Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/323830343a346336383a3a2f33322d3333203d3e20323637333639.roa
File:                     323830343a346336383a3a2f33322d3333203d3e20323637333639.roa (raw, json)
Hash identifier:          6JQt/+uV1WYWL64/Pa7EwDFWsaeKZ8stlT1u0ruI47s=
Subject key identifier:   88:BA:02:A4:B2:9C:F6:C7:44:25:32:CA:AD:7C:47:CF:16:28:16:93
Certificate issuer:       /CN=CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81
Certificate serial:       4A435C5FDC5DC43BE9FF39B5EE926E9B541FF280
Authority key identifier: CC:F5:F1:E6:1C:17:E7:64:7E:2B:1A:48:89:AE:B9:35:AB:80:AF:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/323830343a346336383a3a2f33322d3333203d3e20323637333639.roa
Signing time:             Mon 17 Jun 2024 01:15:37 +0000
ROA not before:           Mon 17 Jun 2024 01:10:37 +0000
ROA not after:            Mon 16 Jun 2025 01:15:37 +0000
asID:                     267369
IP address blocks:        2804:4c68::/32 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:43:5c:5f:dc:5d:c4:3b:e9:ff:39:b5:ee:92:6e:9b:54:1f:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81
        Validity
            Not Before: Jun 17 01:10:37 2024 GMT
            Not After : Jun 16 01:15:37 2025 GMT
        Subject: CN=88BA02A4B29CF6C7442532CAAD7C47CF16281693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e5:b6:43:08:c6:2f:53:50:14:1a:26:02:52:
                    74:c2:cd:95:3a:b7:97:c7:4e:51:da:ad:e5:72:9c:
                    c5:46:96:34:e9:e1:74:cc:7f:31:52:18:f3:f5:ef:
                    66:d1:4c:b1:77:6a:64:0c:d4:4a:f1:8c:86:14:9c:
                    d4:f0:40:b9:d2:52:31:ea:16:79:cc:d8:5d:38:e5:
                    54:f8:c5:c0:a0:f8:9b:3b:04:af:c7:18:a5:5c:9e:
                    89:e7:e9:17:e3:5e:fd:a7:b0:fc:b7:91:4a:15:28:
                    c5:6e:20:a2:03:4f:f0:f6:47:2c:40:14:b0:01:d5:
                    be:86:8a:dc:1c:5d:3d:d3:13:ae:01:42:3b:4b:73:
                    6a:60:3f:35:77:e6:aa:45:d2:ac:c9:f3:3a:ea:b9:
                    cf:13:6a:bc:9c:40:39:20:e0:03:0c:21:5d:0b:0a:
                    1b:0e:89:07:75:a5:0c:6b:dd:fc:8a:53:c5:82:a7:
                    ff:fa:9a:b8:5a:ba:3a:4e:e6:87:0e:a8:f7:8f:ac:
                    a0:1a:43:2d:9f:65:cf:54:d6:58:0c:3f:2e:c2:b4:
                    20:41:14:a8:d6:ef:2d:51:2b:e9:32:74:61:7b:62:
                    2e:21:cd:b8:65:91:03:de:00:d2:08:c3:25:22:b0:
                    3c:47:d4:75:10:e1:a5:74:f1:a0:f1:86:bf:14:2e:
                    dc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BA:02:A4:B2:9C:F6:C7:44:25:32:CA:AD:7C:47:CF:16:28:16:93
            X509v3 Authority Key Identifier:
                keyid:CC:F5:F1:E6:1C:17:E7:64:7E:2B:1A:48:89:AE:B9:35:AB:80:AF:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/323830343a346336383a3a2f33322d3333203d3e20323637333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c68::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:ae:01:a0:b4:42:2a:bd:f1:41:51:ae:0d:ad:74:2c:df:d3:
         f3:cd:f9:c1:b5:b4:b6:91:c6:98:cb:d1:c4:d2:1c:9f:83:80:
         20:d0:73:6b:e5:a1:8a:78:75:12:18:42:a2:b5:6f:c9:30:26:
         9d:80:4d:32:92:47:99:6b:f8:f0:87:91:30:8d:e8:83:cb:c4:
         4c:e7:6a:2e:91:e3:35:f1:40:21:49:e6:09:68:cb:e8:8a:0e:
         6b:f9:84:d1:80:f8:3a:3f:e4:c2:ea:8f:ec:bf:c0:55:5b:30:
         50:0e:9c:a5:84:8f:05:af:9b:dc:47:b2:ba:72:09:8f:97:7c:
         68:9d:da:1a:80:f4:03:c2:24:e2:ad:fc:92:3c:30:ce:2a:75:
         35:75:21:c5:ae:cd:4e:57:50:ee:54:2a:2b:58:7b:72:2a:ef:
         9c:db:fc:9a:81:19:c3:55:cb:d2:fb:62:ab:4e:26:9f:eb:94:
         74:d3:50:e8:2b:26:15:a6:d5:1f:75:18:16:5a:89:78:4a:bd:
         7e:d1:7c:53:cb:3f:76:d8:09:ac:bf:d4:06:80:6c:c0:9c:4c:
         41:db:3f:0f:0c:a7:8c:fd:1c:61:b4:79:e4:ce:b8:ff:c6:43:
         58:1b:92:5d:9a:11:79:68:11:48:7f:0a:da:c4:a0:bc:a1:7d:
         db:f5:95:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 23:13:09 2024 by rpki-client on console-fra.rpki-client.org