Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/1/323830343a343139383a3a2f33322d3336203d3e20323637343433.roa
File:                     323830343a343139383a3a2f33322d3336203d3e20323637343433.roa (raw, json)
Hash identifier:          fgoY9yMNHpC6AMBO4hSWYtt8ZRhMEsqias3Z5dzbwNw=
Subject key identifier:   A9:5E:1E:7E:F8:00:20:60:D9:EF:EB:D2:C5:6D:34:3C:B7:89:12:4A
Certificate issuer:       /CN=DA5DA3FDDDF8D0B50A29BF495FF7941FD5C2C7B6
Certificate serial:       0B8F4368D651D675119B530918463296603EFADC
Authority key identifier: DA:5D:A3:FD:DD:F8:D0:B5:0A:29:BF:49:5F:F7:94:1F:D5:C2:C7:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA5DA3FDDDF8D0B50A29BF495FF7941FD5C2C7B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/1/323830343a343139383a3a2f33322d3336203d3e20323637343433.roa
Signing time:             Thu 04 Apr 2024 15:19:07 +0000
ROA not before:           Thu 04 Apr 2024 15:14:07 +0000
ROA not after:            Thu 03 Apr 2025 15:19:07 +0000
asID:                     267443
IP address blocks:        2804:4198::/32 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:8f:43:68:d6:51:d6:75:11:9b:53:09:18:46:32:96:60:3e:fa:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5DA3FDDDF8D0B50A29BF495FF7941FD5C2C7B6
        Validity
            Not Before: Apr  4 15:14:07 2024 GMT
            Not After : Apr  3 15:19:07 2025 GMT
        Subject: CN=A95E1E7EF8002060D9EFEBD2C56D343CB789124A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c6:36:6b:a1:ef:19:52:fe:0d:75:a5:fb:9d:
                    7f:5d:d1:61:97:82:01:ba:77:fd:a1:12:53:33:d9:
                    64:20:5f:6c:2b:e3:4c:e9:08:51:e0:b9:cf:4e:43:
                    db:0e:d9:b7:aa:00:cb:56:92:de:94:a5:4a:bc:f3:
                    b1:3d:06:02:b6:b8:61:ad:3a:55:e4:28:0b:55:7e:
                    c3:fe:f5:a8:14:7b:5e:8b:92:2c:35:9d:9d:b6:1b:
                    ce:93:29:ef:e8:8e:b9:e6:78:44:c6:be:ba:e0:3b:
                    7c:59:fb:f3:41:ba:45:b1:0f:0c:9a:db:e1:fd:a0:
                    d4:98:d8:cc:27:02:af:a6:f4:f3:02:41:2f:0d:7c:
                    51:11:8c:00:2e:89:c0:67:c0:bc:da:31:a8:6c:d0:
                    ea:9e:00:9a:e9:e6:de:53:a3:04:59:d9:af:df:b7:
                    1c:33:9e:3d:83:47:3f:01:5d:6e:17:90:a1:07:8b:
                    82:f3:a9:56:08:90:d0:7d:b1:58:0a:20:77:47:81:
                    0a:4b:00:86:f2:57:88:ab:91:e2:f5:9a:0e:de:b9:
                    4f:22:b6:8e:c6:c4:19:47:ef:60:43:80:0f:5b:28:
                    82:3e:b9:bc:e9:62:61:40:0f:92:34:e6:58:51:9e:
                    64:67:15:7e:64:1b:c8:da:2a:7e:0f:2b:bf:39:39:
                    10:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5E:1E:7E:F8:00:20:60:D9:EF:EB:D2:C5:6D:34:3C:B7:89:12:4A
            X509v3 Authority Key Identifier:
                keyid:DA:5D:A3:FD:DD:F8:D0:B5:0A:29:BF:49:5F:F7:94:1F:D5:C2:C7:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/1/DA5DA3FDDDF8D0B50A29BF495FF7941FD5C2C7B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA5DA3FDDDF8D0B50A29BF495FF7941FD5C2C7B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/1/323830343a343139383a3a2f33322d3336203d3e20323637343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4198::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:06:6c:cf:1b:a0:11:82:ca:00:82:9d:36:38:08:96:4f:8b:
         56:ba:cd:1b:e8:03:58:27:d9:62:0e:48:5d:c9:ab:71:61:a5:
         52:17:c4:36:1d:34:42:bd:b8:23:d1:5f:d4:4b:9a:cc:31:d0:
         0a:92:36:ea:6a:f8:b4:02:4f:d3:76:b3:66:37:ec:54:5a:18:
         ce:34:6f:b6:37:12:31:96:43:9f:95:11:f1:b0:4f:62:22:6f:
         b7:fd:a5:d0:94:8e:55:c5:60:37:cd:7f:b7:23:b3:26:eb:ec:
         88:2d:48:6c:7c:11:f5:23:ac:24:4d:f1:d0:50:8f:72:20:f5:
         aa:20:36:2d:55:11:86:6f:f7:f0:f4:f3:00:1f:eb:d3:6a:ab:
         64:68:a8:a4:25:35:28:4f:30:30:9b:d5:a6:54:6d:e8:b4:2c:
         04:43:53:67:ae:8f:da:a8:a9:33:73:70:e6:61:62:c2:c8:39:
         0c:f4:6c:0a:fd:74:e1:14:fa:02:65:49:0f:8d:21:c9:44:64:
         74:7b:79:ea:bf:0b:07:e5:69:fa:26:8f:db:50:b9:97:59:bb:
         9e:81:ba:50:5d:77:1d:87:4a:46:24:a5:09:98:49:f2:e4:37:
         ee:85:de:63:4e:9f:c2:ae:a1:4b:f7:a2:71:54:d9:78:cb:90:
         dc:e4:0e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 17:55:48 2024 by rpki-client on console-fra.rpki-client.org