Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/323830343a346637383a3a2f33322d3438203d3e20323638333239.roa
File:                     323830343a346637383a3a2f33322d3438203d3e20323638333239.roa (raw, json)
Hash identifier:          WQuLjBXwmgmAcqYzQfQGFIJ5cvVBjrVCaiQjJTKEHwU=
Subject key identifier:   4F:F2:B0:2A:0F:6C:F9:81:2A:1F:97:AB:45:E2:AB:39:8A:3B:EC:3B
Certificate issuer:       /CN=EE85037D3580A407793B86B1161445493E825B07
Certificate serial:       33A0710C5A9E0882A4F112E2B33DB2EE63BC65CB
Authority key identifier: EE:85:03:7D:35:80:A4:07:79:3B:86:B1:16:14:45:49:3E:82:5B:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE85037D3580A407793B86B1161445493E825B07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/323830343a346637383a3a2f33322d3438203d3e20323638333239.roa
Signing time:             Tue 06 Aug 2024 20:46:16 +0000
ROA not before:           Tue 06 Aug 2024 20:41:16 +0000
ROA not after:            Tue 05 Aug 2025 20:46:16 +0000
asID:                     268329
IP address blocks:        2804:4f78::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a0:71:0c:5a:9e:08:82:a4:f1:12:e2:b3:3d:b2:ee:63:bc:65:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE85037D3580A407793B86B1161445493E825B07
        Validity
            Not Before: Aug  6 20:41:16 2024 GMT
            Not After : Aug  5 20:46:16 2025 GMT
        Subject: CN=4FF2B02A0F6CF9812A1F97AB45E2AB398A3BEC3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8a:f3:e1:74:22:a3:ae:d5:db:a7:12:e7:ca:
                    c5:75:5b:e8:ed:fd:5c:eb:dd:cf:20:1e:d6:c5:2b:
                    0b:03:09:2b:69:57:c7:74:b4:8b:85:ef:52:3c:e7:
                    2b:77:29:48:1f:6f:db:00:9a:a9:bc:70:57:de:4c:
                    c3:f4:04:24:f4:dd:84:a4:49:0d:7e:a2:05:cd:16:
                    40:43:8b:b0:30:8c:94:4d:1e:68:c5:8b:0b:90:0a:
                    14:49:81:e4:5e:ff:07:d4:84:6e:3f:d6:aa:9f:e1:
                    fc:c0:5c:31:70:fa:5c:8c:2d:b8:7f:e2:34:7c:96:
                    83:3e:7e:05:25:d8:c7:ce:d6:09:7b:74:48:35:57:
                    f1:a1:47:1b:b4:a6:cf:9b:c0:43:e6:9f:17:57:8b:
                    d7:85:8a:eb:fe:64:20:3b:15:5f:39:49:db:2b:fd:
                    00:11:45:f1:ce:d9:49:c9:78:9d:11:1b:ce:f3:57:
                    b9:ad:47:a6:e8:74:93:ad:67:3a:46:a9:8c:f1:19:
                    73:85:bf:e0:7b:e4:2b:c3:de:73:2a:e9:c2:84:37:
                    c0:0a:1b:77:d0:c1:2f:a0:d2:35:c5:db:38:70:ea:
                    35:de:f2:56:ef:12:d4:f6:e7:d6:bf:c2:7a:8b:70:
                    5a:0f:70:23:2c:ae:d6:d9:28:c7:10:d1:a6:a7:9c:
                    cd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F2:B0:2A:0F:6C:F9:81:2A:1F:97:AB:45:E2:AB:39:8A:3B:EC:3B
            X509v3 Authority Key Identifier:
                keyid:EE:85:03:7D:35:80:A4:07:79:3B:86:B1:16:14:45:49:3E:82:5B:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/EE85037D3580A407793B86B1161445493E825B07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE85037D3580A407793B86B1161445493E825B07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/323830343a346637383a3a2f33322d3438203d3e20323638333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f78::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:bc:89:36:81:58:77:b2:08:04:60:19:2c:a8:27:05:8e:20:
         76:5c:53:1e:63:34:5a:f7:f4:af:23:3e:a9:d1:2f:2e:47:01:
         f5:08:13:7d:5e:69:9a:cc:3e:1d:f1:f2:d3:36:65:f9:6d:bf:
         ca:a6:e9:2c:4b:bd:5e:00:97:42:5e:7e:ee:76:27:84:50:c1:
         cc:c3:b8:e2:5b:fa:74:f7:1b:d1:e8:91:a0:51:ee:c6:4e:3b:
         46:08:87:3f:2e:f2:ea:c5:e5:e8:59:a3:98:10:b6:15:6e:5c:
         02:2d:06:46:4c:27:c8:65:1c:a2:60:e7:ba:37:18:fd:d7:4b:
         26:fa:95:0d:39:27:5a:37:ec:29:95:bd:47:af:02:2f:04:f5:
         44:dc:e6:82:d3:34:e0:52:58:75:ff:e3:4e:42:3f:1e:a1:63:
         3d:09:64:fc:04:0b:bc:e9:2b:6b:6b:b6:d2:17:03:f2:da:a5:
         6e:5f:50:58:dc:95:bf:3f:c6:2d:d7:9b:70:ce:80:5f:60:59:
         7a:fd:32:ac:db:2a:6f:96:a7:df:97:bd:00:e1:d0:a4:57:7f:
         a8:0f:a6:15:6f:a6:25:47:ad:1f:50:74:58:28:5e:07:81:14:
         0b:54:f0:ba:9b:23:d0:a2:86:f0:84:ea:f7:28:80:99:1a:e6:
         be:6e:f8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 19:45:56 2024 by rpki-client on console-ams.rpki-client.org