Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/323830343a383533633a3a2f33342d3334203d3e20323732353636.roa
File:                     323830343a383533633a3a2f33342d3334203d3e20323732353636.roa (raw, json)
Hash identifier:          M7p8EKUb6s5J/NBk13aep+5CaaCH1t0xrUxzjGseZPI=
Subject key identifier:   9E:F9:FE:A0:84:C1:4A:A5:13:C2:F7:A5:68:46:F2:6C:BA:04:76:71
Certificate issuer:       /CN=20EE33C957E1A859D49A5E411C799465085E928F
Certificate serial:       7E2A074655E42BC045331A5CA9F5079B62709BC0
Authority key identifier: 20:EE:33:C9:57:E1:A8:59:D4:9A:5E:41:1C:79:94:65:08:5E:92:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EE33C957E1A859D49A5E411C799465085E928F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/323830343a383533633a3a2f33342d3334203d3e20323732353636.roa
Signing time:             Tue 23 Apr 2024 22:16:34 +0000
ROA not before:           Tue 23 Apr 2024 22:11:34 +0000
ROA not after:            Tue 22 Apr 2025 22:16:34 +0000
asID:                     272566
IP address blocks:        2804:853c::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2a:07:46:55:e4:2b:c0:45:33:1a:5c:a9:f5:07:9b:62:70:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20EE33C957E1A859D49A5E411C799465085E928F
        Validity
            Not Before: Apr 23 22:11:34 2024 GMT
            Not After : Apr 22 22:16:34 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:69:01:c1:c6:28:d2:25:b0:ee:14:18:82:97:
                    79:d1:9e:0d:98:d3:9c:48:2d:57:0b:a9:91:5a:89:
                    fc:00:8e:5c:da:98:49:b0:2c:7f:79:22:10:ec:11:
                    f1:c1:93:3e:a5:f5:76:9d:9c:dc:eb:1a:80:dc:3e:
                    ba:71:72:8c:e3:5a:b7:82:f9:3d:c2:ef:41:b0:69:
                    bb:25:ad:28:97:62:7d:7c:51:d5:24:30:a4:c5:d4:
                    44:75:10:3c:fd:03:b9:60:fc:e4:f1:a5:6d:b9:52:
                    e8:99:7e:89:f8:47:32:3c:cb:38:32:28:fa:7f:7a:
                    88:dd:9d:67:e0:22:0c:88:96:71:26:a3:3b:ec:c6:
                    2f:4a:8f:35:11:fa:f2:1e:9c:a7:5d:2d:d4:00:ee:
                    2a:e3:28:2c:9b:b1:d5:67:21:49:d3:d0:84:68:1d:
                    07:c2:97:43:cf:fc:b5:73:bb:25:45:89:53:47:bf:
                    56:82:9b:69:f2:7e:0c:df:e1:38:78:be:f1:40:6f:
                    48:8c:1a:af:1a:d8:3c:12:9f:78:3d:aa:bb:71:d5:
                    88:74:64:7d:4b:89:db:da:29:5f:c5:0a:ef:54:6c:
                    85:8b:49:ae:21:1c:62:1e:81:04:22:f5:9f:58:f1:
                    c2:54:9e:e6:04:89:ad:6a:f5:d2:0d:61:c7:b9:5d:
                    8d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F9:FE:A0:84:C1:4A:A5:13:C2:F7:A5:68:46:F2:6C:BA:04:76:71
            X509v3 Authority Key Identifier:
                keyid:20:EE:33:C9:57:E1:A8:59:D4:9A:5E:41:1C:79:94:65:08:5E:92:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/20EE33C957E1A859D49A5E411C799465085E928F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EE33C957E1A859D49A5E411C799465085E928F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/323830343a383533633a3a2f33342d3334203d3e20323732353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:853c::/34

    Signature Algorithm: sha256WithRSAEncryption
         e9:f1:6a:7b:18:51:88:ce:ce:40:2b:e6:2c:71:ab:ef:cc:e7:
         30:8d:f6:09:67:0a:6f:2d:63:05:bb:90:b4:a5:91:be:b8:8e:
         a4:fc:9c:02:94:d3:74:5a:7b:9d:e5:e9:03:88:c6:fa:1b:c4:
         b8:69:81:8e:ac:53:f2:d8:d2:35:20:81:ca:a4:4d:b0:e3:9f:
         e1:77:33:d3:68:c0:ee:6f:ff:63:30:c0:fb:83:34:70:df:50:
         96:e2:d5:4a:04:f4:54:c0:58:69:ca:7c:0a:a9:05:dc:68:3d:
         f3:6b:5e:01:8b:c3:e9:cd:2b:b2:2a:be:a1:80:4f:c0:3e:77:
         3b:ac:cc:ed:bb:80:1a:75:69:1f:ae:3a:c1:8a:ee:79:a4:b3:
         a6:f9:45:ce:79:95:0f:7c:97:6c:b8:83:ab:a6:7b:03:94:a1:
         fc:4e:3c:1b:ca:a4:9e:b2:98:d9:23:54:61:4f:66:74:7d:ff:
         ae:10:32:2a:6e:98:46:f8:c2:3e:2e:34:25:94:83:f8:0a:b7:
         7f:78:26:95:b7:ae:46:63:10:4d:18:1e:12:09:0e:bf:e1:3a:
         6b:b4:4e:4e:6f:06:be:26:7d:41:a6:d2:40:63:dc:a1:26:e4:
         90:d0:5f:fb:0a:b6:17:c4:bc:a7:77:33:58:5c:a9:bf:ed:79:
         ed:6c:c0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 03:59:08 2024 by rpki-client on console-fra.rpki-client.org