Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/323830343a353963633a633030303a3a2f33342d3334203d3e20323638373236.roa
File:                     323830343a353963633a633030303a3a2f33342d3334203d3e20323638373236.roa (raw, json)
Hash identifier:          7zHyOPWZY2huujKSrG46CB74E0tonJzqKroMq2fdWCk=
Subject key identifier:   51:8F:A0:7F:96:38:E8:8C:A2:22:FC:B5:17:D3:1A:16:8E:B0:B0:6D
Certificate issuer:       /CN=1673CB8E8029AB9119773FC6F638B9264FDF3364
Certificate serial:       5CED0702BC6AFDC5497DDD9E0B084145D7904E40
Authority key identifier: 16:73:CB:8E:80:29:AB:91:19:77:3F:C6:F6:38:B9:26:4F:DF:33:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/323830343a353963633a633030303a3a2f33342d3334203d3e20323638373236.roa
Signing time:             Thu 04 Apr 2024 16:02:02 +0000
ROA not before:           Thu 04 Apr 2024 15:57:02 +0000
ROA not after:            Thu 03 Apr 2025 16:02:02 +0000
asID:                     268726
IP address blocks:        2804:59cc:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ed:07:02:bc:6a:fd:c5:49:7d:dd:9e:0b:08:41:45:d7:90:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1673CB8E8029AB9119773FC6F638B9264FDF3364
        Validity
            Not Before: Apr  4 15:57:02 2024 GMT
            Not After : Apr  3 16:02:02 2025 GMT
        Subject: CN=518FA07F9638E88CA222FCB517D31A168EB0B06D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:63:61:9c:93:24:b7:65:01:92:bd:b0:8b:bd:
                    f0:73:04:a9:ac:21:f7:2f:28:52:5e:80:3b:02:36:
                    24:44:c0:dc:b1:17:be:5c:68:1f:4f:81:25:a4:07:
                    ea:6f:c9:e7:8c:2d:d6:33:62:6d:e8:19:54:0d:79:
                    05:33:b7:a1:74:b7:97:d9:fd:36:bc:94:ea:87:54:
                    6f:1f:15:62:7d:43:8b:6c:b0:a3:f6:8c:d8:fa:d3:
                    1b:30:c9:b4:f8:66:d1:e0:92:8f:f5:89:78:1d:0d:
                    ec:09:a6:f3:ca:79:5a:42:c3:42:1d:23:3f:fa:7b:
                    38:ca:90:34:0e:a9:c6:d4:87:f5:51:6f:07:d6:80:
                    6f:c3:04:d1:15:21:85:2d:4b:c0:36:0f:49:59:68:
                    42:fe:02:c1:8a:19:f9:31:8c:51:80:e4:ee:43:fb:
                    df:fe:5f:50:07:c7:79:0f:94:f3:fa:2d:c9:f3:d8:
                    ea:9b:18:21:af:fb:da:2f:e5:28:88:49:0c:8e:ad:
                    e9:9f:2e:24:78:ad:8e:24:6d:54:ac:9f:b3:23:e5:
                    0a:2f:56:67:2f:6a:d7:a6:8d:fd:7f:3e:20:e0:97:
                    47:ea:a3:5b:ed:d3:be:2b:a7:7c:58:0b:a7:6a:32:
                    82:d8:15:35:d7:e0:b2:51:c9:86:7b:51:09:22:c6:
                    f6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8F:A0:7F:96:38:E8:8C:A2:22:FC:B5:17:D3:1A:16:8E:B0:B0:6D
            X509v3 Authority Key Identifier:
                keyid:16:73:CB:8E:80:29:AB:91:19:77:3F:C6:F6:38:B9:26:4F:DF:33:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/323830343a353963633a633030303a3a2f33342d3334203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59cc:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         59:20:02:9d:06:91:34:b1:e1:c8:1b:1b:4c:4d:5f:ec:33:0b:
         87:22:98:bb:69:93:a7:ef:91:cf:f4:c8:8b:4c:f4:06:74:ea:
         06:26:f4:59:83:87:64:39:98:04:95:a8:ec:54:3f:05:e7:45:
         4f:65:f9:12:47:87:83:bd:b4:8f:24:b2:a8:3c:45:43:2d:00:
         1e:84:1c:9b:15:cd:3a:6d:fa:93:9b:3f:fa:4c:c1:c6:bc:dc:
         c3:fe:ed:5e:bd:18:15:b2:28:03:d8:b0:2e:ac:7b:fe:d8:52:
         29:ca:d6:fc:0c:41:98:36:ad:8c:6d:85:ad:e9:93:41:b9:70:
         35:85:45:07:45:90:bf:6d:2f:4a:6a:43:c7:d5:10:f4:c1:5e:
         48:72:a5:60:c0:1c:15:c1:6c:66:8a:2a:2b:3c:59:22:8c:ff:
         e1:2c:d4:4c:aa:90:dc:7d:19:1a:49:67:7e:dd:88:fd:be:65:
         28:2c:64:94:53:26:ea:9b:af:e3:46:af:d5:e1:b3:5a:68:f4:
         d9:49:6d:cf:30:7b:4d:ba:82:14:fb:d4:19:6d:33:c9:f4:18:
         96:2e:bd:f9:25:be:db:aa:c7:4a:28:8b:d0:49:ac:d3:f9:a1:
         b3:40:f7:55:ef:8e:9c:8c:90:53:ab:dd:ba:86:68:54:04:1f:
         70:5a:33:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 04:25:23 2024 by rpki-client on console-fra.rpki-client.org