Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/323830343a356432633a3a2f33322d3438203d3e20323638393535.roa
File:                     323830343a356432633a3a2f33322d3438203d3e20323638393535.roa (raw, json)
Hash identifier:          jrsAqgIMIw0pTSthuICOecHCQmndkdSHorKwxNDvQ3I=
Subject key identifier:   E1:53:C5:B2:FE:7A:2C:30:3E:94:FD:B8:7F:EB:85:38:15:EC:36:DC
Certificate issuer:       /CN=3F84F51408CD88D165CE931B15E48DC9CB8084BE
Certificate serial:       311E0C4B583A08C7C2B2567F6AE84D26D5E379F5
Authority key identifier: 3F:84:F5:14:08:CD:88:D1:65:CE:93:1B:15:E4:8D:C9:CB:80:84:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F84F51408CD88D165CE931B15E48DC9CB8084BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/323830343a356432633a3a2f33322d3438203d3e20323638393535.roa
Signing time:             Thu 05 Sep 2024 16:20:07 +0000
ROA not before:           Thu 05 Sep 2024 16:15:07 +0000
ROA not after:            Thu 04 Sep 2025 16:20:07 +0000
asID:                     268955
IP address blocks:        2804:5d2c::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:1e:0c:4b:58:3a:08:c7:c2:b2:56:7f:6a:e8:4d:26:d5:e3:79:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F84F51408CD88D165CE931B15E48DC9CB8084BE
        Validity
            Not Before: Sep  5 16:15:07 2024 GMT
            Not After : Sep  4 16:20:07 2025 GMT
        Subject: CN=E153C5B2FE7A2C303E94FDB87FEB853815EC36DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:68:6d:84:2b:2a:ca:24:b5:f3:4d:18:2e:06:
                    e3:a5:c7:5c:8e:8d:af:c7:42:c3:9a:48:76:b6:b0:
                    b5:9c:c8:da:28:df:3f:b5:32:23:28:9c:0d:f8:25:
                    cc:ea:1e:7b:2a:27:2f:7b:4b:5a:d7:02:3d:28:9e:
                    9e:4b:84:cd:98:df:07:25:4d:4b:8a:a7:55:24:35:
                    6e:d4:c0:9a:8e:b4:74:e8:7b:32:22:17:85:77:26:
                    39:c4:c7:5f:53:20:8e:5b:82:8f:90:eb:af:ea:0b:
                    7d:c4:df:d8:e8:6b:2a:6b:ca:d3:44:2a:a2:43:49:
                    d5:6a:49:6c:12:c3:62:5b:63:ab:63:3f:7b:44:02:
                    cf:9b:2f:6f:3d:0e:0d:2b:e4:43:f6:d2:dd:1f:90:
                    f7:9d:0c:f3:39:28:8b:78:70:da:08:01:6a:ac:74:
                    2a:7a:b6:a4:f0:31:ca:f8:4f:8f:11:69:f6:18:33:
                    7b:14:2f:9f:09:82:6e:4f:d6:49:77:aa:6c:44:bd:
                    e5:4d:37:7f:b8:cf:1c:83:b2:ae:55:12:9d:7b:ac:
                    69:26:27:13:08:58:01:2c:23:1e:60:fe:62:56:e5:
                    8f:c6:7e:71:ef:e6:dc:86:ad:08:aa:4f:b1:4b:69:
                    67:51:cb:7c:0e:35:14:e8:19:ee:fd:a8:f7:fc:52:
                    51:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:53:C5:B2:FE:7A:2C:30:3E:94:FD:B8:7F:EB:85:38:15:EC:36:DC
            X509v3 Authority Key Identifier:
                keyid:3F:84:F5:14:08:CD:88:D1:65:CE:93:1B:15:E4:8D:C9:CB:80:84:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/3F84F51408CD88D165CE931B15E48DC9CB8084BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F84F51408CD88D165CE931B15E48DC9CB8084BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/323830343a356432633a3a2f33322d3438203d3e20323638393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:9d:e8:a0:71:a2:e6:b5:1f:9f:a8:87:b1:fe:ed:09:bd:bf:
         41:ec:43:d0:8d:43:56:69:a9:fd:95:17:7a:3a:a7:e4:08:d6:
         5d:7e:d2:8b:bd:1d:74:50:bf:2f:44:84:96:e3:ea:5b:fd:0a:
         74:83:78:b6:28:33:b1:20:8f:32:c2:e2:96:5b:8a:83:ac:4c:
         ea:c2:a7:f2:fa:50:97:2a:cd:df:4d:e9:ae:53:79:8e:1c:1f:
         4a:c0:89:f9:2c:68:bf:c9:fb:7d:b9:4b:ef:68:17:6f:f7:fc:
         df:e1:a1:55:d5:d4:0f:f7:e7:3c:0c:36:c2:a0:00:e8:d6:eb:
         7d:2d:45:45:32:d6:99:4f:15:ff:07:05:69:71:78:48:88:bc:
         86:70:b4:42:25:cd:ae:86:e1:f6:d7:ec:f8:59:ef:ad:68:d6:
         2b:54:90:9e:50:b7:c1:a1:16:14:10:9a:7e:24:cb:fb:73:b4:
         b0:38:2e:1e:c8:b3:fb:c3:49:22:49:87:53:26:56:c3:7b:d9:
         af:73:15:a3:a6:8f:30:df:03:d5:ce:38:e6:2d:58:bf:fd:87:
         01:51:d0:64:50:d6:a2:16:f6:1e:ed:60:8f:26:d7:bc:36:5c:
         40:00:1c:31:59:5e:b0:00:10:58:db:e0:ce:42:53:da:db:f6:
         0b:d8:22:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 00:35:51 2024 by rpki-client on console-ams.rpki-client.org