Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/323830343a353939343a3a2f33322d313238203d3e20323638373131.roa
File:                     323830343a353939343a3a2f33322d313238203d3e20323638373131.roa (raw, json)
Hash identifier:          7bturEcPVB2lAOQIWfhR9DFTTIk3Rtn4ZwJqu5DD9qY=
Subject key identifier:   F0:15:91:5F:95:82:CA:6A:AD:29:4D:87:51:11:9B:80:70:6F:73:3D
Certificate issuer:       /CN=2F0FD60AE6B3DFEB9F5B8F4BE0D2755ECA2E3F13
Certificate serial:       79367B398CD892A09DBE9D4FA67739F9C8964412
Authority key identifier: 2F:0F:D6:0A:E6:B3:DF:EB:9F:5B:8F:4B:E0:D2:75:5E:CA:2E:3F:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0FD60AE6B3DFEB9F5B8F4BE0D2755ECA2E3F13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/323830343a353939343a3a2f33322d313238203d3e20323638373131.roa
Signing time:             Wed 22 May 2024 21:40:58 +0000
ROA not before:           Wed 22 May 2024 21:35:58 +0000
ROA not after:            Wed 21 May 2025 21:40:58 +0000
asID:                     268711
IP address blocks:        2804:5994::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:36:7b:39:8c:d8:92:a0:9d:be:9d:4f:a6:77:39:f9:c8:96:44:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0FD60AE6B3DFEB9F5B8F4BE0D2755ECA2E3F13
        Validity
            Not Before: May 22 21:35:58 2024 GMT
            Not After : May 21 21:40:58 2025 GMT
        Subject: CN=F015915F9582CA6AAD294D8751119B80706F733D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:21:d9:2e:d6:f9:2d:4b:4d:ea:1a:a2:5c:61:
                    49:c3:ee:2d:a9:5a:e8:5f:23:3f:fd:fe:eb:3f:3a:
                    ed:01:db:0c:2a:d0:54:6a:df:93:56:92:60:c8:07:
                    c3:90:6c:c5:e9:68:99:d5:ed:98:36:1d:aa:15:0d:
                    83:c1:93:32:ce:1e:58:05:8e:b7:c1:8f:25:1e:ac:
                    c3:35:6d:ef:80:f8:4c:11:ec:58:d0:17:94:2c:38:
                    50:c4:57:15:2e:97:46:60:e5:56:ab:d0:51:92:c9:
                    ca:f4:20:fa:55:45:14:d0:b5:d4:5b:33:37:07:01:
                    4e:67:75:a5:1b:26:95:76:86:57:63:18:e6:ae:94:
                    55:9d:7e:f8:05:12:1e:41:96:d4:5c:a2:2d:5d:59:
                    3f:a0:d3:93:d8:bd:ae:dc:65:7f:1f:cc:f1:d2:8c:
                    49:5b:b0:66:7b:9d:b8:83:71:af:7a:8c:6d:4b:8c:
                    d2:95:07:37:2b:37:30:d4:c7:73:2d:67:51:55:21:
                    a0:38:1b:2f:a7:7f:ca:a0:b2:12:59:09:02:f3:00:
                    ef:3b:20:41:5b:2d:9c:cc:16:32:c3:08:2e:7d:49:
                    78:5e:6f:7c:f6:50:ab:2c:d4:fc:65:fa:4c:c7:e4:
                    89:8f:e5:e5:a0:9b:67:9a:79:f4:0f:f7:31:d5:0b:
                    db:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:15:91:5F:95:82:CA:6A:AD:29:4D:87:51:11:9B:80:70:6F:73:3D
            X509v3 Authority Key Identifier:
                keyid:2F:0F:D6:0A:E6:B3:DF:EB:9F:5B:8F:4B:E0:D2:75:5E:CA:2E:3F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/2F0FD60AE6B3DFEB9F5B8F4BE0D2755ECA2E3F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0FD60AE6B3DFEB9F5B8F4BE0D2755ECA2E3F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/323830343a353939343a3a2f33322d313238203d3e20323638373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5994::/32

    Signature Algorithm: sha256WithRSAEncryption
         e2:19:d5:64:37:df:8e:bd:9a:78:25:bd:f7:eb:6c:37:db:e4:
         53:10:13:f3:80:e6:c0:40:8f:d2:84:b4:81:27:d8:2a:b0:73:
         28:13:b1:9c:12:f8:00:c0:75:51:a9:4a:a9:36:f6:79:5e:1b:
         20:96:f5:b8:bd:0e:24:d9:e8:f5:b9:c3:f5:db:8e:07:e8:51:
         13:b5:9a:a5:a0:cb:0e:0c:58:6b:b9:92:13:65:95:6e:71:b0:
         17:76:02:c5:85:ac:f6:1c:23:f1:f4:f8:49:25:06:c1:89:79:
         07:fc:ee:4e:14:c7:21:27:12:05:51:78:9d:83:59:d4:bc:ae:
         fd:0a:2c:95:2f:b8:d4:50:a0:bb:2d:1f:90:56:d1:96:82:12:
         df:4a:71:1a:4f:5f:e8:ab:ff:07:0b:3c:fc:65:02:77:99:ee:
         cf:d9:cc:2b:0f:45:6a:eb:0f:d7:95:d6:ca:12:90:64:52:3f:
         7d:d2:f5:14:58:eb:a6:04:3e:84:3d:7d:2f:39:ba:22:8a:0c:
         c6:8c:32:f0:25:ab:ef:c4:3b:51:60:89:0a:d3:2f:4b:01:f2:
         ec:e5:5f:f9:63:ce:ef:50:86:d7:98:84:c9:29:95:9a:dd:b5:
         00:47:9a:db:85:a2:e1:78:f9:ba:2c:42:c2:1b:3c:4b:2b:f1:
         77:4e:23:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 19:57:05 2024 by rpki-client on console-fra.rpki-client.org