Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/323830343a3334303a343030303a3a2f33362d3336203d3e203238313635.roa
File:                     323830343a3334303a343030303a3a2f33362d3336203d3e203238313635.roa (raw, json)
Hash identifier:          XJmKVaJAX5Gqe0MKF7AcvydspX6Mkd43/rCSP3Xfymc=
Subject key identifier:   38:C7:22:D2:BC:5B:75:FE:62:3A:E0:CA:BD:1B:F7:E1:B7:63:55:A4
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       5F34D9F6463AD1EE4867889DC3C1A20742369CD4
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/323830343a3334303a343030303a3a2f33362d3336203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:24 +0000
ROA not before:           Wed 31 Jul 2024 22:20:24 +0000
ROA not after:            Wed 30 Jul 2025 22:25:24 +0000
asID:                     28165
IP address blocks:        2804:340:4000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:34:d9:f6:46:3a:d1:ee:48:67:88:9d:c3:c1:a2:07:42:36:9c:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:24 2024 GMT
            Not After : Jul 30 22:25:24 2025 GMT
        Subject: CN=38C722D2BC5B75FE623AE0CABD1BF7E1B76355A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b0:dd:a1:19:74:ba:78:87:d2:b0:c6:3f:6a:
                    03:d8:6d:0f:c1:1a:03:29:ff:cd:a3:34:29:ba:af:
                    fa:b7:c6:42:38:3b:b9:94:04:dd:71:5c:cb:10:4b:
                    07:d7:28:fc:33:f8:16:a9:84:6b:0a:be:00:fd:6e:
                    31:88:55:44:9f:8b:06:83:76:a8:06:9e:c5:bd:16:
                    7d:bc:0e:76:45:a7:d2:c1:8e:a6:01:20:e4:72:82:
                    c8:71:28:d6:5d:59:bd:88:a1:85:6f:5a:43:b4:5f:
                    9e:54:61:7a:85:79:a5:fa:62:ac:8c:38:25:10:71:
                    6b:5d:01:41:e4:62:bc:57:bc:06:a8:81:c6:d1:04:
                    ed:64:d9:75:9d:fa:b4:2a:35:b3:6b:d4:7f:f4:48:
                    52:48:55:87:f5:3f:05:a2:f2:fc:ed:d6:1f:74:f0:
                    cd:cc:e6:4d:f5:90:2a:a3:87:85:7b:8d:a5:26:ab:
                    69:c2:45:e1:9e:d2:c2:5c:1b:95:74:44:20:7c:ea:
                    86:a1:eb:73:db:75:29:89:14:9d:03:51:35:9d:93:
                    cb:e0:65:3f:5d:55:24:7f:15:c8:01:bc:87:df:21:
                    70:56:67:b2:d8:6c:37:b8:1a:69:3e:5c:44:5a:82:
                    65:62:d4:c9:dd:7d:c6:05:e4:8e:ed:20:8d:97:90:
                    08:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C7:22:D2:BC:5B:75:FE:62:3A:E0:CA:BD:1B:F7:E1:B7:63:55:A4
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/323830343a3334303a343030303a3a2f33362d3336203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:340:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0d:75:8c:c5:2b:02:3b:52:43:b2:c4:40:db:77:4b:08:53:c0:
         6c:cb:ae:46:aa:61:45:5a:7b:64:80:f2:17:f8:9c:0a:e7:bf:
         96:37:fa:46:f9:03:ab:87:25:88:a1:ff:8e:31:08:f1:04:0c:
         2c:e4:2e:ea:ad:e3:42:ad:4e:21:dc:3a:e6:e2:79:92:6a:e0:
         30:4a:17:65:01:96:ba:77:dc:e2:98:82:b2:3d:b2:36:30:3f:
         8e:03:02:05:dc:9d:5b:fc:11:75:cb:2f:76:a8:99:ee:5e:f1:
         0b:b8:d4:d9:ac:b8:46:7f:cd:59:52:65:1a:5c:11:db:b2:96:
         c4:b5:29:1a:75:15:e8:c3:56:f3:76:41:06:38:eb:2d:d6:50:
         c3:0a:05:ce:ec:0f:fb:f7:d1:c4:a7:8d:b5:47:21:8d:ab:fe:
         41:4b:8d:87:8c:cd:e2:69:ad:e8:74:7c:d4:be:2c:c9:54:2f:
         d2:21:01:3c:ff:95:59:f9:b8:33:b4:ce:a7:5e:0b:a6:f4:70:
         43:80:7b:e7:55:8d:ed:33:f0:e9:47:6c:53:33:77:72:de:80:
         e6:59:43:0d:39:e0:c8:d1:89:73:72:99:c1:89:07:94:bf:43:
         89:73:19:77:df:82:40:1d:11:d8:48:36:02:ca:5e:40:1b:81:
         83:05:2d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:57 2024 by rpki-client on console-fra.rpki-client.org