Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a383030303a3a2f33332d3333203d3e20323638383538.roa
File:                     323830343a356239633a383030303a3a2f33332d3333203d3e20323638383538.roa (raw, json)
Hash identifier:          Aj63/O1Nx6c/SimYdBib0A6R6fn2rBoIBdy4h1HxjPg=
Subject key identifier:   25:8B:1B:78:77:CF:C4:8E:5A:56:E4:0A:CC:68:AB:29:CE:37:1E:D3
Certificate issuer:       /CN=8FD43329E3986016373336F4DC71535DDDDAA338
Certificate serial:       66DF59BB5BBCED41BBE8625C1FA3ED6C874B6B2C
Authority key identifier: 8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a383030303a3a2f33332d3333203d3e20323638383538.roa
Signing time:             Tue 09 Jul 2024 13:46:04 +0000
ROA not before:           Tue 09 Jul 2024 13:41:04 +0000
ROA not after:            Tue 08 Jul 2025 13:46:04 +0000
asID:                     268858
IP address blocks:        2804:5b9c:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:df:59:bb:5b:bc:ed:41:bb:e8:62:5c:1f:a3:ed:6c:87:4b:6b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FD43329E3986016373336F4DC71535DDDDAA338
        Validity
            Not Before: Jul  9 13:41:04 2024 GMT
            Not After : Jul  8 13:46:04 2025 GMT
        Subject: CN=258B1B7877CFC48E5A56E40ACC68AB29CE371ED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:15:72:c5:ab:e2:71:17:e3:0b:ef:28:ac:f7:
                    f6:3f:47:80:04:aa:c9:21:04:78:81:3c:b5:b4:45:
                    fa:41:74:22:38:35:cc:ae:66:43:41:88:7b:ee:5f:
                    26:04:65:9e:ab:69:90:ca:7a:94:d0:62:61:ac:6e:
                    49:ac:8a:85:88:6f:d7:bb:5c:68:41:73:0b:89:d0:
                    a1:ac:ca:3c:65:f4:cf:8c:e7:0a:dc:c6:96:5e:d1:
                    0f:c8:14:85:a3:7f:a4:25:75:cc:72:e3:91:47:ee:
                    78:c8:93:9c:58:3e:e0:92:d9:bc:f7:8f:c0:d6:a6:
                    60:c5:52:f0:66:43:8e:72:cf:cf:81:5f:30:72:7b:
                    57:05:24:3c:95:cf:00:4e:af:39:24:c2:31:4f:e1:
                    f5:cd:8c:eb:99:28:89:89:40:c1:00:ed:6e:23:88:
                    3b:90:6b:31:c0:65:3b:e3:a2:9e:94:e5:46:54:1c:
                    8e:43:5f:06:35:73:bb:37:0b:6d:f8:77:eb:a8:e5:
                    ca:c9:2a:a6:b4:2f:c5:3c:6a:00:0b:67:bf:85:b9:
                    6e:1a:71:4f:00:5c:49:79:43:26:8b:3b:86:fd:a1:
                    31:ab:67:c9:a7:2a:70:41:0d:f7:34:d7:29:5e:c8:
                    03:f8:38:2c:2e:42:d7:75:f0:d8:14:06:ff:a0:0a:
                    70:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8B:1B:78:77:CF:C4:8E:5A:56:E4:0A:CC:68:AB:29:CE:37:1E:D3
            X509v3 Authority Key Identifier:
                keyid:8F:D4:33:29:E3:98:60:16:37:33:36:F4:DC:71:53:5D:DD:DA:A3:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/8FD43329E3986016373336F4DC71535DDDDAA338.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FD43329E3986016373336F4DC71535DDDDAA338.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/1/323830343a356239633a383030303a3a2f33332d3333203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b9c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         61:a1:b5:48:6d:c7:b9:72:90:1c:00:83:f6:60:a6:61:bd:87:
         ef:8d:9f:63:fa:c0:19:da:2a:bd:38:8e:dc:dc:09:fc:22:57:
         09:87:34:8d:c4:9a:f3:32:9e:f3:4a:02:f0:a5:a9:46:b5:f8:
         a0:1c:1c:13:0d:99:b2:d7:b5:8f:2b:26:14:af:23:ac:1d:8c:
         e7:89:ce:f4:9f:38:ba:49:db:02:c8:5f:cd:c0:2f:d1:c0:c4:
         72:a2:33:1f:f9:bf:79:08:9b:7f:ef:a4:a5:74:6d:9d:62:ba:
         d2:ec:f3:02:5b:fe:69:19:e3:13:ee:72:9a:0c:a1:07:6a:73:
         47:8b:4d:33:cd:9f:1a:32:ec:76:10:14:38:f9:8f:cb:90:36:
         1f:4d:7c:a4:da:b4:8a:66:2b:dc:8f:6f:a8:37:25:4a:58:10:
         ef:ca:ba:a5:36:a5:cb:32:16:ad:be:be:43:6c:2b:7b:5f:64:
         dc:60:03:10:70:8e:ac:2b:70:67:d4:83:e5:77:e6:e5:89:4c:
         82:6e:25:0d:bd:fb:81:49:ed:7b:cf:d5:93:8f:d6:bc:23:cf:
         e0:df:58:a3:7a:18:8b:b9:fd:57:73:f2:d6:ea:b1:aa:85:80:
         a7:82:14:17:ee:a2:4e:04:7e:b7:d3:ae:15:b7:2c:5b:02:e9:
         50:19:90:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 05:47:28 2024 by rpki-client on console-ams.rpki-client.org