Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/323830343a346439303a3a2f33322d3332203d3e20323638323035.roa
File:                     323830343a346439303a3a2f33322d3332203d3e20323638323035.roa (raw, json)
Hash identifier:          A1eHoEijNJATSC4VOOSsW8/2EfC0sDyrp6bewizhukQ=
Subject key identifier:   0B:C8:B0:7E:C8:D7:A3:B5:F3:6E:85:D4:46:CE:63:32:F6:36:BC:35
Certificate issuer:       /CN=C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04
Certificate serial:       046749FE4D4E5EC872D4A1616F78ED4DE3364586
Authority key identifier: C4:07:32:FB:FD:6E:93:EC:34:C8:BF:5F:47:B4:FD:75:3E:5C:4B:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/323830343a346439303a3a2f33322d3332203d3e20323638323035.roa
Signing time:             Tue 09 Apr 2024 16:49:42 +0000
ROA not before:           Tue 09 Apr 2024 16:44:42 +0000
ROA not after:            Tue 08 Apr 2025 16:49:42 +0000
asID:                     268205
IP address blocks:        2804:4d90::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:67:49:fe:4d:4e:5e:c8:72:d4:a1:61:6f:78:ed:4d:e3:36:45:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04
        Validity
            Not Before: Apr  9 16:44:42 2024 GMT
            Not After : Apr  8 16:49:42 2025 GMT
        Subject: CN=0BC8B07EC8D7A3B5F36E85D446CE6332F636BC35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:05:aa:b8:71:9e:d7:44:34:a0:f7:ed:ba:e2:
                    a7:a6:3b:c1:12:a5:a8:1f:57:e6:62:67:9d:27:67:
                    d4:4d:49:94:a1:7f:ad:b7:82:58:7c:2c:3f:e2:cb:
                    6b:57:99:01:be:df:95:04:95:d6:57:e2:18:df:6c:
                    87:a7:d9:39:a5:00:4e:3f:ae:bd:de:80:a7:9d:18:
                    27:66:01:4c:c2:c0:83:e1:ad:20:ee:ab:7e:6a:cf:
                    07:75:54:23:21:c4:d7:96:ac:fc:01:d7:ef:e1:1a:
                    a2:ba:e2:42:80:21:75:1e:b9:09:a5:f1:33:52:a6:
                    b2:43:62:3c:d9:54:d4:86:f4:17:64:bf:0c:9f:e5:
                    5f:ba:0f:0e:b8:5b:5b:88:80:fc:8a:37:41:ed:33:
                    d9:98:ff:89:19:a8:c9:ec:c2:b5:95:8d:97:9b:3c:
                    6e:46:20:da:11:d5:0e:ff:f2:50:a7:ce:af:7a:b8:
                    9c:e3:4a:6f:00:13:08:d2:de:20:7c:19:31:2d:f9:
                    88:04:a9:db:a8:be:5d:26:a7:70:ee:b4:bf:cb:9f:
                    0c:47:fd:85:5f:4e:d0:1a:3c:54:d2:7c:d1:b2:47:
                    15:c3:2c:49:a5:f8:ea:fa:a2:f0:31:37:2e:d8:74:
                    2b:1d:33:71:39:80:a5:e1:b2:be:a7:67:dd:62:35:
                    d3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C8:B0:7E:C8:D7:A3:B5:F3:6E:85:D4:46:CE:63:32:F6:36:BC:35
            X509v3 Authority Key Identifier:
                keyid:C4:07:32:FB:FD:6E:93:EC:34:C8:BF:5F:47:B4:FD:75:3E:5C:4B:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/323830343a346439303a3a2f33322d3332203d3e20323638323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:79:87:89:e2:09:c8:dd:37:c2:22:ca:0e:25:be:84:c8:90:
         6b:f1:04:f1:22:26:c3:82:ca:65:c0:16:1e:30:4b:75:d5:6d:
         e6:ff:96:59:bf:96:07:f8:bf:9f:8f:0a:1c:d4:5e:3e:09:b3:
         3c:06:4b:2f:6d:84:6d:f3:c6:19:29:9e:f3:43:b5:b5:47:72:
         07:a1:df:8d:68:0f:58:65:ba:e1:dd:68:bb:e4:ff:29:d5:10:
         04:7b:79:d4:19:d7:4a:79:a6:b1:a6:9f:c0:5e:24:bf:41:3c:
         a2:83:1b:3f:b6:0b:8f:9f:2f:12:7f:9d:cd:6a:b7:e5:be:fe:
         f2:7c:9d:d2:11:ec:db:79:2c:e8:50:6a:4d:1f:46:a5:cd:00:
         34:d3:69:a5:dd:97:66:0d:f8:f8:39:66:78:4c:1d:df:b2:c3:
         2b:c9:e7:d1:9d:a6:98:d2:41:df:67:96:e3:98:e4:4f:f2:25:
         5d:16:b3:c4:ed:2a:96:99:f4:b2:37:8e:82:0f:c4:fe:ff:0d:
         4d:3a:1f:d9:2a:20:58:6c:61:42:97:1b:c0:ae:96:ec:d3:b8:
         fd:0c:25:54:c9:bf:60:69:35:3f:b8:9a:83:18:a8:f3:82:19:
         ce:e0:97:c5:1a:5e:9f:bf:9c:f7:68:b5:66:9e:e4:46:7b:cb:
         c0:03:9d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 05:11:44 2024 by rpki-client on console-ams.rpki-client.org