Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/323830343a353937383a6530303a3a2f34312d3431203d3e20323638373034.roa
File:                     323830343a353937383a6530303a3a2f34312d3431203d3e20323638373034.roa (raw, json)
Hash identifier:          4G6zFRgDFfuKawsidK9017WBmmwfSUNwljP0gkMBvBI=
Subject key identifier:   DD:4B:C3:A3:DB:38:CF:D9:37:B1:82:1D:82:98:30:1B:E2:F9:1A:BF
Certificate issuer:       /CN=96A28B7606385C538AB85121C62CC8D2D1FFF64F
Certificate serial:       52E4447FECB9098866FAE9770F26BA093FA61936
Authority key identifier: 96:A2:8B:76:06:38:5C:53:8A:B8:51:21:C6:2C:C8:D2:D1:FF:F6:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96A28B7606385C538AB85121C62CC8D2D1FFF64F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/323830343a353937383a6530303a3a2f34312d3431203d3e20323638373034.roa
Signing time:             Mon 05 Aug 2024 03:41:41 +0000
ROA not before:           Mon 05 Aug 2024 03:36:41 +0000
ROA not after:            Mon 04 Aug 2025 03:41:41 +0000
asID:                     268704
IP address blocks:        2804:5978:e00::/41 maxlen: 41

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e4:44:7f:ec:b9:09:88:66:fa:e9:77:0f:26:ba:09:3f:a6:19:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96A28B7606385C538AB85121C62CC8D2D1FFF64F
        Validity
            Not Before: Aug  5 03:36:41 2024 GMT
            Not After : Aug  4 03:41:41 2025 GMT
        Subject: CN=DD4BC3A3DB38CFD937B1821D8298301BE2F91ABF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f7:6c:3f:2c:87:02:83:2a:df:68:60:e2:05:
                    d2:fd:dd:a2:ed:12:3f:1a:30:55:d1:60:d8:aa:cb:
                    5a:0f:43:f4:9e:a2:ce:a5:d5:8e:c9:7d:b7:65:c3:
                    ff:ef:3f:a2:c8:84:1e:5a:7d:6a:9d:38:ce:c7:2c:
                    7a:5a:4e:5b:fd:d3:9a:96:df:b4:e4:6e:59:22:69:
                    21:2a:97:7a:55:9f:b3:47:7b:c5:19:43:fe:e5:91:
                    3f:bc:8a:57:76:7b:e2:9d:3b:90:c9:dd:e5:4d:05:
                    30:33:77:ce:79:87:ae:5b:62:7f:74:61:ca:eb:70:
                    78:da:21:b9:ad:38:5c:f8:c9:76:ee:03:fc:71:ae:
                    cf:ed:e5:77:46:f8:89:c4:ca:27:32:c4:72:f3:ab:
                    ec:8f:65:1b:5f:a9:d5:e1:27:13:0c:6e:a6:fb:8e:
                    28:97:5a:c9:cd:e5:c0:e0:26:04:40:64:c4:23:2c:
                    1c:e0:ff:21:d9:8d:6d:c9:47:4c:39:48:2f:67:3e:
                    5a:2c:31:3b:fd:8b:56:e6:97:c4:9e:b8:64:d8:eb:
                    6f:09:47:9c:4e:91:93:6e:c8:b1:8e:6a:3b:d6:42:
                    e5:9a:e2:5b:70:04:75:1e:22:61:a4:38:dc:35:e3:
                    65:62:70:81:e8:6c:83:3c:db:31:cc:0c:49:bf:74:
                    99:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4B:C3:A3:DB:38:CF:D9:37:B1:82:1D:82:98:30:1B:E2:F9:1A:BF
            X509v3 Authority Key Identifier:
                keyid:96:A2:8B:76:06:38:5C:53:8A:B8:51:21:C6:2C:C8:D2:D1:FF:F6:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/96A28B7606385C538AB85121C62CC8D2D1FFF64F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96A28B7606385C538AB85121C62CC8D2D1FFF64F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/323830343a353937383a6530303a3a2f34312d3431203d3e20323638373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5978:e00::/41

    Signature Algorithm: sha256WithRSAEncryption
         8d:56:90:89:2f:5b:fe:60:80:4a:96:9e:1d:34:a7:9b:88:b0:
         ba:79:3b:03:87:a4:2d:c8:c2:ec:9d:54:eb:e5:84:50:8f:1a:
         61:92:59:2b:52:5f:0c:31:8a:7f:a8:38:e7:a6:34:da:cb:94:
         f3:2f:d3:fe:28:f7:45:a6:b7:6c:c3:84:7a:4f:60:a6:58:68:
         17:7d:02:82:6e:c1:62:cb:b1:ec:60:43:74:82:3b:82:38:8d:
         38:76:53:58:9a:0c:fe:9c:06:57:68:b0:18:60:d4:af:21:a0:
         9a:02:57:80:fb:ed:b1:d4:0c:de:a1:2c:9c:12:27:32:a1:de:
         3c:bb:d6:8c:5c:ee:0d:6d:2d:6c:71:fd:62:e1:b6:35:a3:fe:
         4e:83:ac:3e:3e:67:6d:fa:70:4a:28:eb:c9:93:90:ca:56:7f:
         58:21:f5:fe:86:2a:fc:cc:c4:44:2c:e0:69:fe:0b:34:9d:ea:
         28:04:5d:3e:35:22:30:a6:3c:0e:01:ea:b7:35:9b:2d:14:37:
         5f:d3:ed:6a:6a:55:2d:1b:77:1e:04:9d:0c:76:4f:bb:b8:12:
         04:be:93:e0:74:47:b8:20:dd:37:c9:df:78:ce:cd:3a:e6:0e:
         39:de:72:b6:3e:07:df:b2:b8:11:b8:24:21:80:3f:5d:98:17:
         43:85:97:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 13:19:42 2024 by rpki-client on console-fra.rpki-client.org