Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/323830343a343131343a3a2f33322d313238203d3e20323636303032.roa
File:                     323830343a343131343a3a2f33322d313238203d3e20323636303032.roa (raw, json)
Hash identifier:          jo5I0uitf8F6Hgcpkic5SaJZhdOuwUwDR2JlmXm/TnQ=
Subject key identifier:   C5:97:4C:73:0F:A0:1C:CA:E6:E9:F9:0E:56:B3:A1:E0:75:71:0C:9C
Certificate issuer:       /CN=587BFB2C5B1A4B89CF15AA57010A64436482B44E
Certificate serial:       6DBCE688BE53D92998F381D88C043D78F0F939EF
Authority key identifier: 58:7B:FB:2C:5B:1A:4B:89:CF:15:AA:57:01:0A:64:43:64:82:B4:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/587BFB2C5B1A4B89CF15AA57010A64436482B44E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/323830343a343131343a3a2f33322d313238203d3e20323636303032.roa
Signing time:             Wed 16 Oct 2024 13:13:53 +0000
ROA not before:           Wed 16 Oct 2024 13:08:53 +0000
ROA not after:            Wed 15 Oct 2025 13:13:53 +0000
asID:                     266002
IP address blocks:        2804:4114::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:bc:e6:88:be:53:d9:29:98:f3:81:d8:8c:04:3d:78:f0:f9:39:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=587BFB2C5B1A4B89CF15AA57010A64436482B44E
        Validity
            Not Before: Oct 16 13:08:53 2024 GMT
            Not After : Oct 15 13:13:53 2025 GMT
        Subject: CN=C5974C730FA01CCAE6E9F90E56B3A1E075710C9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a2:bf:86:ad:bf:1a:b6:60:7e:c6:a8:29:a4:
                    ed:04:9a:53:c7:5d:98:e6:8e:fa:5e:bb:38:d0:5f:
                    13:da:e6:ec:1e:12:cc:b4:0a:d1:2e:03:f9:16:63:
                    86:91:a1:af:64:a6:e0:4b:8b:41:1a:b4:82:bc:4e:
                    41:18:3b:6b:69:b0:3d:85:10:e9:21:5a:04:3f:83:
                    5a:3d:60:19:66:22:83:94:58:f9:63:de:05:c5:c9:
                    9e:1f:0c:97:bc:33:13:c3:10:1e:00:fc:bc:e0:4b:
                    24:0d:65:47:51:b5:56:e5:66:18:0e:0d:ba:92:1f:
                    89:90:d8:97:e7:46:df:90:93:37:6e:6e:cc:80:27:
                    c8:90:1d:06:61:21:b9:7c:6d:26:ef:e5:5d:c7:e7:
                    27:eb:42:83:10:09:88:0b:85:1e:36:f7:01:99:e5:
                    25:8e:9e:34:6d:d2:f0:f4:ed:06:80:2f:6c:d6:53:
                    f7:53:81:d8:cb:3d:22:45:7d:13:75:b0:6f:12:fe:
                    70:2e:28:a4:2f:12:c3:17:f9:dc:51:cd:3a:c5:a5:
                    2d:f4:87:9d:76:78:a7:9f:f1:96:fa:9b:09:87:4f:
                    3b:da:bb:db:05:3d:87:7d:32:5a:da:6e:8f:2c:ac:
                    70:fa:81:fb:fd:17:f7:45:7f:ea:98:91:4a:82:13:
                    97:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:97:4C:73:0F:A0:1C:CA:E6:E9:F9:0E:56:B3:A1:E0:75:71:0C:9C
            X509v3 Authority Key Identifier:
                keyid:58:7B:FB:2C:5B:1A:4B:89:CF:15:AA:57:01:0A:64:43:64:82:B4:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/587BFB2C5B1A4B89CF15AA57010A64436482B44E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/587BFB2C5B1A4B89CF15AA57010A64436482B44E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/323830343a343131343a3a2f33322d313238203d3e20323636303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4114::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:43:42:0b:91:34:59:53:3c:2b:9a:75:c4:80:46:3b:c3:1a:
         b0:b1:c5:8d:0b:dc:1c:52:95:07:c0:64:4c:26:ea:e4:9a:c6:
         7b:ce:6d:af:f9:6d:f8:81:67:af:4a:72:e7:f2:83:98:59:de:
         10:06:f5:6c:3a:7d:56:84:f9:72:7a:7b:e9:43:5c:f1:91:e5:
         35:ca:39:c9:de:f9:11:b6:b7:9a:68:b2:80:50:1d:c3:00:21:
         72:72:e9:4d:37:68:16:60:c8:ee:c9:87:2c:82:7d:67:54:29:
         81:ea:1a:38:b5:04:27:19:b5:7a:7c:6b:d9:c6:60:b0:77:e6:
         36:4a:50:44:96:b5:11:b1:e1:03:0e:eb:fb:b9:c2:cc:b2:f5:
         df:4e:38:55:3b:c7:67:8d:4a:a5:a0:59:20:fe:c6:f5:03:84:
         37:47:ff:13:d1:d3:07:f6:5e:b2:5e:42:69:76:ec:e3:ff:79:
         bf:e8:4e:f3:02:c0:47:62:69:90:ec:5c:c2:10:42:f3:04:57:
         ac:30:41:52:ff:fd:0c:45:3d:25:77:d3:d3:8f:03:15:2e:52:
         71:48:66:c5:c5:0a:3b:2f:aa:41:c6:c4:20:d7:41:2f:b2:e3:
         c0:e3:dc:92:33:e1:5e:b0:f0:3e:33:4c:2d:71:05:c2:52:32:
         a0:7f:31:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 09:59:25 2024 by rpki-client on console-fra.rpki-client.org