Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/323830343a6336303a383030303a3a2f33342d3334203d3e203532363936.roa
File:                     323830343a6336303a383030303a3a2f33342d3334203d3e203532363936.roa (raw, json)
Hash identifier:          EIVl4X6yCmwRNnZYuft3T72Eefct/kPn1iWZuIAdiGg=
Subject key identifier:   8D:58:52:CA:E5:27:B4:B4:B1:DA:CA:08:F8:B1:41:DE:70:F3:36:60
Certificate issuer:       /CN=759FD53741DAAEF6CE6410013C127C1B23331A7B
Certificate serial:       10594E301335C9F14DB21C9C6AB8AE03F6720068
Authority key identifier: 75:9F:D5:37:41:DA:AE:F6:CE:64:10:01:3C:12:7C:1B:23:33:1A:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759FD53741DAAEF6CE6410013C127C1B23331A7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/323830343a6336303a383030303a3a2f33342d3334203d3e203532363936.roa
Signing time:             Tue 06 Aug 2024 00:02:54 +0000
ROA not before:           Mon 05 Aug 2024 23:57:54 +0000
ROA not after:            Tue 05 Aug 2025 00:02:54 +0000
asID:                     52696
IP address blocks:        2804:c60:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:59:4e:30:13:35:c9:f1:4d:b2:1c:9c:6a:b8:ae:03:f6:72:00:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759FD53741DAAEF6CE6410013C127C1B23331A7B
        Validity
            Not Before: Aug  5 23:57:54 2024 GMT
            Not After : Aug  5 00:02:54 2025 GMT
        Subject: CN=8D5852CAE527B4B4B1DACA08F8B141DE70F33660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:95:05:60:2c:de:2e:a2:26:44:fb:04:5b:9f:
                    75:f4:e0:e0:bc:a6:1c:9f:a6:cf:61:3e:87:b6:73:
                    ec:ce:2a:8c:52:ec:0f:4e:23:4c:c6:04:63:04:be:
                    e5:ac:6e:e9:31:61:d0:f0:56:bf:d7:f8:d5:d9:f9:
                    bc:32:59:23:91:eb:c2:92:ab:6b:2b:97:fd:0f:7f:
                    b2:c3:3e:24:29:7d:0b:32:41:64:13:bf:2b:4a:1b:
                    4d:29:b6:b8:95:97:75:ae:b4:09:1d:5d:d4:3e:0d:
                    62:af:15:8c:0e:29:45:6b:31:6e:e7:eb:1b:00:1f:
                    18:79:dc:30:04:ba:7b:1e:6d:b1:2c:4e:6e:f4:9f:
                    26:0f:46:0d:f6:77:76:9d:4b:41:bf:84:47:f6:77:
                    ac:95:35:84:94:45:b4:4c:fc:0e:dc:b7:13:13:85:
                    0c:da:ae:80:48:ad:47:ce:6d:ed:d2:88:f8:21:3e:
                    ee:33:a8:77:9d:0f:07:4a:1e:a8:b4:3e:bd:01:bf:
                    39:c2:df:2c:60:1f:a9:96:c0:72:c2:09:9e:4a:25:
                    d4:f0:a8:bc:99:62:4d:1e:33:ef:9c:ee:33:c5:23:
                    0d:a7:99:0e:b3:6b:ee:e4:c4:8a:b1:70:48:d3:4b:
                    c2:08:01:26:ca:f8:75:83:e8:2d:18:34:15:00:e0:
                    b4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:58:52:CA:E5:27:B4:B4:B1:DA:CA:08:F8:B1:41:DE:70:F3:36:60
            X509v3 Authority Key Identifier:
                keyid:75:9F:D5:37:41:DA:AE:F6:CE:64:10:01:3C:12:7C:1B:23:33:1A:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/759FD53741DAAEF6CE6410013C127C1B23331A7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759FD53741DAAEF6CE6410013C127C1B23331A7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/323830343a6336303a383030303a3a2f33342d3334203d3e203532363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c60:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3e:ea:a4:64:07:07:6a:25:f8:b4:61:50:73:a2:b5:41:3f:c4:
         74:35:17:8d:bd:76:77:77:90:e1:3b:71:f4:31:03:36:59:6c:
         10:9d:58:dd:bd:62:a1:6b:41:28:55:8f:27:1f:73:43:70:a0:
         fd:d4:2e:65:97:35:dc:6f:0a:be:a7:bf:f4:a2:60:97:ec:cd:
         d3:7c:b2:91:66:6d:41:05:1f:92:9b:a8:90:3f:43:1b:bb:3d:
         d4:67:09:41:b1:8a:8d:79:36:63:2b:93:d1:bf:44:0b:63:b2:
         4a:be:de:90:dd:c1:40:e2:e3:96:9f:0a:73:37:0a:0a:71:0c:
         1c:25:b4:1d:7c:4f:e6:07:fb:d7:6a:10:ed:e5:96:0d:06:8d:
         e7:f8:9b:19:0b:6a:be:5b:72:d3:98:e9:70:9c:86:b1:4e:8a:
         2d:e9:a7:65:c7:04:07:86:d5:d9:f7:b4:58:0d:ca:8e:7c:ac:
         db:a3:1c:06:39:b4:11:da:e7:e2:00:df:4f:a9:2e:66:ff:7f:
         6b:7d:99:51:f4:df:55:6e:07:3d:e0:88:6a:0f:85:06:0c:21:
         07:b6:b5:3b:ea:07:84:c7:e1:46:0b:83:b9:07:1b:4a:3b:99:
         2c:d7:8f:33:8e:e4:29:fe:66:78:9a:a1:e7:84:14:b9:f0:7a:
         fd:aa:21:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 22:38:44 2024 by rpki-client on console-ams.rpki-client.org