Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/1/323830343a333565383a3a2f33322d3332203d3e20323636333134.roa
File:                     323830343a333565383a3a2f33322d3332203d3e20323636333134.roa (raw, json)
Hash identifier:          LaEJGKs9Xe87G/+elUL1HSZGqRC/KX1FXw3GR7vHZuM=
Subject key identifier:   10:61:23:0B:D3:FB:31:F3:74:C4:83:13:3F:BA:0F:8D:21:17:1C:6A
Certificate issuer:       /CN=C9AC44E82605C0D3C3383877074774E2849AC537
Certificate serial:       4416ED8A042D2B51E719250C50F4161CFDA3E484
Authority key identifier: C9:AC:44:E8:26:05:C0:D3:C3:38:38:77:07:47:74:E2:84:9A:C5:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9AC44E82605C0D3C3383877074774E2849AC537.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/1/323830343a333565383a3a2f33322d3332203d3e20323636333134.roa
Signing time:             Thu 04 Apr 2024 09:31:33 +0000
ROA not before:           Thu 04 Apr 2024 09:26:33 +0000
ROA not after:            Thu 03 Apr 2025 09:31:33 +0000
asID:                     266314
IP address blocks:        2804:35e8::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:16:ed:8a:04:2d:2b:51:e7:19:25:0c:50:f4:16:1c:fd:a3:e4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9AC44E82605C0D3C3383877074774E2849AC537
        Validity
            Not Before: Apr  4 09:26:33 2024 GMT
            Not After : Apr  3 09:31:33 2025 GMT
        Subject: CN=1061230BD3FB31F374C483133FBA0F8D21171C6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0e:d6:73:08:1d:ee:d5:3b:2c:bc:95:11:09:
                    54:96:64:5c:28:c8:5d:e9:35:22:f5:57:75:4e:47:
                    6e:81:7d:2c:d1:fa:e6:29:51:bf:47:36:0c:a6:b0:
                    33:2d:c9:cd:f0:0b:15:75:68:a0:53:9f:fb:9d:ce:
                    5e:19:d8:91:14:19:7d:b6:89:b2:0d:b6:2d:a1:38:
                    37:e5:49:c0:ea:8f:bf:eb:c3:30:54:eb:80:c8:31:
                    41:48:99:23:42:cc:1f:23:cd:94:18:ff:e3:da:14:
                    16:ee:0d:1d:d1:8b:ca:45:20:ee:a1:22:00:2f:33:
                    45:09:41:8b:2c:0b:7d:6d:ce:1c:89:e9:1b:f8:dc:
                    2e:a5:69:e8:92:f3:1d:0c:9f:7e:f6:66:da:c0:98:
                    bb:67:2b:b3:90:73:fe:12:89:f4:d0:ac:01:99:5f:
                    1e:b4:d7:54:53:c3:e8:80:02:84:0d:45:90:ac:ca:
                    40:e3:a9:87:57:90:9a:a5:a1:73:d9:76:42:65:77:
                    7a:5e:81:9a:db:9f:d2:c3:e3:7f:96:ae:6a:8d:4e:
                    f5:48:61:62:0c:28:d0:a8:4a:0d:28:79:0e:fb:94:
                    b4:da:95:59:7e:69:4f:35:15:20:11:a1:38:be:30:
                    d4:b8:1a:e2:10:af:7c:77:4f:6b:06:99:01:29:11:
                    4b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:61:23:0B:D3:FB:31:F3:74:C4:83:13:3F:BA:0F:8D:21:17:1C:6A
            X509v3 Authority Key Identifier:
                keyid:C9:AC:44:E8:26:05:C0:D3:C3:38:38:77:07:47:74:E2:84:9A:C5:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/1/C9AC44E82605C0D3C3383877074774E2849AC537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9AC44E82605C0D3C3383877074774E2849AC537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/1/323830343a333565383a3a2f33322d3332203d3e20323636333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:a4:f7:e1:11:53:f8:34:4b:91:5d:50:c8:87:87:24:86:0c:
         b7:ce:92:21:ca:bb:e4:fe:c8:26:d5:92:88:47:7c:98:ab:28:
         9e:8b:03:ee:e9:e6:af:f9:2d:a0:66:a0:6b:6f:1e:f3:77:17:
         c8:bb:b4:df:2f:6e:c8:ba:02:cf:8a:30:95:70:8b:34:9f:b8:
         eb:f0:bc:9c:20:31:e5:73:3f:a9:f8:b2:65:da:8f:80:10:fa:
         00:0a:9b:f9:ab:d7:2e:fe:34:ef:7a:9d:03:8c:2e:ff:ee:14:
         5a:89:26:1b:d7:ca:76:86:1e:cc:0f:e0:ed:04:69:4c:48:38:
         e7:01:d1:e8:c3:36:76:08:5d:c9:c2:d6:8d:67:9e:89:af:80:
         d0:4b:d4:0a:20:5e:7b:97:67:86:bd:f5:7b:c1:35:fa:4f:30:
         89:3d:05:88:1d:71:9a:e8:ae:56:87:1b:aa:1b:fb:d5:0c:29:
         fb:d4:5a:1a:e9:c5:e9:6e:27:82:cb:b0:6e:aa:9c:48:7d:5d:
         82:ca:98:4d:ac:f0:bf:06:62:8c:2a:c4:7c:56:e7:08:75:cb:
         76:3e:09:bf:c5:9f:ad:45:dc:14:00:0e:9b:0a:7f:10:62:c4:
         54:7d:3a:9a:50:52:f8:34:31:1d:f5:af:a8:56:ed:12:b4:44:
         68:3d:f4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 13:42:03 2024 by rpki-client on console-fra.rpki-client.org