Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/1/323830343a363336383a3a2f33362d3336203d3e20323639333539.roa
File:                     323830343a363336383a3a2f33362d3336203d3e20323639333539.roa (raw, json)
Hash identifier:          gsRRr4f7IuDHENF/Tga5S1b6kf8/WJiFFVmkAgyp/f4=
Subject key identifier:   65:BA:B8:82:42:15:E8:AC:A3:91:4F:D1:87:57:EB:01:E6:E2:61:86
Certificate issuer:       /CN=C0A7CA467EE94B94A1D063A15D315BD19A77A977
Certificate serial:       685CB94949C245F91D5D204F6EDD5A500E8801D3
Authority key identifier: C0:A7:CA:46:7E:E9:4B:94:A1:D0:63:A1:5D:31:5B:D1:9A:77:A9:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0A7CA467EE94B94A1D063A15D315BD19A77A977.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/1/323830343a363336383a3a2f33362d3336203d3e20323639333539.roa
Signing time:             Thu 04 Apr 2024 11:24:50 +0000
ROA not before:           Thu 04 Apr 2024 11:19:50 +0000
ROA not after:            Thu 03 Apr 2025 11:24:50 +0000
asID:                     269359
IP address blocks:        2804:6368::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:5c:b9:49:49:c2:45:f9:1d:5d:20:4f:6e:dd:5a:50:0e:88:01:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0A7CA467EE94B94A1D063A15D315BD19A77A977
        Validity
            Not Before: Apr  4 11:19:50 2024 GMT
            Not After : Apr  3 11:24:50 2025 GMT
        Subject: CN=65BAB8824215E8ACA3914FD18757EB01E6E26186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5f:be:2b:fc:45:46:5b:c8:64:df:db:2f:e3:
                    c7:90:b2:e9:a1:cc:a2:91:e0:9c:a1:5a:61:ed:5b:
                    ea:35:86:ba:45:ff:0d:ce:f6:eb:22:41:a6:df:35:
                    ff:f1:5f:a5:3b:22:48:f6:94:5e:d2:71:1b:c7:e7:
                    d7:03:d0:5d:7a:d1:ba:97:28:49:4e:df:5a:e2:78:
                    88:aa:52:aa:f8:84:0b:fb:cd:ae:65:55:71:ca:f5:
                    01:12:b5:02:b5:e5:a9:d5:a0:ef:11:d6:cd:67:d4:
                    12:d8:5e:f0:2b:0f:2d:b0:ba:4c:d4:dd:cf:96:92:
                    4e:d8:28:30:cd:1c:b8:7f:0e:4b:d3:11:fb:ff:18:
                    ed:a0:29:aa:74:2e:2c:a2:78:6f:aa:61:40:e4:f7:
                    55:7c:36:fe:b7:1f:9f:58:7a:2c:f6:81:52:92:2b:
                    07:84:e8:e7:a1:fd:07:8b:0b:00:38:97:07:8f:77:
                    85:c7:4b:2a:e5:99:47:72:48:7d:54:f5:63:90:e8:
                    f8:f5:4d:95:e7:18:f5:dd:0f:e4:ef:6f:cd:f6:38:
                    b3:0f:83:64:de:80:c3:6f:13:63:fb:a0:ec:4b:2d:
                    60:e1:c9:36:18:93:28:c9:8a:98:97:ee:d8:99:14:
                    ad:23:18:68:99:63:58:b0:0f:c0:8d:57:f3:66:42:
                    a0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BA:B8:82:42:15:E8:AC:A3:91:4F:D1:87:57:EB:01:E6:E2:61:86
            X509v3 Authority Key Identifier:
                keyid:C0:A7:CA:46:7E:E9:4B:94:A1:D0:63:A1:5D:31:5B:D1:9A:77:A9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/1/C0A7CA467EE94B94A1D063A15D315BD19A77A977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0A7CA467EE94B94A1D063A15D315BD19A77A977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/1/323830343a363336383a3a2f33362d3336203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6368::/36

    Signature Algorithm: sha256WithRSAEncryption
         0a:36:42:70:f4:95:45:9b:4f:a4:53:3b:a9:c9:dc:02:e7:32:
         53:ef:d9:75:64:4b:bb:36:95:7e:0f:84:c1:80:a3:6c:86:1c:
         a0:dd:35:97:0e:b4:8c:0b:70:25:29:a5:30:d3:ee:d6:93:12:
         d2:62:f6:45:69:63:e2:42:44:1c:16:b8:d3:7e:05:4b:65:66:
         60:c4:a3:28:51:5a:42:11:39:00:36:51:59:18:33:4f:25:32:
         fe:53:7e:e9:de:de:96:05:f3:45:52:b6:7b:7b:1b:27:52:7a:
         2b:14:67:7e:4b:24:b4:32:65:ce:d3:7c:f7:4b:6b:df:ad:1a:
         1c:4a:ee:d9:e3:c1:3a:d9:c0:94:e3:f9:ef:63:52:db:3f:9d:
         66:4c:86:65:41:0a:7d:30:24:06:c9:27:b8:a8:9a:54:93:12:
         77:25:2d:ba:ec:88:f8:4c:0b:be:77:5b:43:ff:a5:ad:7f:d6:
         12:33:62:e2:22:21:8a:5e:c4:be:62:d1:52:03:3f:8a:46:12:
         b5:ac:0c:89:9a:cd:2d:04:4b:61:64:54:d1:1c:7d:32:eb:18:
         3f:ed:4e:22:59:b1:c7:79:53:d5:54:d7:20:eb:9a:06:11:5c:
         df:02:2f:20:ac:8d:62:7e:b9:7f:2a:35:8f:1d:8e:d5:23:81:
         8a:d8:74:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 19:28:07 2024 by rpki-client on console-ams.rpki-client.org