33342d3334203d3e20323732353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:853c::/34

    Signature Algorithm: sha256WithRSAEncryption
         a5:51:44:50:10:c4:10:c0:7b:7a:e8:ea:90:06:eb:19:cb:41:
         e3:9b:5e:da:0a:b9:5b:05:5c:b0:f5:8a:8b:e6:fc:2b:7a:48:
         6e:b8:bf:ed:37:e1:84:fb:50:fe:af:ab:5f:1f:db:ee:1e:bd:
         09:3e:9b:fe:69:55:b5:1e:08:83:82:90:e9:9c:9b:08:ad:9e:
         35:e1:51:a4:f7:17:53:d2:b9:1c:4d:47:af:50:a3:87:87:de:
         9b:6f:ec:e6:ea:48:cb:48:ee:2c:62:6d:09:ce:0a:57:57:02:
         24:24:20:75:f3:4b:27:a4:68:c3:48:43:e3:d6:e8:65:ed:1f:
         64:61:a5:45:fe:22:44:59:1a:80:e8:db:fa:92:34:84:17:75:
         95:28:45:aa:0f:ce:8b:49:8c:b8:a6:95:45:a9:f6:cc:f5:a0:
         fb:20:96:cc:f7:f2:c4:c4:ad:c8:63:b6:ca:bb:77:4e:40:3e:
         3d:94:52:db:eb:bb:f7:34:81:36:ef:c2:0c:b9:c5:ce:20:79:
         23:16:f2:a4:a8:99:2d:36:c0:d0:09:f2:4b:3c:48:03:8f:ab:
         d9:a1:14:6e:54:e9:d9:d0:63:3c:23:f4:47:6f:a5:a0:4c:f3:
         44:10:86:ed:03:c3:d1:55:97:a0:34:44:a3:d8:bb:58:ea:c0:
         44:ec:63:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 06:28:42 2024 by rpki-client on console-ams.rpki-client.org