Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a633030303a3a2f33342d3334203d3e20323732353636.roa
File:                     323830343a383533633a633030303a3a2f33342d3334203d3e20323732353636.roa (raw, json)
Hash identifier:          BHjVgiI98cPLrtC18f2pSGpS4610+783utHezJc99P4=
Subject key identifier:   00:1B:D2:E2:FB:F2:8C:3F:53:2A:BD:EF:A6:E7:CF:3D:CE:C0:BB:E9
Certificate issuer:       /CN=BC166A864414ADD4DCD8CDB1ACBB6C48E8CF6A73
Certificate serial:       23543694A61B7EB761BAFA6C058DCCD75931F0EA
Authority key identifier: BC:16:6A:86:44:14:AD:D4:DC:D8:CD:B1:AC:BB:6C:48:E8:CF:6A:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC166A864414ADD4DCD8CDB1ACBB6C48E8CF6A73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a633030303a3a2f33342d3334203d3e20323732353636.roa
Signing time:             Wed 10 Jul 2024 13:59:34 +0000
ROA not before:           Wed 10 Jul 2024 13:54:34 +0000
ROA not after:            Wed 09 Jul 2025 13:59:34 +0000
asID:                     272566
IP address blocks:        2804:853c:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:54:36:94:a6:1b:7e:b7:61:ba:fa:6c:05:8d:cc:d7:59:31:f0:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC166A864414ADD4DCD8CDB1ACBB6C48E8CF6A73
        Validity
            Not Before: Jul 10 13:54:34 2024 GMT
            Not After : Jul  9 13:59:34 2025 GMT
        Subject: CN=001BD2E2FBF28C3F532ABDEFA6E7CF3DCEC0BBE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:27:3d:c0:e8:5c:f6:34:c2:af:fe:c6:47:dd:
                    be:33:c4:a7:0d:72:ad:0b:fe:8a:37:06:48:56:b1:
                    d6:9f:cd:6b:4f:2a:81:ed:02:cf:99:cf:b0:7e:d2:
                    e3:b2:ab:08:06:20:d1:3e:6d:bf:a5:be:2f:25:a9:
                    87:18:2d:fe:2b:11:88:3e:57:d8:08:13:c5:93:39:
                    6a:d3:1f:44:63:da:c5:0e:df:18:10:36:4b:e5:4b:
                    af:fe:62:43:bf:27:47:47:13:4c:0b:c8:0c:bc:18:
                    55:2b:9b:18:e8:47:55:e7:e3:7c:1a:88:31:02:fe:
                    6a:ef:bc:c4:48:70:63:22:ba:c9:d7:6d:4a:ef:74:
                    9f:63:f3:19:7c:92:87:88:df:c7:a9:a6:0e:08:8f:
                    e3:12:10:ab:f7:a2:22:c9:c9:e9:d5:40:2c:5d:7f:
                    c8:c9:e8:e9:38:7f:f9:59:35:60:fc:1f:cc:de:0f:
                    9e:32:99:1e:a7:e2:bb:4a:85:ad:6e:f4:7f:5e:14:
                    04:59:ff:49:78:ef:d3:68:94:90:87:e9:1d:99:b8:
                    bb:d2:4b:41:80:b8:72:fa:8c:ac:34:ea:d5:9f:c6:
                    57:7e:19:e2:92:af:c0:54:89:c6:ae:e8:45:9b:78:
                    87:3c:4d:39:78:b7:f9:a9:a2:5a:60:00:3a:0b:5e:
                    19:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1B:D2:E2:FB:F2:8C:3F:53:2A:BD:EF:A6:E7:CF:3D:CE:C0:BB:E9
            X509v3 Authority Key Identifier:
                keyid:BC:16:6A:86:44:14:AD:D4:DC:D8:CD:B1:AC:BB:6C:48:E8:CF:6A:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/BC166A864414ADD4DCD8CDB1ACBB6C48E8CF6A73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC166A864414ADD4DCD8CDB1ACBB6C48E8CF6A73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a633030303a3a2f33342d3334203d3e20323732353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:853c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2b:34:01:0b:b4:1f:66:5b:ee:a3:9b:81:ea:0a:ed:f3:f0:f6:
         45:97:5c:cc:41:2d:64:07:47:8c:79:2a:52:69:29:cd:4c:03:
         66:fd:8d:5e:70:a2:6c:f8:de:b2:20:29:85:19:87:0b:bf:c7:
         39:e8:b6:4f:f6:a4:77:f0:b3:e5:a6:cc:69:53:fa:89:ce:96:
         8f:b1:ce:d4:df:3c:e4:a8:9a:ae:a9:fc:92:26:9c:c0:15:75:
         6b:60:88:c0:ea:88:28:3d:53:6d:69:d2:1b:2b:de:4c:01:7d:
         d0:62:d3:d3:47:63:bb:b8:c6:df:b5:77:48:46:20:fe:a4:3b:
         e5:86:bc:0c:8d:b1:d0:52:10:a3:40:84:25:14:ed:45:7b:89:
         c9:91:28:aa:80:c6:4d:cc:b5:8b:ae:56:20:84:b0:f6:5e:ec:
         84:24:dc:c5:53:49:da:7d:c5:00:95:c7:2d:3e:91:e2:89:4e:
         ff:84:a2:33:3e:80:0a:33:bb:29:b5:d7:0d:c8:8d:e0:59:38:
         bf:e0:a2:a2:9c:50:d0:98:dd:a9:fa:24:02:60:77:84:c0:2f:
         16:6f:e1:8e:1d:10:a2:c4:bd:6c:0b:ef:a8:b2:82:56:81:07:
         db:be:4b:fe:be:3f:a2:40:4d:bc:d2:14:fd:ff:0e:0c:8b:5f:
         ff:99:bb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 06:28:42 2024 by rpki-client on console-ams.rpki-client.org