Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/323830343a66633a3a2f33322d3434203d3e203238313432.roa
File:                     323830343a66633a3a2f33322d3434203d3e203238313432.roa (raw, json)
Hash identifier:          guSJgwo4pU9MhpG/yvfqpfWbvikmkJBLWdZ1dTHdzGQ=
Subject key identifier:   E0:8B:57:32:5E:41:E7:3F:36:1B:15:34:05:E2:9D:02:5A:61:66:99
Certificate issuer:       /CN=30D6291E9DCA7393E99691CAD422596A716588D1
Certificate serial:       19CBC3253B4F687184BFDF3A4EB8F26E2D93D0B2
Authority key identifier: 30:D6:29:1E:9D:CA:73:93:E9:96:91:CA:D4:22:59:6A:71:65:88:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30D6291E9DCA7393E99691CAD422596A716588D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/323830343a66633a3a2f33322d3434203d3e203238313432.roa
Signing time:             Thu 04 Apr 2024 08:00:20 +0000
ROA not before:           Thu 04 Apr 2024 07:55:20 +0000
ROA not after:            Thu 03 Apr 2025 08:00:20 +0000
asID:                     28142
IP address blocks:        2804:fc::/32 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:cb:c3:25:3b:4f:68:71:84:bf:df:3a:4e:b8:f2:6e:2d:93:d0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30D6291E9DCA7393E99691CAD422596A716588D1
        Validity
            Not Before: Apr  4 07:55:20 2024 GMT
            Not After : Apr  3 08:00:20 2025 GMT
        Subject: CN=E08B57325E41E73F361B153405E29D025A616699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6c:88:ca:b1:76:bd:69:9d:88:4e:34:4c:b5:
                    d1:0a:0f:92:2d:36:fd:ee:eb:2d:47:de:50:0d:7f:
                    a4:95:52:a0:08:ff:c3:81:53:84:c0:94:ee:e2:f9:
                    4e:c2:8c:9a:0c:11:5d:4c:66:01:33:df:32:bf:8e:
                    ee:b3:fb:40:4e:10:78:fb:5a:72:13:b5:e6:6b:b5:
                    dd:26:e3:6f:1d:c0:4a:00:bd:da:31:8f:39:96:fc:
                    39:12:de:cd:54:99:f8:09:33:92:99:28:8d:00:79:
                    74:32:93:41:53:09:b0:2e:16:ce:41:5e:39:02:3f:
                    c5:25:6e:22:33:78:3a:da:58:72:7c:9e:e9:f6:26:
                    6d:68:91:ba:c9:d7:59:fb:6e:44:f8:de:36:d2:66:
                    b2:4f:d8:37:74:c4:72:e4:3e:72:16:7a:cc:a2:e1:
                    5a:b5:9d:30:20:fc:36:a1:9f:75:37:d0:08:f9:52:
                    db:c2:b2:bf:fa:b9:13:5e:1c:bb:00:1c:08:c4:3f:
                    6a:58:77:ab:ca:bd:f2:77:c6:3d:31:9b:8c:7d:33:
                    ae:d1:e7:48:ed:19:06:25:8a:c8:b5:b6:7c:b8:42:
                    08:e6:7b:eb:63:16:13:8f:9f:f0:35:54:56:ba:f5:
                    7b:97:8f:c3:8b:53:f2:44:66:c0:aa:a8:ee:f3:ca:
                    70:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8B:57:32:5E:41:E7:3F:36:1B:15:34:05:E2:9D:02:5A:61:66:99
            X509v3 Authority Key Identifier:
                keyid:30:D6:29:1E:9D:CA:73:93:E9:96:91:CA:D4:22:59:6A:71:65:88:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/30D6291E9DCA7393E99691CAD422596A716588D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30D6291E9DCA7393E99691CAD422596A716588D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/323830343a66633a3a2f33322d3434203d3e203238313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:8d:44:0f:b3:41:47:45:5f:88:b0:a5:bd:a3:8c:61:15:83:
         00:c4:46:e9:5f:ee:12:2a:35:80:a5:fc:9c:b9:57:e5:23:d7:
         e7:3c:01:5e:bc:4d:78:fa:c6:cb:7e:ae:b7:2b:7f:c0:e2:fe:
         a7:6f:55:88:c7:62:8a:bd:72:50:75:95:d5:20:8b:c8:e2:b1:
         dd:2a:27:08:79:0d:40:0a:24:c1:ee:54:5f:6b:99:fe:df:a5:
         cf:24:71:39:6c:e9:87:fd:20:eb:48:d2:4d:22:15:99:48:ab:
         2c:3a:e0:d7:e3:68:77:3c:25:9b:4a:cc:de:40:e0:6c:4a:17:
         c0:e0:44:1c:11:3c:98:43:ff:b1:65:d0:36:fc:94:5b:b8:a8:
         bf:34:1d:c9:4e:4f:c2:5b:a8:97:61:a1:14:66:f1:38:99:3f:
         97:c9:0f:5c:eb:01:68:48:58:e6:23:db:97:c1:2f:f3:c0:b6:
         94:b4:db:ad:f9:a8:e4:91:08:85:ef:7d:01:e2:d2:45:85:97:
         95:ab:a9:5a:c0:d6:a2:ec:8e:5c:b0:cc:bf:64:98:2d:58:fb:
         a1:a9:01:33:f3:2d:cc:ab:4a:44:fb:da:b4:c5:84:f1:16:23:
         0b:db:55:69:c3:92:e3:2c:3f:22:7d:16:54:ce:9c:d3:9c:2f:
         8c:04:75:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 15:47:48 2024 by rpki-client on console-fra.rpki-client.org