Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/323830343a316362343a3a2f33322d313238203d3e203631363730.roa
File:                     323830343a316362343a3a2f33322d313238203d3e203631363730.roa (raw, json)
Hash identifier:          5qkOEUZ0QVpikayUQtEMA7uHfxwZIhijHRw64u4jAcs=
Subject key identifier:   EA:63:5A:6E:2C:C8:2F:72:A0:A5:B3:80:80:A9:C8:B2:A0:10:55:04
Certificate issuer:       /CN=95FD3FB0F9F7C3F1651810BB35A5D8A6D2CEFA3D
Certificate serial:       248AB641C18A3964F8AB2F09ADACA0690DE1F7B2
Authority key identifier: 95:FD:3F:B0:F9:F7:C3:F1:65:18:10:BB:35:A5:D8:A6:D2:CE:FA:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FD3FB0F9F7C3F1651810BB35A5D8A6D2CEFA3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/323830343a316362343a3a2f33322d313238203d3e203631363730.roa
Signing time:             Mon 27 May 2024 16:27:56 +0000
ROA not before:           Mon 27 May 2024 16:22:56 +0000
ROA not after:            Mon 26 May 2025 16:27:56 +0000
asID:                     61670
IP address blocks:        2804:1cb4::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:8a:b6:41:c1:8a:39:64:f8:ab:2f:09:ad:ac:a0:69:0d:e1:f7:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95FD3FB0F9F7C3F1651810BB35A5D8A6D2CEFA3D
        Validity
            Not Before: May 27 16:22:56 2024 GMT
            Not After : May 26 16:27:56 2025 GMT
        Subject: CN=EA635A6E2CC82F72A0A5B38080A9C8B2A0105504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a8:a8:53:11:9f:f7:8b:d0:69:70:1e:4f:2e:
                    44:a0:cb:96:24:d4:8d:ec:3f:11:88:ba:47:d4:1e:
                    53:12:75:9a:ff:a7:5f:13:21:10:8f:16:4d:aa:31:
                    77:4f:ce:a6:79:14:0e:67:94:b6:da:bb:8c:7e:f9:
                    d9:c6:9f:88:6a:72:e8:5a:48:ec:ec:e0:18:48:d4:
                    9f:d4:f1:d2:26:0e:b0:b9:5c:1b:e3:23:c8:e7:a2:
                    6c:7d:3c:66:56:68:0d:75:9f:70:63:72:2b:43:f5:
                    22:62:85:d9:0b:1f:59:db:6c:e3:cf:eb:04:57:e6:
                    61:ff:0d:f0:ee:4d:52:79:f3:74:e3:f0:52:71:d5:
                    74:1d:86:24:8a:b0:44:b8:d3:52:d3:d7:55:1e:0b:
                    a0:37:ae:26:10:a1:4d:4c:5c:b0:c1:a5:30:14:90:
                    20:7b:33:97:a9:80:1f:29:0a:33:78:b6:3f:51:dd:
                    5d:b8:c0:5b:d7:7b:28:31:18:d3:51:58:c5:68:e4:
                    d4:27:78:ec:29:f2:58:13:9d:ca:f6:32:b2:2c:1b:
                    19:68:3b:c7:fb:2f:19:98:21:54:a0:5d:c5:25:0d:
                    d3:ac:c4:c1:0f:3f:03:7a:f8:c0:a8:f7:f7:55:45:
                    42:6d:97:57:23:5b:32:17:64:7d:34:dd:5b:17:36:
                    9a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:63:5A:6E:2C:C8:2F:72:A0:A5:B3:80:80:A9:C8:B2:A0:10:55:04
            X509v3 Authority Key Identifier:
                keyid:95:FD:3F:B0:F9:F7:C3:F1:65:18:10:BB:35:A5:D8:A6:D2:CE:FA:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/95FD3FB0F9F7C3F1651810BB35A5D8A6D2CEFA3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FD3FB0F9F7C3F1651810BB35A5D8A6D2CEFA3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/323830343a316362343a3a2f33322d313238203d3e203631363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:59:8b:4b:ff:bb:ce:97:bf:7a:5d:f1:a4:6f:b7:fa:27:72:
         17:20:ab:c8:7e:35:97:7a:ca:a1:89:81:39:50:94:16:de:3d:
         60:99:b0:5e:02:b5:3e:e0:1d:fc:87:fd:ea:45:65:2a:b8:4e:
         1a:a2:1d:94:e1:86:b6:5d:1e:fb:91:21:f3:9f:07:22:07:45:
         81:34:53:d1:eb:9e:93:6b:91:9e:73:9b:bb:a4:91:d4:dc:63:
         c3:dc:63:0d:31:c8:ed:ea:fc:1d:2a:48:97:29:9a:4c:69:65:
         3e:b6:c5:fc:6e:d3:89:82:d6:dc:f0:bd:87:b9:c4:cf:a9:54:
         ee:ba:d9:d6:95:8b:17:fe:e5:e8:42:96:06:41:b1:f7:5a:93:
         0b:a9:19:27:d9:dd:c0:4a:04:23:e9:20:af:0a:09:93:c6:7c:
         2c:21:42:1e:e8:2a:1d:8d:73:39:d0:d6:01:cc:f9:e6:c8:da:
         9c:3c:af:41:01:f5:8f:9a:92:76:db:54:7e:4e:12:a7:b7:6e:
         c1:c7:75:e6:11:1a:97:0d:71:3b:d1:30:e7:11:83:1a:28:c3:
         d6:cd:24:d4:ca:52:71:49:7a:96:c0:80:9c:61:9e:56:e7:28:
         5b:dc:0d:a6:45:b4:aa:ef:c3:51:c0:09:f4:7c:a2:c8:de:cd:
         aa:5d:8d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 09:30:00 2024 by rpki-client on console-fra.rpki-client.org