Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a3a2f33322d3332203d3e20323636393438.roa
File:                     323830343a343563343a3a2f33322d3332203d3e20323636393438.roa (raw, json)
Hash identifier:          2ViFL1bGXs2YBrxZF3nZEJc2K86Yhtm8N1G9XTVm1x0=
Subject key identifier:   C6:AE:BF:64:5A:C7:48:05:E7:0E:8B:2E:14:34:AE:53:B2:5C:13:B0
Certificate issuer:       /CN=21846FD68091A2016CCF764693C6904AC8FF62A9
Certificate serial:       5D8BD12B3B0545429AC63906429144C8D2F80E83
Authority key identifier: 21:84:6F:D6:80:91:A2:01:6C:CF:76:46:93:C6:90:4A:C8:FF:62:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21846FD68091A2016CCF764693C6904AC8FF62A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a3a2f33322d3332203d3e20323636393438.roa
Signing time:             Mon 29 Jul 2024 17:34:19 +0000
ROA not before:           Mon 29 Jul 2024 17:29:19 +0000
ROA not after:            Mon 28 Jul 2025 17:34:19 +0000
asID:                     266948
IP address blocks:        2804:45c4::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:8b:d1:2b:3b:05:45:42:9a:c6:39:06:42:91:44:c8:d2:f8:0e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21846FD68091A2016CCF764693C6904AC8FF62A9
        Validity
            Not Before: Jul 29 17:29:19 2024 GMT
            Not After : Jul 28 17:34:19 2025 GMT
        Subject: CN=C6AEBF645AC74805E70E8B2E1434AE53B25C13B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:43:0e:e8:2f:fe:07:be:b8:d6:53:bb:13:df:
                    99:b6:c0:de:65:22:4b:2d:f1:76:61:27:36:c2:b4:
                    51:fc:42:dc:80:b8:0c:6d:d8:ff:6f:e5:04:fe:32:
                    3d:47:13:b7:ee:fd:07:d0:f3:fb:d9:c8:a0:42:ea:
                    54:c1:2f:fe:f5:0e:10:b8:67:7a:aa:a0:8f:d1:75:
                    72:44:e3:98:76:a4:8f:49:16:bb:0d:26:6d:ad:4b:
                    64:2b:12:cb:ef:88:5d:14:82:52:8d:6c:f2:75:10:
                    0b:73:ec:10:cb:ea:92:7a:24:eb:e6:4c:7f:58:70:
                    1c:88:0c:85:24:6e:50:da:54:b3:c3:74:2a:b4:be:
                    0f:36:82:0c:5c:cb:89:3c:77:b5:7f:b4:ba:d8:86:
                    eb:42:13:15:88:2a:a3:5b:c7:de:db:09:48:cc:5f:
                    8f:7a:73:8c:b9:cb:2d:e4:26:31:d4:dc:bc:65:51:
                    b1:f4:6e:f8:55:5b:23:6a:16:c4:79:6b:03:e1:81:
                    32:aa:55:29:18:22:59:75:d7:8a:ff:d8:ff:80:18:
                    54:ba:67:5c:47:bd:46:1d:e8:e2:ba:05:c1:3c:12:
                    1f:ce:af:48:a5:e0:22:85:fe:e5:2a:b4:5d:25:d7:
                    9b:3b:69:d2:11:20:47:03:9d:8f:5a:58:4c:14:af:
                    5d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AE:BF:64:5A:C7:48:05:E7:0E:8B:2E:14:34:AE:53:B2:5C:13:B0
            X509v3 Authority Key Identifier:
                keyid:21:84:6F:D6:80:91:A2:01:6C:CF:76:46:93:C6:90:4A:C8:FF:62:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/21846FD68091A2016CCF764693C6904AC8FF62A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21846FD68091A2016CCF764693C6904AC8FF62A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a3a2f33322d3332203d3e20323636393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:55:f2:84:48:e6:76:e9:78:1c:35:61:f3:72:9a:a6:de:b3:
         9c:7d:e4:84:28:d9:2a:4c:00:f6:6f:1d:f7:63:e1:52:14:2a:
         94:5c:2a:f8:70:ff:6a:61:1a:d0:89:b9:0c:c6:7e:6b:11:0d:
         99:38:d9:0b:f1:8f:29:c6:d5:b4:d7:71:a3:0e:23:87:91:97:
         e5:83:04:d1:18:c7:a4:60:4a:d2:5e:bb:6e:e2:16:a6:89:b8:
         99:d6:8a:40:93:cf:91:69:07:bc:c2:e0:ba:97:55:0f:d6:2d:
         b8:24:92:58:27:e4:32:7d:70:44:1d:96:f5:b6:7e:58:f5:f6:
         65:5d:72:6b:06:b1:0c:d8:51:50:6d:81:78:d0:72:34:4b:99:
         f2:48:02:41:6f:f0:8d:aa:ee:47:b6:e8:e1:6a:65:02:35:b0:
         3d:8d:19:16:5a:32:0f:31:1c:00:6e:d4:99:ac:de:c1:a7:8b:
         69:43:1d:86:09:e0:e1:32:14:e7:90:4a:bb:fc:2a:ab:c1:af:
         d4:d6:1a:6f:e4:97:1b:60:7e:bd:e2:9e:8e:d8:20:da:4f:fe:
         47:99:50:1f:86:b2:25:aa:af:a6:46:98:98:f3:ef:01:21:2b:
         7a:30:98:58:57:32:3a:16:17:c5:ed:7a:55:fa:13:c8:08:52:
         19:0c:d8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 07:38:25 2024 by rpki-client on console-fra.rpki-client.org