Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a343030303a3a2f33342d3334203d3e20323636393438.roa
File:                     323830343a343563343a343030303a3a2f33342d3334203d3e20323636393438.roa (raw, json)
Hash identifier:          3K1WxgTgiRMJivinLHLwnTj092k1LRwaOa9iZZh/6wo=
Subject key identifier:   49:0E:91:30:83:95:2B:95:B8:14:5F:41:96:83:F9:03:64:B9:63:56
Certificate issuer:       /CN=21846FD68091A2016CCF764693C6904AC8FF62A9
Certificate serial:       3F1CBB0BA7DAF4595E312C10F4AF8A16E0D191D4
Authority key identifier: 21:84:6F:D6:80:91:A2:01:6C:CF:76:46:93:C6:90:4A:C8:FF:62:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21846FD68091A2016CCF764693C6904AC8FF62A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a343030303a3a2f33342d3334203d3e20323636393438.roa
Signing time:             Mon 29 Jul 2024 17:34:20 +0000
ROA not before:           Mon 29 Jul 2024 17:29:20 +0000
ROA not after:            Mon 28 Jul 2025 17:34:20 +0000
asID:                     266948
IP address blocks:        2804:45c4:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1c:bb:0b:a7:da:f4:59:5e:31:2c:10:f4:af:8a:16:e0:d1:91:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21846FD68091A2016CCF764693C6904AC8FF62A9
        Validity
            Not Before: Jul 29 17:29:20 2024 GMT
            Not After : Jul 28 17:34:20 2025 GMT
        Subject: CN=490E913083952B95B8145F419683F90364B96356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:45:75:bf:ca:24:96:3b:b1:41:6f:cc:6c:78:
                    26:88:95:90:11:8d:d7:5e:66:0e:3a:7b:43:9e:0b:
                    43:ff:47:39:e5:9c:cd:4b:6d:63:5c:17:30:98:51:
                    df:9f:10:cc:c2:5f:45:62:5a:f1:68:fb:96:dc:26:
                    29:75:d1:d1:3f:d8:b6:d0:f5:a1:63:df:aa:9c:6a:
                    93:a3:17:8f:20:04:fc:19:ed:70:16:8b:b1:72:51:
                    ce:cb:0b:c9:43:11:c5:90:3b:02:b8:35:6d:d2:65:
                    cf:60:0f:60:ca:e1:eb:dc:2d:0e:83:17:8f:5d:e7:
                    4d:9e:6e:fc:68:06:29:00:12:f4:5d:2f:b7:f1:44:
                    1b:02:e2:5b:54:7d:ce:5d:9c:31:38:4f:5a:1c:0b:
                    9b:ad:4f:2e:2f:81:4f:b9:1e:e2:ba:9a:46:d0:78:
                    af:fb:f7:55:f7:98:6b:78:66:96:fc:8e:38:cf:b4:
                    fb:5f:a6:bc:92:e5:f4:ae:87:61:b7:18:f2:ee:89:
                    ad:26:68:e8:19:cf:00:aa:86:b1:08:58:05:3a:06:
                    c7:5e:c6:0b:5c:0c:ac:24:67:93:31:00:99:e7:76:
                    e3:0e:67:c1:96:a9:09:c1:cb:33:a8:b7:97:b5:04:
                    a0:2a:59:01:07:39:cc:c4:33:1f:a8:f3:3d:f2:31:
                    db:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0E:91:30:83:95:2B:95:B8:14:5F:41:96:83:F9:03:64:B9:63:56
            X509v3 Authority Key Identifier:
                keyid:21:84:6F:D6:80:91:A2:01:6C:CF:76:46:93:C6:90:4A:C8:FF:62:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/21846FD68091A2016CCF764693C6904AC8FF62A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21846FD68091A2016CCF764693C6904AC8FF62A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a343030303a3a2f33342d3334203d3e20323636393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45c4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         29:a6:4e:66:05:26:9b:d0:e9:69:07:32:dd:10:cd:aa:f0:e5:
         69:14:35:b4:dd:1a:6d:d5:56:10:57:d1:a4:72:bb:99:4a:25:
         e7:58:f8:c2:0b:2e:4a:a5:ff:fa:3c:50:59:48:b9:f7:68:7f:
         8e:67:59:cd:03:2b:01:a2:e9:2b:5e:51:bb:54:9e:92:a1:97:
         f8:7c:c2:f5:a5:f3:9d:54:06:c7:b7:5d:98:d1:e9:6a:3f:1b:
         3f:38:d7:e5:7c:5a:1a:03:ef:d6:ea:e5:f2:ef:1c:93:c9:34:
         03:be:32:a2:00:1f:3a:19:e9:e7:b0:ae:8e:71:a1:f9:dd:93:
         d9:08:37:ab:b7:2a:40:57:39:26:8b:d9:00:96:4f:02:61:99:
         6b:2f:91:f6:1e:2e:cf:11:ff:b0:10:30:0d:dc:80:b1:6e:e2:
         da:0c:3b:84:15:7b:21:6e:d9:f8:5e:12:53:5d:57:b3:0a:6b:
         71:e5:bd:e6:ae:e0:9d:a7:a1:94:c3:70:4a:e7:d9:77:96:b2:
         f4:79:66:57:93:a7:4e:ff:d1:47:40:c8:4a:05:22:35:8c:0e:
         58:1f:1e:e7:34:9b:7c:33:1e:47:97:6e:23:9d:5a:0d:c0:eb:
         f2:43:d9:86:0a:91:bf:36:1d:94:15:14:fb:55:d8:55:bd:d2:
         c4:8d:4e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 07:38:25 2024 by rpki-client on console-fra.rpki-client.org