Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a3a2f34322d3432203d3e20323639333539.roa
File:                     323830343a363336383a3a2f34322d3432203d3e20323639333539.roa (raw, json)
Hash identifier:          9KjQtL+VQME6oWS0ZNKRTS0cE4ZA/4kUYasJsiFoBGw=
Subject key identifier:   73:51:B1:2B:EA:A6:1B:38:10:96:2D:60:C3:32:E2:7E:1C:D9:C8:5F
Certificate issuer:       /CN=64E08193273EEA26A89B833428798A9E6FFD296C
Certificate serial:       4043875AADF152843971EAA9F193DD694DD978EB
Authority key identifier: 64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a3a2f34322d3432203d3e20323639333539.roa
Signing time:             Mon 26 Aug 2024 19:33:08 +0000
ROA not before:           Mon 26 Aug 2024 19:28:08 +0000
ROA not after:            Mon 25 Aug 2025 19:33:08 +0000
asID:                     269359
IP address blocks:        2804:6368::/42 maxlen: 42

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:43:87:5a:ad:f1:52:84:39:71:ea:a9:f1:93:dd:69:4d:d9:78:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64E08193273EEA26A89B833428798A9E6FFD296C
        Validity
            Not Before: Aug 26 19:28:08 2024 GMT
            Not After : Aug 25 19:33:08 2025 GMT
        Subject: CN=7351B12BEAA61B3810962D60C332E27E1CD9C85F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1c:9b:cf:96:c1:77:b9:fb:18:65:7d:88:81:
                    8b:ae:81:b6:27:3a:a6:74:6f:50:f5:fe:3d:56:27:
                    a9:76:b8:27:04:c5:13:61:15:37:35:23:54:34:e2:
                    5c:0f:1f:9b:46:af:a3:4e:bf:2e:56:bb:3a:46:41:
                    ae:e6:4a:1a:9b:30:aa:32:76:93:23:cf:e7:ed:57:
                    f0:1a:1f:fb:14:a4:64:f0:d5:a6:a8:8e:8b:be:60:
                    5a:0c:2b:a4:f8:f3:63:64:83:ec:63:bd:3a:cc:c2:
                    8c:25:45:84:9b:12:76:c2:e7:51:03:00:2a:af:bc:
                    7a:18:af:82:c6:3c:4e:0a:22:88:c1:2b:95:b7:0b:
                    49:8c:70:b2:c5:c4:8c:81:b1:8f:65:28:fa:c0:11:
                    86:3c:dc:eb:23:69:cc:d3:50:c5:b1:b1:48:a4:ee:
                    7c:4b:2f:65:00:57:d8:f2:8f:0e:07:db:3b:b3:21:
                    50:8e:b2:88:0f:07:4d:1c:fe:c0:e5:a1:37:14:90:
                    62:00:4c:a5:37:a4:43:34:3f:43:d7:18:c2:1d:13:
                    7b:48:81:92:a5:aa:95:47:01:29:42:89:fc:e2:55:
                    10:02:cf:6f:c4:08:be:56:14:7a:8c:2f:ee:86:17:
                    ea:05:ce:0f:e8:ac:ac:b6:26:53:b1:62:d3:3b:9f:
                    3e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:51:B1:2B:EA:A6:1B:38:10:96:2D:60:C3:32:E2:7E:1C:D9:C8:5F
            X509v3 Authority Key Identifier:
                keyid:64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/64E08193273EEA26A89B833428798A9E6FFD296C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a3a2f34322d3432203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6368::/42

    Signature Algorithm: sha256WithRSAEncryption
         15:6f:64:21:30:b4:3c:8b:a8:1f:0e:73:23:d3:4c:18:c7:bd:
         ab:77:51:e8:a3:7c:0c:53:7f:ba:e8:63:4f:17:7e:18:9e:5c:
         c4:c2:8e:5e:12:6e:4b:ca:32:d8:bf:69:04:b8:fd:bd:77:20:
         73:79:61:14:00:7c:5d:97:f6:6e:50:98:96:10:52:9d:30:61:
         f8:ce:2d:f2:9a:a8:30:a1:6e:81:24:a6:2c:16:72:10:cd:86:
         19:61:57:d7:f2:5e:c8:30:0c:79:39:8a:93:ad:5c:db:e9:d9:
         cb:37:03:7b:a5:ec:33:aa:85:c3:c1:a7:83:9b:ac:b4:f4:40:
         50:e2:f1:4a:02:54:83:b9:eb:92:69:5f:13:aa:41:92:0c:86:
         7d:cb:10:93:2c:ab:64:46:c0:90:76:c0:2e:95:20:37:53:a3:
         a5:00:fd:02:bc:fb:58:a1:be:d0:95:3f:77:bd:b8:40:3b:67:
         37:c0:71:94:ee:52:9d:03:36:c8:8f:87:c6:dc:97:ca:fd:33:
         f4:58:c1:c4:2b:7a:63:cd:36:18:a5:13:a4:b1:b3:6a:9c:4f:
         8d:6e:29:df:6b:78:b0:28:0a:94:d2:15:3f:a8:1e:e0:6e:63:
         5c:35:3b:0a:24:1c:4c:aa:03:01:8b:de:ff:6c:0b:b0:14:18:
         7c:c0:ed:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 12:55:51 2024 by rpki-client on console-fra.rpki-client.org