Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/1/323830343a363336383a313030303a3a2f33362d3336203d3e20323639333539.roa
File:                     323830343a363336383a313030303a3a2f33362d3336203d3e20323639333539.roa (raw, json)
Hash identifier:          tlgeJdRqPJd4aq7EK9wza9KpskmZMy25JL9K6vGpRgM=
Subject key identifier:   1D:D3:D0:0B:0A:15:CD:69:69:61:58:96:05:7C:73:21:33:94:ED:FD
Certificate issuer:       /CN=C0A7CA467EE94B94A1D063A15D315BD19A77A977
Certificate serial:       134752B3D633B7945D0E2DC39D32B763E9882803
Authority key identifier: C0:A7:CA:46:7E:E9:4B:94:A1:D0:63:A1:5D:31:5B:D1:9A:77:A9:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0A7CA467EE94B94A1D063A15D315BD19A77A977.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/1/323830343a363336383a313030303a3a2f33362d3336203d3e20323639333539.roa
Signing time:             Thu 04 Apr 2024 11:24:50 +0000
ROA not before:           Thu 04 Apr 2024 11:19:50 +0000
ROA not after:            Thu 03 Apr 2025 11:24:50 +0000
asID:                     269359
IP address blocks:        2804:6368:1000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:47:52:b3:d6:33:b7:94:5d:0e:2d:c3:9d:32:b7:63:e9:88:28:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0A7CA467EE94B94A1D063A15D315BD19A77A977
        Validity
            Not Before: Apr  4 11:19:50 2024 GMT
            Not After : Apr  3 11:24:50 2025 GMT
        Subject: CN=1DD3D00B0A15CD6969615896057C73213394EDFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:85:8d:9a:be:6e:11:8a:d9:50:3d:48:2a:ff:
                    d5:4b:44:a6:7e:52:c4:ef:5d:85:1a:76:b3:de:3c:
                    c2:66:e3:1b:e7:18:b9:9a:3d:e1:9c:86:9c:ab:12:
                    3e:9a:c1:de:02:c5:f6:26:59:4e:52:cf:67:3f:13:
                    a3:f1:f0:91:62:37:41:3a:df:50:f7:a2:a2:f2:28:
                    1a:a8:e1:a1:d6:0f:df:23:30:f0:f8:be:bd:51:9f:
                    ca:ef:40:be:35:59:aa:4f:70:03:93:4f:80:a0:d0:
                    b5:d8:07:d9:ee:6e:4c:7f:e3:6f:42:79:84:8e:33:
                    7d:5e:39:8a:f7:6a:0f:6f:4f:e6:17:c9:4a:0e:a6:
                    c7:8f:8f:36:d0:21:b0:2a:63:d6:7f:28:a1:e7:b0:
                    a7:46:17:5f:d1:93:5d:4a:ea:cd:06:36:62:8d:80:
                    e8:cc:6a:70:0b:94:24:49:80:2c:78:3a:54:19:4e:
                    16:a4:3d:63:4f:d6:9c:d0:0f:95:0c:49:7f:95:3b:
                    bd:a4:37:23:f6:1a:88:4c:df:80:f5:75:27:9e:d6:
                    51:b4:f3:50:a6:57:3c:9d:4e:a4:31:e3:b6:26:6c:
                    6e:8e:1a:3c:d6:1c:0c:3d:31:a3:dc:48:a7:d6:16:
                    84:e8:7c:6f:5a:11:db:69:81:65:45:a2:dd:96:71:
                    60:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D3:D0:0B:0A:15:CD:69:69:61:58:96:05:7C:73:21:33:94:ED:FD
            X509v3 Authority Key Identifier:
                keyid:C0:A7:CA:46:7E:E9:4B:94:A1:D0:63:A1:5D:31:5B:D1:9A:77:A9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/1/C0A7CA467EE94B94A1D063A15D315BD19A77A977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0A7CA467EE94B94A1D063A15D315BD19A77A977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/1/323830343a363336383a313030303a3a2f33362d3336203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6368:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         18:45:a8:09:6c:0d:5a:30:e5:38:4c:c1:93:c6:1a:56:07:f2:
         63:c4:84:da:f1:50:3d:9f:7b:11:a3:d4:d8:c5:c6:c1:25:ee:
         e6:d9:8b:a7:e9:7c:43:dc:9c:b9:61:e8:f2:7f:3b:c6:56:ab:
         88:d7:e8:a2:af:d8:05:57:7b:ea:94:09:92:9f:2c:f8:d0:67:
         58:53:9d:4e:e1:98:24:f9:38:3c:6b:44:e5:3b:88:43:af:33:
         bc:40:3d:28:ab:28:73:1c:e9:e2:e3:ed:96:d0:b1:07:8e:d7:
         a4:6f:ed:63:65:3e:62:f1:0f:1e:d3:3e:54:ae:8d:10:e6:a5:
         a9:35:e6:66:ce:ca:53:f3:02:0b:69:ee:ff:27:41:2a:9a:d9:
         cc:05:f9:51:df:e3:c0:6a:20:2d:61:1e:9e:a8:53:4f:0d:0b:
         0f:0b:5b:4d:35:d3:28:f8:07:d3:95:bb:b9:a9:c1:8d:9f:6b:
         f7:fe:56:e7:2e:e9:d5:63:96:6b:06:30:a7:45:72:c9:db:e2:
         87:53:47:4c:5d:ca:87:22:88:84:72:19:dd:57:ae:b3:cc:a8:
         87:98:9f:c5:fe:36:07:e5:e6:23:da:90:a1:a1:2f:e8:40:5e:
         d1:a2:9d:b7:08:16:d6:8d:1f:47:8c:7a:49:0c:37:db:bf:a8:
         59:5d:35:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 19:28:07 2024 by rpki-client on console-ams.rpki-client.org