Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/323830343a323833343a3a2f33322d3336203d3e20323633393437.roa
File:                     323830343a323833343a3a2f33322d3336203d3e20323633393437.roa (raw, json)
Hash identifier:          86QshgPKRwsnaVnEsPJ0puiVBgV4SW4fCvPS+Kzt2uA=
Subject key identifier:   64:F3:4F:B6:14:45:A5:E1:69:AB:18:E7:B9:02:89:5B:3B:CD:92:5B
Certificate issuer:       /CN=BC1D86935CF51D0E9D9AAB70C5AEADEB8CD1DC86
Certificate serial:       254DB04C727147A2B232D9E24B83CFFDC93BA13F
Authority key identifier: BC:1D:86:93:5C:F5:1D:0E:9D:9A:AB:70:C5:AE:AD:EB:8C:D1:DC:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC1D86935CF51D0E9D9AAB70C5AEADEB8CD1DC86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/323830343a323833343a3a2f33322d3336203d3e20323633393437.roa
Signing time:             Mon 20 May 2024 19:09:52 +0000
ROA not before:           Mon 20 May 2024 19:04:52 +0000
ROA not after:            Mon 19 May 2025 19:09:52 +0000
asID:                     263947
IP address blocks:        2804:2834::/32 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4d:b0:4c:72:71:47:a2:b2:32:d9:e2:4b:83:cf:fd:c9:3b:a1:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC1D86935CF51D0E9D9AAB70C5AEADEB8CD1DC86
        Validity
            Not Before: May 20 19:04:52 2024 GMT
            Not After : May 19 19:09:52 2025 GMT
        Subject: CN=64F34FB61445A5E169AB18E7B902895B3BCD925B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fa:1c:45:fb:97:e9:c4:a8:08:4f:a0:ef:19:
                    55:89:88:54:eb:19:22:4b:2b:14:77:5a:31:bd:b0:
                    85:32:83:73:39:91:8c:82:4c:7c:3d:f0:84:1a:de:
                    34:18:f1:58:c0:84:2f:0b:4c:26:f2:d1:35:c0:5d:
                    9f:f8:16:b6:f5:09:ec:06:57:b9:27:db:ae:d6:92:
                    a5:2c:54:02:19:c2:af:8d:91:b8:00:08:97:63:57:
                    4d:5a:6b:5b:ad:01:8f:17:82:c0:74:c4:9f:bc:d8:
                    c3:3c:41:c7:39:f3:e8:91:92:a7:48:d5:b8:73:2d:
                    5b:13:7f:df:ce:1f:6a:1d:e1:8b:46:7e:68:a3:4c:
                    1f:3e:eb:8c:3d:9c:04:10:17:f1:8d:dd:e7:88:ef:
                    74:69:a7:17:86:23:77:b6:5e:c1:36:dd:e4:97:2b:
                    fa:12:8c:5d:f3:a4:3a:db:b2:1f:d0:c4:a2:45:d6:
                    66:b9:89:a4:de:58:3c:02:19:cb:4d:23:c2:f7:35:
                    50:d3:4c:52:57:8d:3c:67:17:aa:1c:d3:fa:52:68:
                    1b:0b:44:57:8b:2a:cc:88:72:4e:19:d9:a0:a2:11:
                    9d:1d:0f:b6:95:7e:b4:ac:51:0d:3a:c6:9c:3b:8c:
                    34:a2:ca:99:a0:13:cc:8c:2c:23:bb:49:09:0b:86:
                    21:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F3:4F:B6:14:45:A5:E1:69:AB:18:E7:B9:02:89:5B:3B:CD:92:5B
            X509v3 Authority Key Identifier:
                keyid:BC:1D:86:93:5C:F5:1D:0E:9D:9A:AB:70:C5:AE:AD:EB:8C:D1:DC:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/BC1D86935CF51D0E9D9AAB70C5AEADEB8CD1DC86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC1D86935CF51D0E9D9AAB70C5AEADEB8CD1DC86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/323830343a323833343a3a2f33322d3336203d3e20323633393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2834::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:d0:56:3b:56:48:27:74:52:77:7b:3a:a4:07:7a:7b:eb:50:
         c0:34:df:78:f1:68:68:8a:9e:cc:18:02:5a:45:78:ac:05:41:
         ce:fe:84:93:97:aa:10:f8:0b:7b:b4:84:38:9c:53:3c:48:3f:
         f8:8a:46:8f:d7:5d:7b:67:cd:75:85:bf:9d:1b:fd:b4:ac:ba:
         8b:cc:57:eb:b7:68:c4:7e:a5:52:82:69:8a:73:34:9d:be:1a:
         cf:b3:c5:96:ff:85:f7:fa:9d:28:9a:19:16:ec:4e:5a:56:48:
         48:1d:ce:e0:53:bd:ed:f6:43:57:d9:d2:47:83:8b:f0:18:40:
         dd:7c:49:89:4d:45:40:a7:91:f8:97:2e:b9:23:c6:72:63:93:
         d1:6f:05:84:b2:82:9f:0f:a2:84:d8:b7:ea:09:45:8b:e5:fc:
         1c:37:d2:ae:13:4d:58:b1:f3:d2:92:3b:69:c5:65:4f:e5:fd:
         48:66:e4:43:37:e8:a4:47:03:ba:05:1a:6a:ba:e2:56:1f:b9:
         e8:1a:29:00:cd:3c:46:84:c0:30:39:fc:8b:8b:ee:15:49:0c:
         d4:62:74:fc:7f:df:3f:1d:83:95:80:3c:d8:0c:6c:cc:b0:1b:
         9c:d4:02:69:96:74:71:a9:48:79:e6:86:c6:0e:c8:80:47:00:
         25:c3:f2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 23:20:44 2024 by rpki-client on console-ams.rpki-client.org