Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/323830343a386235633a3a2f33332d3333203d3e20323733373238.roa
File:                     323830343a386235633a3a2f33332d3333203d3e20323733373238.roa (raw, json)
Hash identifier:          qfBKsaEt4y+WaeNjzwBOHM5KM9dh7o0l+n10AeS+un8=
Subject key identifier:   7B:F5:E5:28:48:83:FE:0E:06:D8:9B:C2:EC:BA:C0:AC:C6:94:C0:9D
Certificate issuer:       /CN=FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97
Certificate serial:       1DAE5564D0072D011B29F486C99F0B7DB74DF2F8
Authority key identifier: FD:09:3A:D3:0F:DD:C7:28:0A:72:C5:D5:E1:61:4E:D3:4E:E8:CD:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/323830343a386235633a3a2f33332d3333203d3e20323733373238.roa
Signing time:             Thu 04 Apr 2024 14:55:36 +0000
ROA not before:           Thu 04 Apr 2024 14:50:36 +0000
ROA not after:            Thu 03 Apr 2025 14:55:36 +0000
asID:                     273728
IP address blocks:        2804:8b5c::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ae:55:64:d0:07:2d:01:1b:29:f4:86:c9:9f:0b:7d:b7:4d:f2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97
        Validity
            Not Before: Apr  4 14:50:36 2024 GMT
            Not After : Apr  3 14:55:36 2025 GMT
        Subject: CN=7BF5E5284883FE0E06D89BC2ECBAC0ACC694C09D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:42:32:86:b7:81:9f:70:5a:2a:b1:85:39:ae:
                    1e:b8:95:47:37:e7:16:ec:d0:6c:e2:79:49:06:ec:
                    fb:ab:9d:c2:e9:b8:d0:d3:3a:5c:4c:47:96:36:b0:
                    c6:e5:b9:54:45:68:4b:da:c6:1d:d7:9b:34:53:5c:
                    07:a9:80:b0:26:33:42:4f:6c:c0:b9:f8:67:42:6a:
                    83:65:fb:62:b6:34:0a:fe:bd:9a:ec:3a:8d:fe:04:
                    75:ce:3c:bd:ca:52:7d:99:25:4d:cd:d6:c8:42:0a:
                    59:ba:52:97:01:3e:03:72:87:7a:55:98:58:89:de:
                    c2:a5:8b:d6:df:56:85:6e:e6:c3:ab:61:5d:a5:6b:
                    63:8b:30:62:ad:62:a3:d5:a6:ba:81:45:c5:f2:2c:
                    79:20:fd:1f:06:da:e3:53:78:ca:dd:a2:bb:78:d1:
                    0d:81:a8:a3:d1:01:6b:e3:69:1c:70:d0:61:c4:46:
                    6a:d1:91:21:8b:e6:a4:72:75:85:ff:07:8e:55:6c:
                    00:f0:8a:67:ad:26:53:11:a5:bf:5c:e3:e1:0d:bd:
                    5c:27:28:85:ae:79:49:46:b4:43:ce:9c:78:19:d9:
                    dd:0f:1e:d5:9e:e3:83:65:40:4f:19:cd:5d:d7:16:
                    de:6b:e4:fe:14:a7:5e:18:fd:ad:cd:0e:5a:7c:f0:
                    1b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F5:E5:28:48:83:FE:0E:06:D8:9B:C2:EC:BA:C0:AC:C6:94:C0:9D
            X509v3 Authority Key Identifier:
                keyid:FD:09:3A:D3:0F:DD:C7:28:0A:72:C5:D5:E1:61:4E:D3:4E:E8:CD:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/323830343a386235633a3a2f33332d3333203d3e20323733373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c::/33

    Signature Algorithm: sha256WithRSAEncryption
         79:bd:10:16:4e:ff:53:12:29:f7:bc:72:8e:de:08:02:84:8a:
         fe:a9:92:71:23:b3:79:eb:2e:ca:2f:9f:cb:e6:7e:36:c8:63:
         da:21:16:dd:bd:4d:ca:1e:fa:b0:68:a5:14:cc:00:65:ce:87:
         fd:5b:f6:11:c0:5f:75:79:41:49:f8:73:16:93:63:d9:16:09:
         90:dc:17:89:63:0d:ef:7b:7b:97:69:98:b6:e1:05:c2:83:70:
         d9:61:d6:54:91:00:98:6c:29:61:70:a4:3e:64:5c:7d:28:7e:
         ad:33:90:e5:4b:dc:b6:d8:52:68:8e:0a:4a:5b:40:31:37:5f:
         2d:9d:6e:f9:68:be:a2:39:9f:08:b7:a9:52:3d:aa:ea:bd:88:
         9b:1f:4f:67:0c:13:d1:94:5f:a6:b4:95:22:fe:95:31:80:e7:
         26:4c:d4:b5:b8:d8:74:26:61:c0:39:ec:e1:65:5d:f3:38:85:
         2c:a0:87:67:da:5b:f6:32:0d:2a:67:63:5b:41:09:af:4a:be:
         ee:c5:a7:28:d0:23:b0:1a:39:b6:5a:81:ce:1f:5d:4f:3f:50:
         cf:f5:f3:8e:84:b5:f4:34:8c:76:18:7b:0a:32:9a:ac:0e:34:
         2a:27:60:79:e7:4e:28:32:fc:9c:ae:4e:74:32:c8:07:19:c0:
         52:3a:ee:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 14:40:03 2024 by rpki-client on console-fra.rpki-client.org