Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/323830343a343063303a383030303a3a2f33332d3333203d3e20323635393739.roa
File:                     323830343a343063303a383030303a3a2f33332d3333203d3e20323635393739.roa (raw, json)
Hash identifier:          wxfbDlM53qNtlEAnnOt6Otp8qXZPQyREg+A3sBqhPhQ=
Subject key identifier:   EF:43:8C:3C:46:BC:61:F2:CB:6F:BC:3E:D8:9A:2D:31:4A:A6:54:42
Certificate issuer:       /CN=F866341C2B2DD5819D80AB45E2B0E6754E0C7682
Certificate serial:       462AB59A353C69F381F15C0E4F5C15113EBC1D7E
Authority key identifier: F8:66:34:1C:2B:2D:D5:81:9D:80:AB:45:E2:B0:E6:75:4E:0C:76:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/323830343a343063303a383030303a3a2f33332d3333203d3e20323635393739.roa
Signing time:             Mon 06 May 2024 14:46:13 +0000
ROA not before:           Mon 06 May 2024 14:41:13 +0000
ROA not after:            Mon 05 May 2025 14:46:13 +0000
asID:                     265979
IP address blocks:        2804:40c0:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:2a:b5:9a:35:3c:69:f3:81:f1:5c:0e:4f:5c:15:11:3e:bc:1d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F866341C2B2DD5819D80AB45E2B0E6754E0C7682
        Validity
            Not Before: May  6 14:41:13 2024 GMT
            Not After : May  5 14:46:13 2025 GMT
        Subject: CN=EF438C3C46BC61F2CB6FBC3ED89A2D314AA65442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3d:f7:cc:6b:69:21:e8:0b:3b:6f:d6:3d:8e:
                    72:52:62:58:df:91:42:07:ed:dc:58:7a:bb:75:56:
                    18:91:86:e7:d9:b4:68:c9:8e:f1:5f:05:c3:f7:6d:
                    e6:45:e7:32:8b:7c:da:94:83:04:a5:5a:66:ee:07:
                    88:6b:19:a9:38:d0:08:e7:0b:35:30:2e:9e:92:ca:
                    6d:e3:b5:e0:9e:20:29:51:cb:1f:9b:11:b7:c8:01:
                    81:09:2e:bf:20:4c:82:16:11:ec:35:2f:25:8e:85:
                    15:37:2c:03:5d:61:99:85:33:20:b6:42:43:cc:a3:
                    59:44:40:a4:1a:77:da:ba:54:9d:f8:42:03:cc:d6:
                    22:e6:54:28:4a:8e:3e:65:37:8b:fa:ba:ed:b7:c9:
                    8c:b6:c0:ea:9c:17:0f:8d:02:04:a1:a9:b3:d2:6c:
                    23:fe:46:cb:0d:c7:7f:18:63:26:ae:c8:6a:3a:12:
                    3e:f4:ba:d8:d5:a0:34:03:a0:51:e2:87:a4:fd:f4:
                    80:cc:ba:5d:2a:a9:a9:bb:3c:55:1e:75:94:a0:1a:
                    be:79:e0:1b:24:90:bb:96:a8:e0:77:d7:12:22:ca:
                    71:cb:53:b7:7b:a7:28:bd:b3:fa:a7:fc:71:3b:4f:
                    d8:ce:71:71:03:42:3c:e6:15:89:41:69:01:9e:b2:
                    71:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:43:8C:3C:46:BC:61:F2:CB:6F:BC:3E:D8:9A:2D:31:4A:A6:54:42
            X509v3 Authority Key Identifier:
                keyid:F8:66:34:1C:2B:2D:D5:81:9D:80:AB:45:E2:B0:E6:75:4E:0C:76:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/323830343a343063303a383030303a3a2f33332d3333203d3e20323635393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40c0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         77:ce:ce:a8:44:5c:62:a7:be:11:af:1f:56:98:a7:e5:5f:ca:
         32:f6:ea:25:a2:79:dd:f9:f5:24:94:15:3b:f7:27:a2:d1:c5:
         bc:8f:6a:36:2e:1a:8a:10:f4:1c:67:4a:28:15:3a:4e:a7:45:
         be:e4:13:56:3d:a4:52:96:f0:50:89:cc:13:7a:7c:94:81:f7:
         1a:3a:09:a5:fa:06:d8:16:1a:e9:d0:0c:d8:10:a1:b3:74:55:
         30:50:ac:93:9f:36:b4:a6:47:7c:1c:11:a5:ea:a3:88:a0:91:
         d3:17:b7:63:57:c1:e5:2d:38:4e:11:90:c5:ad:2c:85:10:d0:
         0f:f5:99:ad:ea:3f:1e:35:a4:4d:66:a0:d1:92:a3:90:6d:1b:
         ce:44:e0:96:61:ba:e2:ee:46:b2:09:78:88:bf:0f:30:40:5b:
         2a:47:2f:92:c4:7a:0e:b3:4f:65:7e:de:b5:f7:7b:36:e1:19:
         52:4c:64:46:74:11:1c:35:c1:6c:0f:79:03:1d:f5:f9:fb:5a:
         d5:67:61:20:48:27:7e:96:6b:fc:a8:6a:db:f8:43:79:bd:68:
         ee:c1:bf:71:65:e0:98:84:6e:94:17:61:dd:54:4f:a8:3a:4e:
         c1:ea:a8:66:02:74:f8:56:05:d5:ab:45:1c:0a:82:63:bb:41:
         d5:b7:0d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:36:00 2024 by rpki-client on console-ams.rpki-client.org