Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a3a2f33322d3438203d3e20323639333539.roa
File:                     323830343a363336383a3a2f33322d3438203d3e20323639333539.roa (raw, json)
Hash identifier:          1lGaWvgyvMz9l7AQu2GArvW1uIc9otLApJ3ajYQRDfA=
Subject key identifier:   C0:E1:9D:3D:CB:39:36:76:7A:E9:1D:81:5F:49:39:D2:31:FF:C8:69
Certificate issuer:       /CN=793AA6D0CC0F6CFA0A23CA396BE713EF1AD67EB6
Certificate serial:       3BB19EE509F309E905F093B477FE8DC47A646AC2
Authority key identifier: 79:3A:A6:D0:CC:0F:6C:FA:0A:23:CA:39:6B:E7:13:EF:1A:D6:7E:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793AA6D0CC0F6CFA0A23CA396BE713EF1AD67EB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a3a2f33322d3438203d3e20323639333539.roa
Signing time:             Tue 19 Nov 2024 18:59:03 +0000
ROA not before:           Tue 19 Nov 2024 18:54:03 +0000
ROA not after:            Tue 18 Nov 2025 18:59:03 +0000
asID:                     269359
IP address blocks:        2804:6368::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b1:9e:e5:09:f3:09:e9:05:f0:93:b4:77:fe:8d:c4:7a:64:6a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793AA6D0CC0F6CFA0A23CA396BE713EF1AD67EB6
        Validity
            Not Before: Nov 19 18:54:03 2024 GMT
            Not After : Nov 18 18:59:03 2025 GMT
        Subject: CN=C0E19D3DCB3936767AE91D815F4939D231FFC869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f8:50:53:d2:df:4e:7f:4b:7c:61:9c:99:29:
                    98:18:fc:fe:9b:e0:d6:5b:48:12:4d:8d:92:d8:92:
                    39:a4:f4:9e:19:9e:f1:9f:ca:6b:82:e7:c2:88:05:
                    49:e1:9d:8b:bd:9e:42:80:20:26:85:f7:eb:57:c9:
                    ab:55:61:19:a1:4c:57:27:97:c9:84:b9:d6:6e:8a:
                    f1:ff:07:f6:27:79:c4:07:bd:32:03:6e:e6:af:09:
                    34:14:9a:a8:9a:88:70:97:e5:1b:1a:4e:d5:cf:09:
                    d3:8c:54:c5:e0:72:c2:f4:86:5e:29:de:79:84:e1:
                    f6:86:c8:81:7b:f3:22:7d:54:7d:aa:96:07:26:b8:
                    3d:10:8e:1d:8b:5a:0c:9c:ba:25:d1:3b:87:47:54:
                    67:36:6c:4b:2b:3a:a7:7e:98:a0:6c:f7:71:ac:ba:
                    71:b2:9b:d0:ba:b6:98:b6:d1:c6:55:3c:26:9d:29:
                    aa:ed:6f:ba:54:67:17:6a:42:2b:5e:75:3e:c2:ef:
                    25:d4:21:00:41:fc:70:d8:f1:9a:e9:6c:b9:2b:34:
                    4f:c3:67:20:6f:ef:b4:14:80:47:f4:48:be:01:d2:
                    d0:05:26:5b:76:be:8f:69:3a:07:9c:87:4d:dc:3b:
                    d8:d3:58:7f:cd:a2:6e:ce:ac:cb:30:29:3b:88:47:
                    4e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E1:9D:3D:CB:39:36:76:7A:E9:1D:81:5F:49:39:D2:31:FF:C8:69
            X509v3 Authority Key Identifier:
                keyid:79:3A:A6:D0:CC:0F:6C:FA:0A:23:CA:39:6B:E7:13:EF:1A:D6:7E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/793AA6D0CC0F6CFA0A23CA396BE713EF1AD67EB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793AA6D0CC0F6CFA0A23CA396BE713EF1AD67EB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a3a2f33322d3438203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6368::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:76:e2:73:78:d4:1d:1e:54:19:ac:2d:2f:bd:00:8c:a9:56:
         47:5d:c9:db:d3:d2:be:fd:23:66:57:a5:db:4e:a4:3c:5a:cc:
         51:5f:e6:4a:06:a7:ca:39:f8:68:3a:de:5f:02:b8:02:b8:9f:
         21:94:61:5d:87:55:1c:da:20:5e:d9:7d:e1:f0:08:45:45:07:
         d5:fd:69:34:23:75:5b:44:c5:94:a9:ce:34:1b:e4:36:4c:7b:
         80:7b:98:9e:89:52:fc:3d:da:b0:ee:c7:c6:21:14:84:ba:c3:
         48:27:3f:7e:bb:5d:63:5c:8d:5b:8b:d0:43:d0:0f:5c:07:6f:
         1f:b0:07:95:a0:92:fb:2e:22:79:00:1e:e5:ce:83:81:c4:3f:
         76:aa:03:61:14:1f:f6:63:dc:f4:95:22:62:6b:6a:c2:0a:8e:
         e2:89:5c:e8:e2:0c:98:d2:42:c6:e4:21:9c:70:8b:55:8b:81:
         47:cc:9c:d7:bb:0c:0a:32:7b:11:d4:03:7e:a6:b5:7b:c8:91:
         00:64:4c:4d:30:d7:51:07:2d:2b:ef:9d:6f:f5:d9:42:d5:8b:
         50:21:c6:0a:a0:e5:1c:4f:32:ce:81:17:dc:4e:ff:b2:13:18:
         e5:90:3f:08:d5:e0:df:85:1e:53:6c:1c:e9:d2:3d:64:c0:08:
         41:76:8c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:11:07 2024 by rpki-client on console-ams.rpki-client.org