Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/323830343a363363633a3a2f33322d3438203d3e20323639333834.roa
File:                     323830343a363363633a3a2f33322d3438203d3e20323639333834.roa (raw, json)
Hash identifier:          X4e8xhGBfJchAf+4JWt5obAlS15Nn50KPe+UnQRKdps=
Subject key identifier:   37:67:33:53:18:F6:75:BE:15:A2:5C:7E:27:DE:30:69:94:2B:2E:08
Certificate issuer:       /CN=F5B1AADB3E77F88400EF6BADDE09B2D75E04071B
Certificate serial:       3B24AFCE0F04CBEF20FEA80ED2CC9FA168879CE9
Authority key identifier: F5:B1:AA:DB:3E:77:F8:84:00:EF:6B:AD:DE:09:B2:D7:5E:04:07:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B1AADB3E77F88400EF6BADDE09B2D75E04071B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/323830343a363363633a3a2f33322d3438203d3e20323639333834.roa
Signing time:             Wed 07 Aug 2024 18:57:53 +0000
ROA not before:           Wed 07 Aug 2024 18:52:53 +0000
ROA not after:            Wed 06 Aug 2025 18:57:53 +0000
asID:                     269384
IP address blocks:        2804:63cc::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:24:af:ce:0f:04:cb:ef:20:fe:a8:0e:d2:cc:9f:a1:68:87:9c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5B1AADB3E77F88400EF6BADDE09B2D75E04071B
        Validity
            Not Before: Aug  7 18:52:53 2024 GMT
            Not After : Aug  6 18:57:53 2025 GMT
        Subject: CN=3767335318F675BE15A25C7E27DE3069942B2E08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6d:d3:a1:dd:10:3d:e2:4e:bc:0d:e7:d6:97:
                    1a:fb:54:97:a0:02:7f:cb:5d:5c:7e:bb:91:6d:29:
                    7f:67:36:94:39:3d:63:3f:72:2d:ff:90:74:29:ff:
                    44:06:be:a6:a2:89:40:5a:65:72:63:3c:d4:53:ac:
                    69:3d:87:a7:d8:be:28:d6:aa:a9:be:2d:1d:2a:8a:
                    03:26:17:73:24:ff:50:9d:6a:39:97:82:f2:51:89:
                    7b:c4:3d:6b:33:a9:0c:4c:b3:c6:82:3b:5c:dd:60:
                    89:5f:64:4d:d4:39:c3:04:00:b3:09:13:9e:e3:fc:
                    e5:7a:e9:96:80:e3:86:41:4b:9e:79:ae:a7:29:13:
                    ad:19:6c:90:20:9d:16:e4:7f:57:93:f0:9c:c2:7a:
                    01:e9:73:35:fe:ee:33:13:46:f0:51:d0:0c:33:fd:
                    25:73:84:6c:03:bb:b2:96:35:04:6b:73:cb:f0:c3:
                    2d:bb:67:db:02:53:0f:7e:fb:b5:39:c9:50:a2:de:
                    90:b6:73:7c:90:18:2f:9a:08:6f:64:33:d0:fa:d6:
                    45:45:a0:ba:02:83:bf:c8:f1:cf:36:07:97:a9:04:
                    11:8d:e2:46:1b:61:e3:36:68:6b:47:21:4c:2a:55:
                    63:4c:0a:3e:26:e7:94:02:70:ba:5e:72:6e:27:a7:
                    83:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:67:33:53:18:F6:75:BE:15:A2:5C:7E:27:DE:30:69:94:2B:2E:08
            X509v3 Authority Key Identifier:
                keyid:F5:B1:AA:DB:3E:77:F8:84:00:EF:6B:AD:DE:09:B2:D7:5E:04:07:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/F5B1AADB3E77F88400EF6BADDE09B2D75E04071B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B1AADB3E77F88400EF6BADDE09B2D75E04071B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/323830343a363363633a3a2f33322d3438203d3e20323639333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:90:85:81:43:0a:f3:f2:9a:df:0e:4c:17:76:71:e5:76:7c:
         0c:e0:47:79:e7:ce:aa:e4:d5:fc:2a:fb:0a:27:eb:0f:98:63:
         62:98:45:50:f7:8a:8e:3f:cf:2a:ee:b1:1d:f3:90:f6:30:e3:
         8f:18:ce:de:84:83:0e:be:f4:42:05:30:1a:33:02:a0:3d:d0:
         43:70:da:58:d9:fa:38:1a:32:a5:f5:c7:07:18:8a:87:8c:8d:
         af:7d:f7:37:72:87:ce:90:58:18:f5:31:8e:22:44:9a:ab:4b:
         76:5a:12:e9:9b:b4:70:97:22:87:03:1e:95:10:d6:ab:91:7e:
         91:ea:e5:47:a1:00:35:bf:01:8b:91:85:60:86:95:01:d3:39:
         f8:c5:ea:78:f9:88:a8:42:4b:da:09:e1:c5:1d:7c:5b:b8:85:
         cb:ea:c4:0f:94:40:6d:ad:98:3c:3c:a0:bd:ae:1d:a6:c1:e7:
         d5:1b:0f:d2:02:32:e0:ed:29:6f:14:fd:72:c6:9d:5e:2a:35:
         26:0c:6b:56:4a:c9:09:60:22:dc:6b:3d:3e:7e:ef:90:b6:82:
         cc:a7:4e:b8:b6:96:e8:5a:f6:0b:cb:57:09:70:50:1e:f4:46:
         3a:a2:8c:16:ff:85:3b:8e:b9:50:48:d2:d9:e0:06:cf:50:13:
         89:c4:fb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 13:03:13 2024 by rpki-client on console-fra.rpki-client.org