Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/323830343a356639303a3a2f33322d3336203d3e20323639313039.roa
File:                     323830343a356639303a3a2f33322d3336203d3e20323639313039.roa (raw, json)
Hash identifier:          FZJXAhFbaEonWJ76McqeaxHgrqQZxxQt1o7lVj2fzYA=
Subject key identifier:   BE:35:2F:C3:CC:A9:85:8D:CB:5B:8C:F5:D9:22:0D:E0:D5:CF:06:44
Certificate issuer:       /CN=F16CAE28A9DF3533B6F75CD06EA05162AA08D7B2
Certificate serial:       2D0539AB36817CD5BA99CD34D07D88486010855A
Authority key identifier: F1:6C:AE:28:A9:DF:35:33:B6:F7:5C:D0:6E:A0:51:62:AA:08:D7:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F16CAE28A9DF3533B6F75CD06EA05162AA08D7B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/323830343a356639303a3a2f33322d3336203d3e20323639313039.roa
Signing time:             Thu 04 Jul 2024 18:59:20 +0000
ROA not before:           Thu 04 Jul 2024 18:54:20 +0000
ROA not after:            Thu 03 Jul 2025 18:59:20 +0000
asID:                     269109
IP address blocks:        2804:5f90::/32 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:05:39:ab:36:81:7c:d5:ba:99:cd:34:d0:7d:88:48:60:10:85:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16CAE28A9DF3533B6F75CD06EA05162AA08D7B2
        Validity
            Not Before: Jul  4 18:54:20 2024 GMT
            Not After : Jul  3 18:59:20 2025 GMT
        Subject: CN=BE352FC3CCA9858DCB5B8CF5D9220DE0D5CF0644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:00:91:4b:25:7e:1d:46:33:ef:69:fe:8f:11:
                    11:07:af:22:56:c4:82:37:9b:6d:96:01:5f:fe:4e:
                    83:c5:80:b1:78:09:e4:3c:07:23:bc:51:15:8c:af:
                    2b:88:b1:d7:8f:f3:73:bd:f6:c0:54:b4:28:93:d5:
                    7f:cf:c6:c9:56:70:1e:5d:c8:65:ef:37:a5:db:25:
                    07:b9:5b:89:d8:2f:83:f7:f7:63:32:49:f8:7b:34:
                    d2:15:7c:74:64:d4:9c:d1:7d:fb:c5:bf:29:7b:b0:
                    7b:a7:86:79:9c:0f:a5:af:23:a1:97:e2:c1:63:e7:
                    90:1f:12:44:56:6f:3c:b7:ae:aa:d5:48:83:a2:b7:
                    6f:d4:02:21:d1:6f:1c:d0:aa:90:7d:9a:6b:12:4c:
                    81:7c:b3:2e:6b:2f:95:35:7e:e9:c8:51:b5:bd:07:
                    b6:a4:b3:cf:3e:89:f8:4e:c5:6b:66:86:92:86:9f:
                    b4:ea:cd:cb:3e:94:85:64:37:93:36:1f:79:ab:49:
                    c4:18:6d:26:63:06:10:1a:c7:4c:e5:f6:de:c7:1f:
                    ac:01:16:e4:25:c0:a1:6d:60:b8:00:a9:10:ee:1a:
                    e1:83:4e:1c:47:19:08:09:c2:ac:35:47:91:25:ea:
                    3f:8d:84:b8:dc:d3:86:b5:8a:7b:c1:b7:2f:7f:2c:
                    7d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:35:2F:C3:CC:A9:85:8D:CB:5B:8C:F5:D9:22:0D:E0:D5:CF:06:44
            X509v3 Authority Key Identifier:
                keyid:F1:6C:AE:28:A9:DF:35:33:B6:F7:5C:D0:6E:A0:51:62:AA:08:D7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/F16CAE28A9DF3533B6F75CD06EA05162AA08D7B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F16CAE28A9DF3533B6F75CD06EA05162AA08D7B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/323830343a356639303a3a2f33322d3336203d3e20323639313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f90::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:42:01:de:e4:91:44:81:67:bc:25:4c:46:02:55:3d:36:0d:
         85:b4:da:c4:e1:4b:56:5f:24:9d:86:ea:21:db:9c:c9:c6:36:
         b9:4f:cf:4f:e4:e8:bc:7d:67:a4:59:a3:b9:ed:fc:58:03:6e:
         42:7c:bc:b9:c0:87:a8:4e:10:4d:85:c2:55:5a:10:8f:60:71:
         42:6f:f0:8b:a6:74:26:56:06:ab:27:a5:be:24:2c:f6:8c:81:
         ac:97:cd:9e:96:5d:fb:b9:71:f6:56:be:ee:9b:d1:0c:13:76:
         32:21:cf:e8:5c:8e:fb:54:ad:2d:ee:95:1a:24:0c:11:77:f4:
         59:92:c1:9f:0f:4e:bd:38:0e:b9:2d:35:ff:b6:ff:93:ed:a5:
         e4:90:e3:4d:cd:3c:60:d5:f9:bf:92:18:8e:3b:e2:c0:e2:b2:
         a2:5e:6e:71:57:8a:1e:e8:ee:6f:ae:ff:46:c0:7f:a9:ef:4e:
         ef:3c:4e:66:20:dd:38:df:26:35:14:8c:ab:53:ad:3c:93:ea:
         b6:eb:e8:16:04:ee:b1:ab:95:26:4a:e0:b4:52:51:45:17:23:
         35:ed:e2:c7:f5:b0:7c:0d:73:dc:f8:cf:a5:85:79:2b:6d:6f:
         37:07:f3:af:e7:88:f8:4c:c8:3f:38:ed:fa:81:f1:79:75:6e:
         88:12:5b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 11:37:27 2024 by rpki-client on console-fra.rpki-client.org