Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a3330303a3a2f34342d3434203d3e20323634353030.roa
File:                     323830343a323039383a3330303a3a2f34342d3434203d3e20323634353030.roa (raw, json)
Hash identifier:          1IS316R+xy8rqX4iDRNDciNVPwx/uK+MHS7xycp1o0g=
Subject key identifier:   6A:E5:64:B6:89:A0:F2:4F:B3:54:31:33:8F:1A:AA:81:0E:1B:C0:8B
Certificate issuer:       /CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
Certificate serial:       6A0B8DA93CC97B2D7C9DD1738053A8F9B3832604
Authority key identifier: 5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a3330303a3a2f34342d3434203d3e20323634353030.roa
Signing time:             Wed 31 Jul 2024 12:03:21 +0000
ROA not before:           Wed 31 Jul 2024 11:58:21 +0000
ROA not after:            Wed 30 Jul 2025 12:03:21 +0000
asID:                     264500
IP address blocks:        2804:2098:300::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0b:8d:a9:3c:c9:7b:2d:7c:9d:d1:73:80:53:a8:f9:b3:83:26:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
        Validity
            Not Before: Jul 31 11:58:21 2024 GMT
            Not After : Jul 30 12:03:21 2025 GMT
        Subject: CN=6AE564B689A0F24FB35431338F1AAA810E1BC08B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b7:76:00:67:22:6c:78:1e:00:be:85:75:db:
                    e3:a8:43:f0:74:8e:26:e3:21:9c:20:2b:21:3d:ce:
                    3d:09:7e:46:4d:43:57:c8:fe:66:f7:ef:c8:41:e3:
                    64:5f:92:1a:e5:d3:f4:fd:f1:33:23:06:2b:64:ca:
                    7c:fb:11:13:b2:b5:ea:82:fd:d2:4c:fb:2f:34:48:
                    19:cd:be:5e:27:bf:e7:e7:2f:c5:1a:2d:8e:61:76:
                    e7:09:c2:f5:6e:ac:5f:5b:83:0b:93:9e:fe:6a:3f:
                    44:ef:6f:b4:8c:cd:ba:00:09:e2:59:84:81:f7:ad:
                    b3:4e:7a:c3:2b:4f:84:7b:b7:5c:55:7e:9f:be:93:
                    a5:b6:50:94:48:d4:ee:d9:6f:6d:fd:a7:de:11:8f:
                    7a:45:0f:9b:7d:91:93:7f:59:09:b3:29:d4:44:c7:
                    df:1b:55:e6:41:f4:5e:73:90:d9:e8:30:06:bb:8c:
                    45:02:3e:28:1d:ac:cb:67:0e:29:83:0c:eb:76:bb:
                    07:12:21:35:cb:8d:e0:3e:9e:d8:9b:13:aa:c6:54:
                    6b:da:b8:9b:9c:23:8e:b5:c6:4d:da:4a:8a:62:4d:
                    9b:66:d2:2d:f1:76:3e:14:b7:9b:dd:1f:0d:e9:4d:
                    a5:00:83:55:b1:04:7b:e1:e4:ad:a6:bd:0f:8f:6c:
                    16:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E5:64:B6:89:A0:F2:4F:B3:54:31:33:8F:1A:AA:81:0E:1B:C0:8B
            X509v3 Authority Key Identifier:
                keyid:5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a3330303a3a2f34342d3434203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2098:300::/44

    Signature Algorithm: sha256WithRSAEncryption
         45:5c:2c:fd:2c:b3:55:c8:f1:e7:6e:9c:45:2c:35:69:bf:b8:
         60:97:3e:a3:5d:74:69:b9:d1:9a:1d:88:d0:6e:39:fe:4f:79:
         0e:1a:ef:f2:15:e1:65:42:34:c7:fd:56:00:ff:d8:a4:2d:6e:
         44:2c:cf:9d:a4:42:5e:9c:ac:97:57:87:7e:57:c4:1b:1a:bf:
         25:1c:c3:92:47:ba:07:9e:95:db:e1:be:69:e9:99:a0:3b:18:
         9a:81:56:de:88:be:f0:37:a5:14:be:7f:07:4e:13:cb:fa:b1:
         5f:bc:c6:78:a0:15:66:0f:91:6b:0b:98:c8:7d:cf:bb:19:ce:
         6c:db:d2:3f:e0:c0:ef:6c:e2:10:c8:67:51:f4:94:d4:21:e8:
         07:f8:28:dc:1d:34:db:d2:c7:17:ac:0d:d8:76:da:43:c0:e5:
         4f:0a:1d:bd:96:19:fe:63:d8:12:78:19:4f:98:e4:ff:e7:32:
         69:3f:b0:5e:28:4f:ee:30:4b:1c:16:e2:30:8f:06:fc:5d:a0:
         45:a0:e4:f4:ba:58:b5:8b:a1:65:6a:af:90:31:18:25:37:cc:
         d6:6d:2c:0b:3f:9f:fc:1a:7e:52:12:aa:14:aa:1b:e2:db:03:
         a2:53:71:ef:78:d4:4f:f0:ad:a9:8c:4f:f6:fd:b0:ab:d1:86:
         53:e0:95:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 23:53:52 2024 by rpki-client on console-fra.rpki-client.org