Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/1/323830343a3831633a3a2f33322d3438203d3e20323632333436.roa
File:                     323830343a3831633a3a2f33322d3438203d3e20323632333436.roa (raw, json)
Hash identifier:          hZu2G4nb8hWlTLiDgOSiqjUQPMX+NzE486kx6wQOe0w=
Subject key identifier:   DF:AF:ED:14:E5:EB:52:BB:C3:B6:9F:AC:76:C8:DD:1B:6C:C1:6C:B3
Certificate issuer:       /CN=D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70
Certificate serial:       34A80A7AE637ECB9D900527743B94B41CB1FCEBC
Authority key identifier: D1:FE:02:A4:C1:26:A3:FA:7B:9D:44:BE:A1:8A:15:96:2D:71:BF:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/1/323830343a3831633a3a2f33322d3438203d3e20323632333436.roa
Signing time:             Thu 04 Apr 2024 08:11:35 +0000
ROA not before:           Thu 04 Apr 2024 08:06:35 +0000
ROA not after:            Thu 03 Apr 2025 08:11:35 +0000
asID:                     262346
IP address blocks:        2804:81c::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a8:0a:7a:e6:37:ec:b9:d9:00:52:77:43:b9:4b:41:cb:1f:ce:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70
        Validity
            Not Before: Apr  4 08:06:35 2024 GMT
            Not After : Apr  3 08:11:35 2025 GMT
        Subject: CN=DFAFED14E5EB52BBC3B69FAC76C8DD1B6CC16CB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:97:f1:a2:af:c0:72:90:3b:4d:9a:c5:79:83:
                    77:8e:72:f6:1d:71:9b:6e:1d:67:60:4d:ff:4b:ac:
                    e6:22:d6:b7:4e:d8:ee:db:fd:8b:d8:02:84:1d:e6:
                    ce:e8:19:33:16:a4:62:4a:f8:66:c1:01:5c:f0:c2:
                    a3:80:36:30:1c:d7:b7:c6:09:9c:b4:88:63:9c:fc:
                    24:c3:d3:fa:ce:06:24:05:56:cb:84:05:7b:79:44:
                    91:81:43:11:78:df:a3:fa:9a:5e:ea:59:c0:ee:0b:
                    c8:12:21:ec:a3:66:e6:41:09:aa:10:c8:62:be:cf:
                    2d:e0:40:e7:fd:33:3a:27:e7:53:0c:df:1f:ae:29:
                    af:7f:27:bb:66:67:ee:14:48:9e:51:50:33:3c:d0:
                    6f:ee:81:0d:9a:f4:da:7a:a0:bf:93:87:f0:e5:d2:
                    fb:a2:c3:a8:b4:f5:6e:6a:a4:ca:2d:7e:04:24:c1:
                    94:2c:dc:d2:9f:41:81:ce:b5:c7:91:67:c7:ed:c4:
                    a9:e3:29:12:33:e6:b2:b7:24:57:12:54:44:32:3f:
                    c3:13:90:9a:17:52:f1:16:6f:30:d3:69:9c:67:1b:
                    31:74:7f:ca:0a:93:f3:5c:68:f2:ee:9d:f3:95:6c:
                    51:7d:06:99:5c:c2:b8:9e:8c:dc:d8:39:86:b8:10:
                    56:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AF:ED:14:E5:EB:52:BB:C3:B6:9F:AC:76:C8:DD:1B:6C:C1:6C:B3
            X509v3 Authority Key Identifier:
                keyid:D1:FE:02:A4:C1:26:A3:FA:7B:9D:44:BE:A1:8A:15:96:2D:71:BF:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/1/D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/1/323830343a3831633a3a2f33322d3438203d3e20323632333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:81c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:2e:59:f2:59:26:55:fd:d7:8c:03:08:41:42:94:a8:b5:60:
         c1:5b:88:80:af:99:fa:bb:be:9c:27:91:c2:bc:09:79:99:19:
         63:34:9b:02:0e:86:0a:7f:50:9d:34:66:b9:f1:5a:98:ba:d3:
         fc:d2:8a:4c:87:91:d8:52:3a:80:7b:c7:60:17:af:31:3b:b1:
         3d:09:63:d1:96:84:16:01:26:bb:ff:9a:5e:20:61:27:b7:cc:
         71:d0:70:b4:d9:16:b5:0c:c6:a9:19:df:31:5e:26:f2:44:37:
         e3:fa:b0:ea:77:4c:56:46:7e:eb:59:93:93:07:13:41:20:c9:
         d5:cb:30:a4:7e:e7:a0:c4:dd:85:4f:8d:26:e2:48:e0:6a:c2:
         3b:c4:40:ef:a7:8d:a1:fe:3e:f0:37:4e:76:a4:5d:41:79:f3:
         33:fb:31:88:31:cf:d5:23:46:6e:f7:24:59:67:09:ee:e7:1a:
         db:00:23:50:1d:58:d1:c2:77:61:60:f5:cf:21:ee:2a:79:78:
         0f:6c:0f:c2:3e:2a:50:b1:23:db:bd:70:f1:98:d5:f5:91:e0:
         98:a4:55:55:4a:b3:eb:d2:af:8c:7f:f2:c0:e7:ed:ac:b8:44:
         96:b3:f6:84:59:4c:be:96:80:26:56:2b:d3:fd:fa:10:d2:72:
         98:5c:ac:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 07:42:58 2024 by rpki-client on console-fra.rpki-client.org