Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/323830343a6431343a3a2f33322d313238203d3e203532353936.roa
File:                     323830343a6431343a3a2f33322d313238203d3e203532353936.roa (raw, json)
Hash identifier:          wI1vMGsM/UQiMNMbyTq9pcq6HeTtOntLK5q9alX3pOM=
Subject key identifier:   62:4C:25:D4:44:05:53:22:CC:80:1D:1B:81:1F:76:3C:55:9D:7C:0F
Certificate issuer:       /CN=2E7030E7110B6CE0E1E7309EFDAF24273F80CFFC
Certificate serial:       5A62086A7EB9B4F6675F1A498CD6209D7EDE3BF1
Authority key identifier: 2E:70:30:E7:11:0B:6C:E0:E1:E7:30:9E:FD:AF:24:27:3F:80:CF:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E7030E7110B6CE0E1E7309EFDAF24273F80CFFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/323830343a6431343a3a2f33322d313238203d3e203532353936.roa
Signing time:             Fri 05 Jul 2024 15:46:36 +0000
ROA not before:           Fri 05 Jul 2024 15:41:36 +0000
ROA not after:            Fri 04 Jul 2025 15:46:36 +0000
asID:                     52596
IP address blocks:        2804:d14::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:62:08:6a:7e:b9:b4:f6:67:5f:1a:49:8c:d6:20:9d:7e:de:3b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7030E7110B6CE0E1E7309EFDAF24273F80CFFC
        Validity
            Not Before: Jul  5 15:41:36 2024 GMT
            Not After : Jul  4 15:46:36 2025 GMT
        Subject: CN=624C25D444055322CC801D1B811F763C559D7C0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c1:35:88:ba:76:42:73:68:df:04:a5:95:16:
                    f4:d9:c8:e9:b9:77:ca:9c:a7:62:42:f2:9a:e6:f3:
                    47:fe:24:59:ee:ba:d5:d6:d5:96:93:14:a1:1c:e0:
                    2d:86:5c:21:4f:df:26:6f:40:d4:e8:40:29:60:b6:
                    af:36:14:cd:d6:16:45:59:cb:e8:46:97:12:eb:bf:
                    a9:70:80:01:81:95:c7:2c:7c:e3:74:00:d5:8f:c8:
                    76:8c:a0:7d:90:be:03:4a:dd:8e:80:b2:c6:be:af:
                    d1:f0:5d:2c:d5:e3:45:ed:b0:56:eb:8c:35:44:97:
                    90:8a:b1:c8:d8:85:c1:da:30:5e:66:58:cb:89:50:
                    bf:42:db:31:35:98:fc:ca:38:dd:9f:cc:6b:21:d2:
                    2e:6f:96:08:06:cc:86:eb:64:77:0f:91:fb:cd:07:
                    20:65:d3:a5:97:5b:b2:54:19:c3:13:24:6b:df:b4:
                    9a:a2:b1:91:f6:d4:70:d3:da:3f:b5:ec:87:7a:31:
                    0a:1b:64:18:af:d2:f5:d7:cf:9f:32:2f:e8:27:97:
                    d6:81:bf:8d:f0:27:ff:1d:a1:07:ca:59:53:44:80:
                    4f:d7:7c:9d:cd:59:84:24:c0:3a:39:54:a3:31:d5:
                    57:48:4a:49:4c:84:9d:5c:a0:9c:37:fd:52:82:70:
                    d7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4C:25:D4:44:05:53:22:CC:80:1D:1B:81:1F:76:3C:55:9D:7C:0F
            X509v3 Authority Key Identifier:
                keyid:2E:70:30:E7:11:0B:6C:E0:E1:E7:30:9E:FD:AF:24:27:3F:80:CF:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/2E7030E7110B6CE0E1E7309EFDAF24273F80CFFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E7030E7110B6CE0E1E7309EFDAF24273F80CFFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/323830343a6431343a3a2f33322d313238203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d14::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:90:73:2f:d2:59:cf:34:66:0b:ba:19:df:28:34:40:9e:49:
         71:22:5e:ee:b3:a3:a3:2a:1c:1d:a0:c9:be:0a:31:4d:0b:c6:
         14:66:a2:f1:f1:be:1a:27:9c:f0:a9:31:48:d5:5c:f3:63:65:
         fd:27:3f:85:71:69:00:1a:e6:2f:57:56:b8:1e:08:d7:1f:91:
         3c:90:bb:65:55:36:34:03:1e:6e:92:c6:78:a0:db:d9:75:45:
         4a:1a:41:fb:c3:7b:ea:a4:92:b2:47:0a:61:3d:57:86:e5:8a:
         27:09:b5:83:10:e7:19:4c:7b:8d:7e:29:37:94:88:b2:ea:f2:
         0a:a2:62:37:9a:8b:30:dd:88:00:25:2c:cd:5e:b7:5c:fe:16:
         84:05:86:21:a2:be:c7:e4:ba:18:af:07:93:c0:24:c1:c5:3f:
         0e:b7:11:a2:a1:6e:55:58:98:5e:3a:32:0b:54:a4:ee:df:80:
         7b:cb:30:94:a3:76:aa:f6:0d:c3:bf:49:4b:7d:3e:11:7f:b4:
         d9:e7:33:53:36:25:a6:b9:59:f9:9a:78:49:b2:15:8d:31:bd:
         aa:c6:02:a7:3f:0c:da:a0:db:fd:87:be:82:b7:2b:19:73:c9:
         d4:fa:a4:28:8c:51:84:fd:23:4f:b1:95:99:cb:22:e0:55:e2:
         78:d3:70:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 19:22:35 2024 by rpki-client on console-fra.rpki-client.org