Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/1/323830343a356562633a383030303a3a2f33332d3333203d3e20323639303533.roa
File:                     323830343a356562633a383030303a3a2f33332d3333203d3e20323639303533.roa (raw, json)
Hash identifier:          8JmVmHKK/cdT5czhFBd9YRYi/TgscGlxkdYj+04xHc4=
Subject key identifier:   C5:C0:FF:76:AE:F5:A4:86:9E:15:50:AC:DC:F3:6E:52:31:5B:19:95
Certificate issuer:       /CN=7809B770F256907DD528D90BF9096D8C2F05A4CA
Certificate serial:       61DB932C8042E44E838380A20834DA1A864B4566
Authority key identifier: 78:09:B7:70:F2:56:90:7D:D5:28:D9:0B:F9:09:6D:8C:2F:05:A4:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7809B770F256907DD528D90BF9096D8C2F05A4CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/1/323830343a356562633a383030303a3a2f33332d3333203d3e20323639303533.roa
Signing time:             Wed 03 Apr 2024 23:10:48 +0000
ROA not before:           Wed 03 Apr 2024 23:05:48 +0000
ROA not after:            Wed 02 Apr 2025 23:10:48 +0000
asID:                     269053
IP address blocks:        2804:5ebc:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:db:93:2c:80:42:e4:4e:83:83:80:a2:08:34:da:1a:86:4b:45:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7809B770F256907DD528D90BF9096D8C2F05A4CA
        Validity
            Not Before: Apr  3 23:05:48 2024 GMT
            Not After : Apr  2 23:10:48 2025 GMT
        Subject: CN=C5C0FF76AEF5A4869E1550ACDCF36E52315B1995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:04:b1:67:d8:63:0e:76:08:a1:16:d1:4c:cb:
                    d0:87:1e:54:db:88:30:8a:c9:88:dc:e7:a2:53:fa:
                    a7:bf:15:af:74:67:f9:c6:6b:e2:b9:4a:43:88:dd:
                    30:e2:14:89:7f:8b:29:e3:ab:c9:37:8e:08:92:3a:
                    d0:6e:df:83:71:f5:ef:82:d1:35:14:76:b1:c6:32:
                    02:c5:ac:06:dd:26:86:05:eb:b9:7d:80:d3:59:4a:
                    e3:15:13:c9:ef:4e:06:69:68:97:a3:f3:01:94:65:
                    fe:3c:4d:37:9d:68:08:74:e4:f3:32:27:0d:53:c8:
                    ce:6d:02:aa:24:a2:14:90:86:66:0f:7f:23:a4:85:
                    e4:ea:6b:f5:7e:9b:48:5b:75:cc:00:62:92:6e:a8:
                    b8:81:97:6e:f4:ff:cb:cb:17:a0:29:32:fb:48:36:
                    4a:dc:82:f1:86:1d:fb:0e:86:ac:1d:24:d0:78:7e:
                    f8:97:1a:ac:fa:82:a0:5f:16:7f:ba:d2:70:4f:44:
                    47:c3:c6:11:01:47:cc:ea:37:e4:f5:96:2d:fb:5b:
                    87:0f:d4:5a:c8:2c:d9:a4:73:2c:85:45:dc:60:bb:
                    fe:54:f5:f8:0f:3a:09:99:e3:7c:dd:ff:9e:2a:42:
                    ef:34:bf:cf:d1:5e:09:b1:1b:6a:49:bf:ab:99:ed:
                    6b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C0:FF:76:AE:F5:A4:86:9E:15:50:AC:DC:F3:6E:52:31:5B:19:95
            X509v3 Authority Key Identifier:
                keyid:78:09:B7:70:F2:56:90:7D:D5:28:D9:0B:F9:09:6D:8C:2F:05:A4:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/1/7809B770F256907DD528D90BF9096D8C2F05A4CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7809B770F256907DD528D90BF9096D8C2F05A4CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/1/323830343a356562633a383030303a3a2f33332d3333203d3e20323639303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ebc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         38:95:92:72:34:2a:85:5b:60:cc:2b:1f:a9:f5:2c:b6:b8:ce:
         b8:b9:71:6a:a2:05:10:79:9a:c4:a8:15:5a:60:94:5a:6a:4b:
         a4:b7:03:c9:26:65:4d:28:83:d3:98:ac:fe:c4:fe:c1:df:17:
         b2:76:36:ff:39:b6:7e:54:0c:c0:22:a1:79:38:5a:5b:7d:67:
         9a:c2:88:91:b7:8f:f3:b7:d1:8c:a5:33:2c:8e:f0:5b:39:72:
         95:ff:91:04:b7:03:4e:20:6f:3c:d1:df:7f:c7:2c:fa:ad:56:
         eb:0a:43:ec:d9:61:40:73:df:5b:6c:20:b0:6a:a2:ad:a8:cf:
         fb:62:30:7f:12:8c:0c:83:67:7a:8c:57:99:26:e4:d5:59:7f:
         9a:04:fa:40:2e:ef:74:bf:79:5c:a9:b6:a8:f3:02:8e:83:08:
         b4:27:fb:eb:fa:29:f7:ef:54:97:1b:7e:1f:38:da:b1:7b:9f:
         b3:34:1f:3b:2b:e4:d2:92:ae:3c:c8:20:1a:87:57:f4:94:98:
         d8:89:19:9d:b3:c5:90:94:b9:99:98:ca:e6:8d:d0:65:95:9f:
         23:0c:62:95:0d:4a:8f:df:ee:a7:ba:af:a7:b3:03:22:9b:2e:
         46:5e:ed:41:28:83:78:65:f7:70:b9:a7:8c:ff:aa:a2:4e:4f:
         b3:c1:81:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 07:36:42 2024 by rpki-client on console-fra.rpki-client.org