Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/323830343a6566303a3a2f35362d3536203d3e20323633353538.roa
File:                     323830343a6566303a3a2f35362d3536203d3e20323633353538.roa (raw, json)
Hash identifier:          qbS15jat8BIQtjBi+x1ly4j1YhsQBZU+jE8aNAKjk1s=
Subject key identifier:   7F:97:B0:EB:C5:E3:D4:D4:51:CD:DB:E6:A9:2A:53:FB:9C:7C:1E:8D
Certificate issuer:       /CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF
Certificate serial:       674BDE59E624BDACDE125CD70808FD3EE1EA26E3
Authority key identifier: A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/323830343a6566303a3a2f35362d3536203d3e20323633353538.roa
Signing time:             Thu 04 Apr 2024 08:00:24 +0000
ROA not before:           Thu 04 Apr 2024 07:55:24 +0000
ROA not after:            Thu 03 Apr 2025 08:00:24 +0000
asID:                     263558
IP address blocks:        2804:ef0::/56 maxlen: 56

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:4b:de:59:e6:24:bd:ac:de:12:5c:d7:08:08:fd:3e:e1:ea:26:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF
        Validity
            Not Before: Apr  4 07:55:24 2024 GMT
            Not After : Apr  3 08:00:24 2025 GMT
        Subject: CN=7F97B0EBC5E3D4D451CDDBE6A92A53FB9C7C1E8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8a:db:59:84:16:fa:78:04:4f:f8:4e:37:cf:
                    af:5b:81:9a:fb:1f:d1:14:f2:34:a4:70:8f:55:ff:
                    14:39:1b:b3:1a:14:80:07:48:35:94:25:01:59:bf:
                    eb:47:48:bb:14:57:69:6a:46:7c:a0:28:93:66:3a:
                    30:44:db:fd:24:e2:db:c8:77:23:f4:d9:cb:ba:a4:
                    d5:b6:89:a2:3d:0b:50:d2:2f:14:c0:66:92:3d:5f:
                    0a:5e:94:7f:1f:55:2b:37:3f:b1:11:59:04:ad:d3:
                    54:2e:d2:69:e7:1e:da:18:07:f9:59:0d:29:23:e5:
                    05:1b:9c:7e:b6:2b:06:09:e2:f0:1a:32:36:52:a3:
                    67:30:fb:d7:22:f5:47:23:39:b2:9e:48:26:59:1b:
                    d9:66:e1:4c:0a:41:28:7b:83:1c:39:a4:4c:6a:7e:
                    eb:e2:71:b4:fc:fe:dc:9e:0c:79:46:10:1e:8a:93:
                    c4:f1:e1:aa:e4:34:36:88:50:99:49:10:6d:22:73:
                    6b:b5:7e:fb:c5:24:04:3b:ca:d3:a6:94:ae:d8:1e:
                    d1:c7:eb:28:35:f2:e8:ff:dc:d5:6c:55:a0:5c:2d:
                    cf:23:07:fd:ed:a8:61:2a:f7:9f:a4:fd:7a:e7:60:
                    58:05:54:3c:ec:95:35:0e:87:91:ad:fc:5c:1e:00:
                    60:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:97:B0:EB:C5:E3:D4:D4:51:CD:DB:E6:A9:2A:53:FB:9C:7C:1E:8D
            X509v3 Authority Key Identifier:
                keyid:A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/323830343a6566303a3a2f35362d3536203d3e20323633353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ef0::/56

    Signature Algorithm: sha256WithRSAEncryption
         ab:c7:f9:2f:90:24:a6:f4:4f:38:39:a9:3e:af:88:bf:1c:c0:
         99:cf:db:20:2f:9c:f9:02:90:de:da:52:e3:52:59:f2:13:19:
         28:bd:c0:b1:95:6e:f9:f0:18:50:84:d9:bf:bd:0d:0f:3b:d4:
         4a:ee:e7:62:1b:39:24:7b:55:12:2c:4b:c3:a1:ce:dc:df:5b:
         eb:3b:d7:d2:82:27:60:18:26:6e:0f:c2:4f:13:39:b4:c1:3e:
         52:a5:ee:97:a6:ed:83:75:b8:39:61:e9:41:40:76:0d:d1:c9:
         7e:6e:1c:3d:db:32:64:d1:77:72:06:60:be:38:f2:02:ea:1f:
         19:c5:2f:e1:2d:3f:e7:f3:c0:6e:80:16:f0:e7:d6:8a:82:ac:
         15:b6:20:31:b2:4e:e2:23:c9:e5:44:ef:aa:a1:97:4c:f8:36:
         ab:a1:00:55:58:c1:6f:a6:2d:83:d9:fa:fc:d5:31:89:de:10:
         ee:f0:17:29:fa:c4:f8:0d:0a:57:e4:c5:b0:f5:b0:cd:6c:67:
         cd:bb:1f:39:d6:ee:11:af:09:8e:8f:f9:66:38:98:b7:ba:6b:
         64:ec:44:06:a5:fe:c1:1c:95:ad:d0:50:3a:a1:58:64:57:ac:
         e3:4f:8e:ce:76:d3:ce:a0:80:8d:46:75:7a:6e:48:3a:80:58:
         63:b2:96:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 21:37:44 2024 by rpki-client on console-fra.rpki-client.org