Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/323830343a6563343a3a2f33332d3333203d3e20323632393733.roa
File:                     323830343a6563343a3a2f33332d3333203d3e20323632393733.roa (raw, json)
Hash identifier:          fJnJEYQVHXCXozDsHnZZ1CEd4DYKXzbfcgiWrb/3Hhw=
Subject key identifier:   65:4D:8A:FC:04:A3:53:40:C6:E6:E8:AE:BD:A8:58:2C:DA:82:04:AB
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       5E24E859B4E17DF2DFFE72946C5D80F86701E717
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/323830343a6563343a3a2f33332d3333203d3e20323632393733.roa
Signing time:             Tue 24 Sep 2024 17:45:29 +0000
ROA not before:           Tue 24 Sep 2024 17:40:29 +0000
ROA not after:            Tue 23 Sep 2025 17:45:29 +0000
asID:                     262973
IP address blocks:        2804:ec4::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:24:e8:59:b4:e1:7d:f2:df:fe:72:94:6c:5d:80:f8:67:01:e7:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Sep 24 17:40:29 2024 GMT
            Not After : Sep 23 17:45:29 2025 GMT
        Subject: CN=654D8AFC04A35340C6E6E8AEBDA8582CDA8204AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ef:e2:6b:9a:1e:08:3a:4a:aa:e0:b4:6e:04:
                    b0:ac:5c:5e:d5:42:d4:f9:13:ea:93:57:0b:a6:20:
                    a1:12:97:c6:14:86:eb:a8:2a:b2:e4:62:e6:55:31:
                    e7:45:ea:76:6b:d1:c3:96:35:e3:4c:a7:a4:cf:5b:
                    c0:15:9c:6d:38:8b:96:55:66:f2:92:78:00:29:67:
                    dc:8a:1e:0e:bb:05:09:25:76:d7:62:a5:fb:a6:f5:
                    be:18:14:62:83:ec:99:82:71:b5:aa:01:a8:c5:ad:
                    93:94:b3:54:6f:88:2b:69:ff:99:58:26:8d:08:d4:
                    2f:6a:c0:a6:74:c2:76:43:c4:ed:d3:7b:0e:3e:e2:
                    2f:17:34:82:5a:53:f4:d0:3d:c3:69:78:5f:72:29:
                    df:b0:a2:19:5c:10:53:1c:1d:51:8a:f2:51:90:3b:
                    3d:19:8a:76:e2:d7:3f:ae:7f:e0:73:9c:57:31:69:
                    a8:25:fb:51:1e:b8:91:c2:03:6c:1d:9d:ab:28:6e:
                    a2:2e:3a:6d:02:e1:5c:ad:92:ac:d0:dc:fa:ac:52:
                    e5:17:fd:47:27:a7:7d:b9:3c:d0:ed:b3:b6:c2:98:
                    36:ee:33:b0:a8:81:64:36:ab:80:41:b4:79:69:13:
                    3e:7e:24:2f:6c:5e:46:e2:df:f3:c5:3a:8c:2e:7a:
                    3f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4D:8A:FC:04:A3:53:40:C6:E6:E8:AE:BD:A8:58:2C:DA:82:04:AB
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/323830343a6563343a3a2f33332d3333203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec4::/33

    Signature Algorithm: sha256WithRSAEncryption
         18:cb:51:63:98:64:5e:92:2b:9b:52:50:1c:c0:47:26:6e:b1:
         71:60:76:40:72:9d:6e:a6:93:6b:c7:ab:b5:97:93:23:02:83:
         80:d5:ac:3c:ba:78:6e:45:f9:00:cf:52:c7:e8:16:6a:3a:cf:
         31:3f:85:de:a9:af:d7:9e:86:02:25:45:c7:08:23:25:6d:39:
         cd:dc:94:66:d6:f7:cf:2f:88:7c:79:73:b3:20:f6:e1:0f:50:
         59:ac:58:f4:14:6a:d6:a7:f0:40:3d:fe:69:26:30:e5:f5:e9:
         33:f4:ee:c8:28:97:93:69:cd:3d:bc:36:68:04:a6:c6:7c:02:
         13:3b:48:9b:a6:b8:95:7a:f9:ce:70:53:df:00:4c:8c:6d:42:
         16:2f:63:aa:5c:5a:6a:30:a0:cc:68:f4:9a:2d:5f:1d:58:d0:
         99:93:cc:2b:60:0a:db:0e:fb:9e:d4:cc:f3:82:c6:62:79:ff:
         37:7a:64:91:29:1d:53:ff:02:f4:ec:0b:4a:b6:d8:61:b2:5b:
         67:cd:00:6c:5a:52:56:cb:58:41:de:a3:03:f4:7e:74:b1:a3:
         88:ed:70:37:d0:c0:6a:b4:f4:db:b4:6f:04:6c:b0:4c:ec:31:
         0f:ef:af:fe:02:6f:2f:8a:91:9b:1d:74:c2:9f:86:62:92:ac:
         98:85:c8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 23:32:24 2024 by rpki-client on console-fra.rpki-client.org