Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/1/323830343a323734303a343130303a3a2f34302d3430203d3e20323633383837.roa
File:                     323830343a323734303a343130303a3a2f34302d3430203d3e20323633383837.roa (raw, json)
Hash identifier:          p8fQWvvHCrZRUwjTm1FRYrgVtBdD0fMP+WiUiaacx5U=
Subject key identifier:   65:70:A2:9C:68:E3:15:DD:67:4C:92:D0:8C:BF:A4:2A:C8:C9:47:2A
Certificate issuer:       /CN=0EEE5B3317779C65050CA66FEB8B4806D25713DF
Certificate serial:       5F4345EBB1950D7028E57139AC8A15159075746E
Authority key identifier: 0E:EE:5B:33:17:77:9C:65:05:0C:A6:6F:EB:8B:48:06:D2:57:13:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EEE5B3317779C65050CA66FEB8B4806D25713DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/1/323830343a323734303a343130303a3a2f34302d3430203d3e20323633383837.roa
Signing time:             Thu 04 Apr 2024 11:35:01 +0000
ROA not before:           Thu 04 Apr 2024 11:30:01 +0000
ROA not after:            Thu 03 Apr 2025 11:35:01 +0000
asID:                     263887
IP address blocks:        2804:2740:4100::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:43:45:eb:b1:95:0d:70:28:e5:71:39:ac:8a:15:15:90:75:74:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EEE5B3317779C65050CA66FEB8B4806D25713DF
        Validity
            Not Before: Apr  4 11:30:01 2024 GMT
            Not After : Apr  3 11:35:01 2025 GMT
        Subject: CN=6570A29C68E315DD674C92D08CBFA42AC8C9472A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ab:85:6f:3d:44:65:20:0b:ce:6d:c2:6f:00:
                    b0:0b:3b:0f:c7:36:4b:dd:d3:fd:4d:37:22:1a:5c:
                    6e:38:9b:01:2d:ca:4f:ea:0a:c6:6a:48:7e:6c:97:
                    12:c1:33:5a:7e:57:17:db:c7:ce:b0:fb:0c:a3:37:
                    8d:a2:c9:67:6b:b0:43:96:6f:2e:a8:70:e8:df:dc:
                    5a:6e:ca:21:c7:1b:70:fd:0e:27:15:c4:ae:14:78:
                    83:a5:5c:57:51:4e:91:df:31:6e:cb:d4:c2:4a:a9:
                    fd:5e:6e:99:af:a1:dd:b0:b7:cc:6a:fb:77:b8:c4:
                    b8:a2:8b:1e:a2:72:39:03:d0:b8:a4:44:85:36:f9:
                    05:d7:d1:d0:46:13:56:23:52:82:fa:7f:2d:46:04:
                    c8:94:ac:f0:ef:f2:5c:33:a6:b2:b0:02:7a:fd:29:
                    86:1c:97:59:4b:d3:08:95:be:9e:c5:1c:6a:11:23:
                    04:1c:1d:6f:75:2e:1b:a0:29:92:d2:fe:a3:42:4a:
                    c8:74:c9:0c:6f:78:dd:69:51:1f:e7:c0:9d:d4:de:
                    2d:e2:18:69:fc:45:24:f1:39:95:3b:c7:fc:44:cd:
                    b2:de:cc:cf:a6:e1:f7:2a:e8:96:de:e8:0a:79:a8:
                    50:0b:db:6c:fe:39:8f:1b:4f:27:00:0d:7c:2a:c4:
                    03:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:70:A2:9C:68:E3:15:DD:67:4C:92:D0:8C:BF:A4:2A:C8:C9:47:2A
            X509v3 Authority Key Identifier:
                keyid:0E:EE:5B:33:17:77:9C:65:05:0C:A6:6F:EB:8B:48:06:D2:57:13:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/1/0EEE5B3317779C65050CA66FEB8B4806D25713DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EEE5B3317779C65050CA66FEB8B4806D25713DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/1/323830343a323734303a343130303a3a2f34302d3430203d3e20323633383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2740:4100::/40

    Signature Algorithm: sha256WithRSAEncryption
         65:5a:95:5f:d9:d4:5c:90:3a:d2:a8:1d:8b:92:ec:7f:d1:8b:
         6a:47:bf:20:2c:e2:89:73:0c:26:60:93:ee:1f:dc:07:f1:88:
         ea:70:8d:83:84:4f:ed:dd:b7:64:05:08:9d:d8:ae:8e:64:bd:
         97:3b:fb:97:70:af:f2:b5:1a:7c:d3:eb:3b:b2:1a:57:67:d6:
         53:7f:b7:12:80:01:94:2c:aa:f5:1d:3a:83:71:c2:15:15:0b:
         0b:57:a3:f8:a7:0f:69:1d:23:15:cc:75:ae:8d:db:74:8a:79:
         bd:5e:88:67:56:ac:6c:0d:85:a8:d7:bd:99:3f:03:27:0b:a4:
         f3:51:e7:b6:0f:f0:f3:b5:c3:f0:3a:4c:c8:42:7a:9c:0f:89:
         2c:8b:f4:75:55:cc:b7:83:f5:4a:d6:b8:21:3b:43:0a:9c:87:
         bb:37:2f:d5:36:6a:a5:dc:c7:ef:2c:ca:36:16:95:be:6c:19:
         49:a7:21:bc:89:8e:a0:63:fd:47:d9:f9:20:52:f8:71:0a:a1:
         06:63:9d:17:ac:ec:ed:a4:13:5e:4e:2e:91:e4:20:82:2f:23:
         e8:db:ea:8c:6c:a4:72:43:10:17:29:d6:19:dd:83:55:a0:f2:
         3d:93:ee:81:27:ed:be:0d:03:78:55:11:34:d7:33:87:71:13:
         f9:75:47:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 18:46:30 2024 by rpki-client on console-fra.rpki-client.org