Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/323830343a353361303a373030303a3a2f33362d3336203d3e20323638353936.roa
File:                     323830343a353361303a373030303a3a2f33362d3336203d3e20323638353936.roa (raw, json)
Hash identifier:          vJb99pHLlDYhGB6St96tBe4CqkC/2tSOpScyI7KF+08=
Subject key identifier:   5B:7F:66:8B:6B:B2:A9:5E:5F:23:0E:52:5D:08:2B:2E:3D:66:A1:62
Certificate issuer:       /CN=4D75809E071D4433F365FE41E48F4C2BED13B507
Certificate serial:       0A4B6EE7051EC0831DA1681EDE0F989D162360FC
Authority key identifier: 4D:75:80:9E:07:1D:44:33:F3:65:FE:41:E4:8F:4C:2B:ED:13:B5:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D75809E071D4433F365FE41E48F4C2BED13B507.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/323830343a353361303a373030303a3a2f33362d3336203d3e20323638353936.roa
Signing time:             Wed 14 Aug 2024 15:25:00 +0000
ROA not before:           Wed 14 Aug 2024 15:20:00 +0000
ROA not after:            Wed 13 Aug 2025 15:25:00 +0000
asID:                     268596
IP address blocks:        2804:53a0:7000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4b:6e:e7:05:1e:c0:83:1d:a1:68:1e:de:0f:98:9d:16:23:60:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D75809E071D4433F365FE41E48F4C2BED13B507
        Validity
            Not Before: Aug 14 15:20:00 2024 GMT
            Not After : Aug 13 15:25:00 2025 GMT
        Subject: CN=5B7F668B6BB2A95E5F230E525D082B2E3D66A162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e3:9c:aa:9b:54:2f:2c:31:38:93:79:68:85:
                    2a:26:cf:b5:12:57:cf:17:21:10:77:8b:f6:dd:1b:
                    45:c2:f8:26:da:1c:44:8d:1a:0d:e9:b9:10:41:15:
                    4b:f5:e1:e5:75:db:79:d1:44:af:7c:73:a2:58:99:
                    0f:f3:33:52:b3:f0:c4:c5:b4:77:d8:6a:45:be:01:
                    b1:be:8b:cf:08:b1:2a:f4:57:18:9b:cd:f5:d4:e4:
                    c7:dd:af:52:34:c0:bc:67:00:01:7d:b7:29:05:7a:
                    d0:66:b9:44:ed:3a:9d:e6:cd:f7:b9:47:28:e4:3f:
                    99:dc:0e:15:bf:15:1d:8d:35:f2:b2:67:64:84:9f:
                    52:04:d4:9c:21:0c:9a:ce:9f:1e:5d:ed:cc:d1:4f:
                    04:d3:f1:3d:f8:1d:8e:9b:9b:5a:59:5c:a4:bc:f1:
                    67:98:8f:65:7a:48:88:74:5b:13:0f:91:d0:9a:ce:
                    81:a3:aa:5a:85:93:8a:2c:0b:d6:26:6b:11:27:68:
                    8e:6c:67:fa:52:d7:c5:18:b0:6a:76:d6:fb:97:df:
                    d8:28:30:33:32:01:90:4c:c5:c0:cc:5d:d6:7f:32:
                    4d:c1:b3:7f:bc:a6:9a:fa:51:1d:48:46:20:27:5b:
                    58:99:6d:ab:26:77:56:8e:67:db:73:fd:5d:8e:b5:
                    e8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7F:66:8B:6B:B2:A9:5E:5F:23:0E:52:5D:08:2B:2E:3D:66:A1:62
            X509v3 Authority Key Identifier:
                keyid:4D:75:80:9E:07:1D:44:33:F3:65:FE:41:E4:8F:4C:2B:ED:13:B5:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/4D75809E071D4433F365FE41E48F4C2BED13B507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D75809E071D4433F365FE41E48F4C2BED13B507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/323830343a353361303a373030303a3a2f33362d3336203d3e20323638353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53a0:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3d:cd:90:0a:2e:7c:ee:56:5d:6a:27:1b:7f:81:4c:9a:e0:c9:
         70:a7:a1:49:dc:84:6e:20:1c:0d:64:0d:f0:69:fe:fb:79:44:
         a2:72:94:31:bf:13:bb:33:ad:e6:8b:d0:fc:d7:c8:23:de:6a:
         86:ce:71:a8:ed:26:30:84:d9:42:c0:23:fb:90:f3:aa:80:31:
         9c:cc:e2:fb:16:f5:0f:49:f8:4b:85:82:76:49:5f:48:a7:7e:
         53:b4:4a:b5:0d:11:59:8f:9d:c5:d2:ef:b3:5c:83:a4:5a:ae:
         61:47:d4:11:b6:b9:a1:48:6c:7e:76:d5:54:0d:f2:b5:52:99:
         64:7c:9f:69:4b:61:31:99:86:69:f1:4c:2e:c5:10:af:b0:70:
         74:8e:0f:e0:95:71:fa:31:73:6d:39:7f:46:39:fc:32:dd:3a:
         04:13:b4:1c:f6:78:99:a7:a0:2a:70:c0:96:ec:d7:78:82:73:
         32:de:47:47:41:1e:06:21:1b:cc:e0:7f:34:9c:2a:09:06:06:
         ef:55:8b:b1:99:17:49:7b:05:da:70:72:86:f3:5c:1a:0e:2c:
         82:f9:34:ee:48:36:8a:fb:1f:47:5d:2d:b4:3f:9d:f4:e1:de:
         0a:71:49:f5:7c:68:8d:15:26:d6:57:a4:06:3e:83:b3:a6:8d:
         f4:9d:21:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 19:31:57 2024 by rpki-client on console-ams.rpki-client.org