Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/1/323830343a323734303a343030303a3a2f34302d3430203d3e20323633383837.roa
File:                     323830343a323734303a343030303a3a2f34302d3430203d3e20323633383837.roa (raw, json)
Hash identifier:          hQv22e9k/kjJQhD+cFhkZrnd3NsPuGhcgwKPA9FRy5k=
Subject key identifier:   45:FF:7E:93:BD:DA:21:94:67:53:A9:75:4F:3D:AD:87:A0:8A:9E:C6
Certificate issuer:       /CN=0EEE5B3317779C65050CA66FEB8B4806D25713DF
Certificate serial:       5B85F51C8049597B5977FD586F0A329644754156
Authority key identifier: 0E:EE:5B:33:17:77:9C:65:05:0C:A6:6F:EB:8B:48:06:D2:57:13:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EEE5B3317779C65050CA66FEB8B4806D25713DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/1/323830343a323734303a343030303a3a2f34302d3430203d3e20323633383837.roa
Signing time:             Thu 04 Apr 2024 11:35:02 +0000
ROA not before:           Thu 04 Apr 2024 11:30:02 +0000
ROA not after:            Thu 03 Apr 2025 11:35:02 +0000
asID:                     263887
IP address blocks:        2804:2740:4000::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:85:f5:1c:80:49:59:7b:59:77:fd:58:6f:0a:32:96:44:75:41:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EEE5B3317779C65050CA66FEB8B4806D25713DF
        Validity
            Not Before: Apr  4 11:30:02 2024 GMT
            Not After : Apr  3 11:35:02 2025 GMT
        Subject: CN=45FF7E93BDDA21946753A9754F3DAD87A08A9EC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:12:32:d8:4a:01:93:f9:7e:d3:b3:1b:3f:a4:
                    ff:d1:ca:68:2b:b4:4c:01:ad:6a:4a:fa:74:4c:cd:
                    87:53:c8:30:b6:4a:d0:62:b1:ca:c4:10:0b:fb:ea:
                    b3:a1:06:12:c5:63:78:76:a4:76:73:43:f7:17:53:
                    16:4b:03:2d:ff:fd:1d:5c:f9:9b:70:8a:39:67:12:
                    ad:4c:34:70:27:f7:f0:18:27:fa:71:0a:4b:b9:1d:
                    79:f1:85:b5:1f:c2:75:05:06:8d:12:92:b8:5d:b8:
                    bc:5b:8b:c1:5b:3b:fe:79:ce:4c:cb:9b:de:11:d2:
                    48:bd:68:15:de:11:e4:7a:68:7d:4e:f0:85:26:e6:
                    37:52:5f:e2:74:11:fb:07:4c:24:f9:0b:0c:54:cd:
                    f2:a0:8c:78:27:d8:97:c6:96:be:c2:a9:7a:f0:a4:
                    21:b4:c4:5a:18:5c:0e:87:d7:51:81:71:8d:b1:e9:
                    f7:ba:f4:6e:ee:06:a2:f0:a5:57:75:7e:03:f7:ad:
                    ea:69:db:e3:b6:5f:09:cc:5a:a3:63:a4:d8:24:e5:
                    ec:26:e9:b2:06:2a:b1:59:89:0a:61:fb:e1:eb:54:
                    da:32:34:0c:20:19:e1:3d:d7:45:bd:62:80:8e:33:
                    30:f7:c6:e8:6f:d9:d8:34:8b:3a:66:25:f8:e8:66:
                    ce:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FF:7E:93:BD:DA:21:94:67:53:A9:75:4F:3D:AD:87:A0:8A:9E:C6
            X509v3 Authority Key Identifier:
                keyid:0E:EE:5B:33:17:77:9C:65:05:0C:A6:6F:EB:8B:48:06:D2:57:13:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/1/0EEE5B3317779C65050CA66FEB8B4806D25713DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EEE5B3317779C65050CA66FEB8B4806D25713DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/1/323830343a323734303a343030303a3a2f34302d3430203d3e20323633383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2740:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         af:cd:1d:23:69:d7:74:cf:17:fc:b4:7d:07:4a:b8:7d:92:5c:
         26:70:dd:4f:a5:04:f3:e7:78:dd:1b:7b:cb:c2:8c:62:95:51:
         5c:7f:ef:2c:80:a8:68:ee:01:25:a3:03:ca:bb:c9:a2:91:ea:
         42:81:5e:8e:0f:03:29:15:64:69:ca:5d:a4:ad:98:ce:0c:a8:
         bc:cd:10:6f:9c:48:db:9f:ba:db:33:30:c8:f1:13:bc:59:67:
         1e:e1:2b:a2:5a:5e:ab:30:59:2b:97:d5:2a:18:9c:5a:d7:aa:
         a2:d5:1f:e5:c8:b1:6a:35:4c:f3:fb:a2:81:7d:b6:86:24:1f:
         33:84:be:b5:45:2f:30:10:09:f0:6f:7a:b6:db:fb:d5:ae:b7:
         2e:6c:0b:46:5c:cb:64:7f:c7:18:c3:e3:b0:6b:32:f8:ca:60:
         9d:3a:ee:03:a0:dd:90:a8:66:60:ac:7d:ea:d2:38:e6:64:f2:
         94:42:fb:68:cf:c3:c2:6f:5d:e9:77:ca:a2:0c:c2:43:ee:80:
         d7:35:9a:20:c6:df:4b:49:61:d5:38:e1:74:3c:ab:6c:27:25:
         7d:0e:af:78:59:f5:48:be:5f:79:8e:94:31:1f:6a:2d:63:3d:
         49:4b:7e:ea:b2:79:82:36:ef:2b:63:97:7a:26:e9:37:1b:a0:
         2a:fa:92:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 18:46:30 2024 by rpki-client on console-fra.rpki-client.org