Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/323830343a363266633a3a2f33322d3438203d3e20323639333332.roa
File:                     323830343a363266633a3a2f33322d3438203d3e20323639333332.roa (raw, json)
Hash identifier:          qhotw5i4tXyLgGN/8dUz14n4HHXFJKPQPKkgIMwHC7E=
Subject key identifier:   86:6B:81:AE:89:FA:97:9D:E7:FB:C0:C8:43:B5:A6:6F:CE:DC:0F:84
Certificate issuer:       /CN=B6727A4A3AFED64BF9053CC676AAF32AC6824ABF
Certificate serial:       4DA1C709D67E45D90DE8C133BCF45F798B824B10
Authority key identifier: B6:72:7A:4A:3A:FE:D6:4B:F9:05:3C:C6:76:AA:F3:2A:C6:82:4A:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6727A4A3AFED64BF9053CC676AAF32AC6824ABF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/323830343a363266633a3a2f33322d3438203d3e20323639333332.roa
Signing time:             Wed 06 Nov 2024 18:40:03 +0000
ROA not before:           Wed 06 Nov 2024 18:35:03 +0000
ROA not after:            Wed 05 Nov 2025 18:40:03 +0000
asID:                     269332
IP address blocks:        2804:62fc::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a1:c7:09:d6:7e:45:d9:0d:e8:c1:33:bc:f4:5f:79:8b:82:4b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6727A4A3AFED64BF9053CC676AAF32AC6824ABF
        Validity
            Not Before: Nov  6 18:35:03 2024 GMT
            Not After : Nov  5 18:40:03 2025 GMT
        Subject: CN=866B81AE89FA979DE7FBC0C843B5A66FCEDC0F84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2b:c9:f1:b4:4c:5e:7f:64:7d:86:c7:92:4e:
                    9e:ef:55:a7:f5:09:25:b6:bc:69:77:f1:94:e5:21:
                    0a:da:47:db:87:95:9b:f8:c8:04:9e:16:ab:02:5c:
                    35:3c:c8:2f:50:3e:96:65:95:22:cb:a2:7f:7f:ca:
                    85:68:83:24:34:c1:5f:ff:6b:d9:29:a4:e8:6a:be:
                    eb:af:1f:f1:72:44:be:51:ee:c2:05:9d:c4:a2:a3:
                    e3:d3:3c:be:81:18:5b:4e:bf:56:53:96:66:52:64:
                    6b:19:f3:d3:a6:bc:7f:ac:e6:a8:98:cc:0c:aa:d1:
                    e7:2a:c5:9f:53:5e:a7:6e:64:01:57:66:3b:54:fa:
                    b7:0d:22:8e:e5:2e:19:20:b9:c1:89:93:7e:e6:09:
                    60:db:98:e8:93:35:89:68:06:bc:e2:bb:55:3a:7a:
                    82:da:27:2c:7b:e4:37:f9:4f:40:86:c6:a3:f2:1b:
                    3f:3d:a8:81:13:9b:d5:85:0a:c2:75:52:45:31:bd:
                    99:03:ce:7e:65:88:3e:e0:ca:d1:fc:c5:41:17:04:
                    7b:73:ac:b0:66:a2:8a:55:cc:11:f9:e0:ac:b2:c2:
                    e1:fb:f0:3e:33:a6:e2:c2:37:03:48:70:1b:27:74:
                    85:02:e1:73:67:e7:dc:50:dc:b8:f2:e3:9a:ca:49:
                    a4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6B:81:AE:89:FA:97:9D:E7:FB:C0:C8:43:B5:A6:6F:CE:DC:0F:84
            X509v3 Authority Key Identifier:
                keyid:B6:72:7A:4A:3A:FE:D6:4B:F9:05:3C:C6:76:AA:F3:2A:C6:82:4A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/B6727A4A3AFED64BF9053CC676AAF32AC6824ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6727A4A3AFED64BF9053CC676AAF32AC6824ABF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/323830343a363266633a3a2f33322d3438203d3e20323639333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:62fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:99:42:02:93:c1:2b:44:09:c6:50:70:0f:98:7f:6f:18:38:
         98:48:3a:bf:28:b8:0c:38:f3:ef:4f:c2:1a:3a:05:67:f7:4e:
         d1:1c:5b:9a:0c:8d:13:f7:31:eb:c2:46:f9:44:1d:6c:f5:3a:
         2c:a6:bb:f5:9d:d8:6f:ca:0b:4e:d7:6b:2d:a8:ed:a3:9c:00:
         ce:25:1e:98:cd:5e:32:a7:a9:c6:a8:11:5a:5f:e2:39:67:2e:
         42:1e:bd:19:85:86:69:c0:32:8f:9d:7c:69:a5:84:e6:17:fd:
         80:e5:6e:5c:0a:08:82:b9:93:11:2f:95:21:e7:b8:04:6d:93:
         2b:13:c1:ff:54:62:0b:19:ae:f7:2c:42:d4:f8:fc:5a:0a:29:
         10:ce:6a:35:ad:98:62:66:ea:78:41:84:0b:24:ec:70:be:1d:
         49:7e:a2:47:b4:cb:e1:98:03:f1:73:83:9b:71:2a:01:70:e3:
         4a:6a:c9:cd:64:6c:58:b5:39:7f:dc:ff:fe:33:07:d9:d4:2e:
         72:6f:5e:c6:69:76:69:e1:13:ed:79:17:e8:7b:b7:20:f8:24:
         e2:7f:c0:84:c6:ac:c8:0a:14:f5:90:e8:21:98:25:3a:3e:2e:
         30:51:53:06:3e:88:cb:db:29:c1:27:5e:4f:cd:f9:29:6e:8c:
         79:9a:4b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 21:35:34 2024 by rpki-client on console-fra.rpki-client.org