Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FWvvvEzZ8giEcyXSRACabcUKnufSm6n5oKJfbyy8vh2J/0/323830343a363866633a3a2f33322d3334203d3e20323730323431.roa
File:                     323830343a363866633a3a2f33322d3334203d3e20323730323431.roa (raw, json)
Hash identifier:          /Mqct2UARh7NQhSD3TgI4TP/5Vo891jeQzsaNpKKRbU=
Subject key identifier:   78:C9:41:DA:10:4F:FE:D8:3D:39:53:E1:8B:AB:76:4D:2F:DF:46:A3
Certificate issuer:       /CN=19F044868A58985E9D4E89662B0D777CF6EBABB7
Certificate serial:       52A05A8325385A1CF006D4AC579B4C34175D4163
Authority key identifier: 19:F0:44:86:8A:58:98:5E:9D:4E:89:66:2B:0D:77:7C:F6:EB:AB:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19F044868A58985E9D4E89662B0D777CF6EBABB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FWvvvEzZ8giEcyXSRACabcUKnufSm6n5oKJfbyy8vh2J/0/323830343a363866633a3a2f33322d3334203d3e20323730323431.roa
Signing time:             Fri 16 Aug 2024 18:25:08 +0000
ROA not before:           Fri 16 Aug 2024 18:20:08 +0000
ROA not after:            Fri 15 Aug 2025 18:25:08 +0000
asID:                     270241
IP address blocks:        2804:68fc::/32 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a0:5a:83:25:38:5a:1c:f0:06:d4:ac:57:9b:4c:34:17:5d:41:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19F044868A58985E9D4E89662B0D777CF6EBABB7
        Validity
            Not Before: Aug 16 18:20:08 2024 GMT
            Not After : Aug 15 18:25:08 2025 GMT
        Subject: CN=78C941DA104FFED83D3953E18BAB764D2FDF46A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8f:61:6f:6b:65:2b:a1:ce:af:46:e2:1d:aa:
                    4d:09:d5:84:39:be:80:94:54:47:33:34:c9:c3:4f:
                    75:08:af:b6:92:f0:9a:9b:5c:53:d8:bc:dd:74:39:
                    34:96:3f:d3:e0:40:1c:f6:2c:d1:b6:34:b0:af:1b:
                    2d:b2:d5:03:5d:e3:f6:f1:a3:45:b0:51:3f:98:97:
                    1e:27:95:b3:f2:62:22:ca:5b:7c:70:90:fd:3a:2d:
                    b3:f1:62:d0:ef:7a:7d:02:c0:a3:f6:e3:c0:be:ff:
                    45:70:0c:5a:4d:08:11:55:00:5e:b5:2c:0a:b1:0b:
                    3b:21:40:9d:01:e7:d9:36:5a:9f:30:4a:0c:f0:ec:
                    9f:98:bc:c3:99:36:7a:a0:bc:83:71:a2:29:6c:75:
                    fd:be:1c:fb:c7:40:b4:63:8f:19:d4:05:56:01:af:
                    02:49:62:e9:3e:43:5e:f2:b1:dc:20:d0:94:c4:ef:
                    8f:44:5c:62:ca:12:2f:be:5f:7f:e5:88:ef:1b:ab:
                    cd:9a:da:a7:46:9c:8b:40:59:09:d6:b8:5f:1f:2c:
                    0c:c0:6d:c1:01:88:ef:2a:73:af:07:70:37:e3:8e:
                    11:8c:95:0a:f8:64:34:21:02:a9:a7:f2:32:81:76:
                    cb:34:af:07:ca:e4:2d:1b:29:b6:2b:e7:02:e2:8a:
                    b1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C9:41:DA:10:4F:FE:D8:3D:39:53:E1:8B:AB:76:4D:2F:DF:46:A3
            X509v3 Authority Key Identifier:
                keyid:19:F0:44:86:8A:58:98:5E:9D:4E:89:66:2B:0D:77:7C:F6:EB:AB:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FWvvvEzZ8giEcyXSRACabcUKnufSm6n5oKJfbyy8vh2J/0/19F044868A58985E9D4E89662B0D777CF6EBABB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19F044868A58985E9D4E89662B0D777CF6EBABB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FWvvvEzZ8giEcyXSRACabcUKnufSm6n5oKJfbyy8vh2J/0/323830343a363866633a3a2f33322d3334203d3e20323730323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:33:9b:e8:47:58:99:9c:a0:9c:6b:54:c4:bb:c6:8b:1a:0c:
         66:4a:d2:51:ec:1d:36:0e:9f:7c:b5:49:43:62:d9:75:75:fb:
         9f:91:fb:5b:c2:f6:71:94:8f:9e:1b:ff:71:7b:ab:57:c3:5a:
         5a:57:9f:52:81:ce:5d:c5:a8:d8:ef:d5:10:02:5b:63:f4:c8:
         3f:07:87:0b:ef:67:ef:af:1a:15:7f:a7:29:e4:85:32:76:1c:
         26:42:3f:f1:85:76:4b:27:36:db:5b:e8:ca:fd:c8:68:b5:06:
         06:7e:15:47:3c:cd:8e:fd:e0:c3:1c:0b:a7:c8:b8:08:c8:55:
         8d:df:f2:5d:5c:92:c2:a6:7c:ab:76:f4:3d:c9:74:a9:ea:ce:
         be:d7:a6:63:fb:f8:3a:c7:98:40:46:c6:53:ee:fb:ed:91:cf:
         ae:8e:02:ab:13:42:ba:81:47:b1:4b:4c:9b:8e:e5:10:9c:fc:
         d6:c0:2f:e2:25:80:20:1f:69:14:21:00:e6:d4:7b:24:4f:82:
         bc:be:84:43:c5:80:8a:0a:24:f6:d8:be:0e:ee:9c:b0:3b:5e:
         81:37:dc:a2:27:f5:98:f9:32:f7:a8:f4:f8:f8:88:6b:70:b1:
         11:fd:3b:ec:5f:9d:4b:59:10:4c:2b:02:18:78:db:72:ac:0f:
         b2:79:2a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 18:18:04 2024 by rpki-client on console-fra.rpki-client.org