Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/323830343a366633343a3a2f33322d3332203d3e203238323334.roa
File:                     323830343a366633343a3a2f33322d3332203d3e203238323334.roa (raw, json)
Hash identifier:          caxA/8wh59x8HPUPQ0YYKG266N1eDoseAqDmN+SAR2w=
Subject key identifier:   9D:65:8B:28:EC:3D:A4:58:63:A6:58:A1:FE:B5:E5:0B:C8:5A:07:EF
Certificate issuer:       /CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
Certificate serial:       407F40D3A96EF16167C3D205855624188E63751E
Authority key identifier: 13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/323830343a366633343a3a2f33322d3332203d3e203238323334.roa
Signing time:             Wed 03 Apr 2024 18:30:22 +0000
ROA not before:           Wed 03 Apr 2024 18:25:22 +0000
ROA not after:            Wed 02 Apr 2025 18:30:22 +0000
asID:                     28234
IP address blocks:        2804:6f34::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:7f:40:d3:a9:6e:f1:61:67:c3:d2:05:85:56:24:18:8e:63:75:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F8CE4466D22A71ABE63B113448A11BD16E0F5F
        Validity
            Not Before: Apr  3 18:25:22 2024 GMT
            Not After : Apr  2 18:30:22 2025 GMT
        Subject: CN=9D658B28EC3DA45863A658A1FEB5E50BC85A07EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:bd:72:dd:47:b5:f7:dd:d9:b2:48:e0:80:16:
                    f5:bd:73:ac:a3:e2:ad:50:56:c6:88:27:2a:8c:de:
                    f1:39:fb:22:2d:3a:12:74:fc:dc:c4:31:5d:10:bf:
                    0a:37:2e:92:9a:87:f3:4c:5a:de:b8:da:be:67:06:
                    d1:90:86:d2:f1:f5:8b:1a:01:aa:df:48:d1:fe:c0:
                    5b:f1:c6:47:fb:0b:68:34:88:4e:44:13:05:89:68:
                    19:a3:41:50:c0:d8:15:de:29:62:10:18:18:51:c9:
                    a9:a6:8a:ff:d4:1a:75:f9:4e:3a:c3:70:92:91:4d:
                    f3:0c:f0:ed:78:b3:87:00:84:36:ac:a6:a3:6a:f7:
                    a3:fe:e0:cf:a5:d9:56:47:38:0c:5b:f3:86:9c:12:
                    55:f9:61:b7:9f:8e:30:85:b9:73:22:03:5a:50:b2:
                    0c:3b:d8:70:3a:9a:4b:35:9f:2b:07:d5:0e:4f:74:
                    70:db:de:05:7c:3e:89:67:14:9c:83:f9:42:a0:cf:
                    1a:35:5a:cd:e6:59:e2:64:4c:59:02:15:06:ae:ff:
                    ab:12:4b:4c:b7:0f:49:a9:50:ba:58:bd:5d:30:53:
                    26:59:af:c9:eb:aa:0d:a0:11:a4:4a:e9:e8:36:6a:
                    7a:7d:47:27:c4:e5:ea:e3:9d:87:67:c7:82:0f:45:
                    9d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:65:8B:28:EC:3D:A4:58:63:A6:58:A1:FE:B5:E5:0B:C8:5A:07:EF
            X509v3 Authority Key Identifier:
                keyid:13:F8:CE:44:66:D2:2A:71:AB:E6:3B:11:34:48:A1:1B:D1:6E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13F8CE4466D22A71ABE63B113448A11BD16E0F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/1/323830343a366633343a3a2f33322d3332203d3e203238323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f34::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:3f:b1:41:f4:22:af:3f:90:5a:17:fd:0e:0b:43:46:0c:a9:
         4a:a9:a7:cf:4e:33:c7:62:8f:e9:b5:be:ad:29:84:4d:94:bd:
         37:61:2f:ec:ce:98:03:3f:6a:31:ba:26:d1:4d:29:c6:5e:f8:
         81:8c:31:70:ce:95:43:57:39:55:80:bb:b6:1a:ef:55:5e:ff:
         5f:35:e7:8c:a9:ce:29:b7:f5:aa:b8:aa:63:e4:56:40:92:6b:
         da:9e:4f:b6:b0:1f:48:0b:13:b2:50:c8:79:d5:f9:cb:db:5b:
         6b:2f:5e:56:ad:dc:73:50:c5:b2:4d:95:b1:5b:4a:61:ed:5a:
         3d:31:81:a1:ab:8f:9e:4a:49:62:8d:d0:74:be:ea:51:3b:1b:
         0c:57:f5:1b:20:72:12:a7:05:65:95:36:3c:76:e8:6a:db:43:
         0f:5a:f2:a7:19:d7:c2:32:08:ae:32:44:6b:53:af:ee:f5:ba:
         5a:5d:a6:7d:e0:60:51:87:c4:a5:9c:6a:68:53:53:a3:97:ff:
         86:e4:8a:14:4e:98:06:91:28:fd:74:49:bf:f3:fd:6c:0d:af:
         88:ff:eb:65:f9:b3:e7:03:78:cd:6f:5f:ab:10:5e:2e:97:86:
         bf:2a:dd:d4:ba:0e:d3:a5:b0:16:f6:9c:b3:65:cf:e6:4e:74:
         17:20:c9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 01:37:15 2024 by rpki-client on console-ams.rpki-client.org