Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa
File:                     323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa (raw, json)
Hash identifier:          9zRsN0bmzfi+izq1ZJu/w5Cag1QL86a1NHVvLIrKjyc=
Subject key identifier:   BD:DF:EF:0A:1C:F2:03:8E:03:F3:AA:B4:F1:18:4A:8D:55:35:63:81
Certificate issuer:       /CN=FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97
Certificate serial:       02D2D4D14B046CDE5FBBAC0E3947B38069A2C592
Authority key identifier: FD:09:3A:D3:0F:DD:C7:28:0A:72:C5:D5:E1:61:4E:D3:4E:E8:CD:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa
Signing time:             Thu 04 Apr 2024 14:55:35 +0000
ROA not before:           Thu 04 Apr 2024 14:50:35 +0000
ROA not after:            Thu 03 Apr 2025 14:55:35 +0000
asID:                     273728
IP address blocks:        2804:8b5c:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d2:d4:d1:4b:04:6c:de:5f:bb:ac:0e:39:47:b3:80:69:a2:c5:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97
        Validity
            Not Before: Apr  4 14:50:35 2024 GMT
            Not After : Apr  3 14:55:35 2025 GMT
        Subject: CN=BDDFEF0A1CF2038E03F3AAB4F1184A8D55356381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:74:e4:08:4a:90:53:24:b8:93:f7:78:51:6b:
                    16:e8:0d:52:e8:a5:a2:5a:50:92:1b:b4:5f:d3:7f:
                    b6:77:12:3e:96:89:ce:0a:95:75:16:2c:5a:a7:bc:
                    5d:b0:65:b4:6b:92:a0:2c:fe:59:a3:22:c8:78:13:
                    68:d7:9d:7b:74:d4:ef:f6:ee:1d:6c:f4:d7:17:3f:
                    8a:80:a3:a8:53:ca:87:f3:d6:36:52:59:27:17:3f:
                    c0:f4:bc:9a:8e:a0:96:96:50:dd:a5:40:65:87:77:
                    06:9b:9c:2b:3c:f7:f2:09:e9:01:76:62:b6:4b:50:
                    07:df:c6:c9:fb:5e:9c:46:6b:d3:12:0d:39:7f:0e:
                    86:30:f7:de:1c:2a:7f:44:e6:d5:36:91:db:0b:25:
                    2c:ff:f9:90:59:53:32:e7:71:13:61:60:ac:bd:01:
                    5a:50:52:22:33:f5:5d:ea:99:58:fc:33:5d:e5:b8:
                    d2:d0:fd:0c:86:fa:6d:d5:ce:c0:53:c1:03:67:72:
                    df:85:7a:9e:84:ab:37:53:8e:bb:63:6f:41:db:0c:
                    1c:a9:f9:30:aa:71:67:d9:a5:78:5a:f6:e3:7b:29:
                    ab:eb:9d:ea:ad:28:f2:61:1e:d0:19:3b:a9:36:01:
                    c4:f8:fb:22:6a:41:6a:bc:ed:36:d4:cd:1c:68:ec:
                    81:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DF:EF:0A:1C:F2:03:8E:03:F3:AA:B4:F1:18:4A:8D:55:35:63:81
            X509v3 Authority Key Identifier:
                keyid:FD:09:3A:D3:0F:DD:C7:28:0A:72:C5:D5:E1:61:4E:D3:4E:E8:CD:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         56:de:48:fd:25:1b:1e:9a:8f:47:db:76:92:7b:38:2f:d1:45:
         3a:ce:58:4c:19:4e:d1:37:b2:f1:85:b4:cc:f9:04:0f:0d:54:
         4a:fb:00:09:f8:2b:51:37:37:fe:5f:b6:cf:20:5b:b3:30:a4:
         61:71:37:6c:fa:5d:4f:d7:5a:16:a1:d5:7e:18:81:1e:2f:2b:
         85:1f:e6:2b:43:92:c0:c3:5d:fb:81:3f:ce:52:86:99:9d:95:
         8b:7e:86:83:85:01:61:f7:03:30:7e:f8:de:5d:d1:4b:a6:c7:
         71:33:f1:5b:78:49:f4:f6:28:3c:e7:d6:d0:e7:5d:66:e4:5d:
         a1:8d:d4:ec:e4:70:d4:b4:00:68:af:64:38:9a:bc:0e:63:e7:
         98:60:65:5f:c5:e3:ad:fa:d3:1b:de:bd:5c:fa:b6:30:d7:46:
         62:9e:3e:3b:82:86:3c:88:a2:e5:26:c1:f0:8b:48:14:62:bf:
         36:a4:ec:22:76:f7:93:3f:01:4c:a1:7e:94:59:37:ad:ec:30:
         c0:b7:1f:83:f5:f2:af:c1:b1:d6:3c:f3:c3:8f:f4:7b:1a:92:
         db:78:9e:0c:77:c2:96:f1:13:26:40:6a:1b:47:64:f1:15:84:
         9f:87:35:03:95:5d:c7:19:1a:08:ef:81:39:54:ee:07:b1:ff:
         9d:52:f9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 14:50:05 2024 by rpki-client on console-ams.rpki-client.org