Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa
File:                     323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa (raw, json)
Hash identifier:          2mQ2PnB7TXB1tN4PBKZ5pF891a3FJgaw79b7ExuOnxk=
Subject key identifier:   C5:A7:BC:8B:F3:93:5E:6B:C4:BE:E8:F9:90:E4:6D:4A:BE:D2:FA:D4
Certificate issuer:       /CN=FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97
Certificate serial:       489A7FBC322CEB481D4EB4E433162FDCA611B823
Authority key identifier: FD:09:3A:D3:0F:DD:C7:28:0A:72:C5:D5:E1:61:4E:D3:4E:E8:CD:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa
Signing time:             Thu 04 Apr 2024 14:55:36 +0000
ROA not before:           Thu 04 Apr 2024 14:50:36 +0000
ROA not after:            Thu 03 Apr 2025 14:55:36 +0000
asID:                     273728
IP address blocks:        2804:8b5c:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:9a:7f:bc:32:2c:eb:48:1d:4e:b4:e4:33:16:2f:dc:a6:11:b8:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97
        Validity
            Not Before: Apr  4 14:50:36 2024 GMT
            Not After : Apr  3 14:55:36 2025 GMT
        Subject: CN=C5A7BC8BF3935E6BC4BEE8F990E46D4ABED2FAD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:74:9e:0e:ac:9d:ec:6f:3d:95:67:4d:cd:a5:
                    05:7c:72:9b:9f:ad:a4:b3:88:2f:b9:ce:c3:59:64:
                    5d:34:35:fe:7b:5d:e3:d6:32:3a:10:20:76:14:b1:
                    d1:8b:f4:36:7a:4e:9a:51:3b:1a:99:61:1a:26:9e:
                    fe:cf:5b:ba:ae:41:28:eb:32:48:48:95:96:67:d5:
                    a3:1f:9e:5e:8a:19:cf:ab:00:41:13:28:58:2a:01:
                    66:4c:d3:ae:36:11:8d:cc:59:cf:91:a8:4d:8d:dc:
                    a0:d5:9e:9c:1b:01:dd:ae:71:90:f0:c1:a7:fc:5f:
                    c0:57:ac:36:a9:da:a4:5a:3b:43:c4:37:a1:40:07:
                    35:fc:59:40:72:ef:6b:b5:54:7b:03:3b:ad:3e:15:
                    cd:96:41:c2:0b:46:e9:4e:1c:4e:cf:68:d9:41:e6:
                    b1:ef:06:70:d9:73:d3:29:f0:e6:b4:03:b7:b8:34:
                    81:b1:1b:00:3e:a2:2e:ac:04:de:b0:65:07:a8:52:
                    a9:82:5b:a3:bf:64:66:d7:c2:b5:93:f3:15:04:c4:
                    bc:7c:8e:ce:f0:2b:6c:8d:a2:b4:0b:ae:f6:0a:4b:
                    86:ef:bc:3e:dd:7f:ee:76:62:3f:8a:c6:6a:4f:2f:
                    d1:ec:9e:34:66:6f:94:c7:e2:0e:1d:ec:b5:91:cd:
                    9e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A7:BC:8B:F3:93:5E:6B:C4:BE:E8:F9:90:E4:6D:4A:BE:D2:FA:D4
            X509v3 Authority Key Identifier:
                keyid:FD:09:3A:D3:0F:DD:C7:28:0A:72:C5:D5:E1:61:4E:D3:4E:E8:CD:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         75:69:1e:11:92:50:ac:67:bc:5a:12:cf:14:f1:41:7f:54:da:
         8a:24:3f:d1:b7:01:60:49:44:f6:9a:45:7c:92:64:e7:c5:cd:
         73:c6:66:fb:2c:ba:9a:df:ac:4a:1a:46:00:07:d8:89:ca:bd:
         14:17:87:9d:a2:11:38:d7:e1:4c:b9:68:3e:a5:e1:35:99:75:
         c9:dd:1e:76:b5:f4:13:8a:74:46:0d:39:67:3e:32:a3:90:8b:
         3b:41:8f:e8:61:3d:fe:d6:9a:95:83:ee:a5:c4:dc:e9:7f:f4:
         af:54:84:06:86:81:bd:f0:21:58:cf:26:ee:e9:51:b2:fe:d6:
         f1:b9:d2:d2:19:ce:b5:b6:4b:59:91:29:01:6d:71:68:2a:e6:
         80:d1:22:94:9c:4a:d7:74:32:8c:0a:22:2c:03:60:93:36:4a:
         c2:43:d3:2d:02:69:ab:2b:f4:b7:1d:74:2d:f7:40:24:74:4c:
         d0:b9:57:8f:b4:e1:42:86:b4:a1:c9:ed:1c:e3:68:d7:91:1a:
         98:7e:41:16:fe:fa:30:e1:c4:85:28:45:6d:e2:7b:57:da:e2:
         3c:ec:39:dd:e6:77:62:a9:54:d3:67:2f:1b:a6:a8:6c:41:73:
         d2:55:ee:fd:49:a5:04:fd:ec:c7:ba:db:43:1a:9f:9d:64:5c:
         31:4b:8f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 14:50:05 2024 by rpki-client on console-ams.rpki-client.org