Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/323830343a386235633a3a2f33342d3334203d3e20323733373238.roa
File:                     323830343a386235633a3a2f33342d3334203d3e20323733373238.roa (raw, json)
Hash identifier:          GWK+FjnB7L5UQNuvaZwemI/f6XrBlJN53e+xPg0Mev4=
Subject key identifier:   EE:6A:D8:A6:34:AB:B4:3B:53:29:0C:FF:B1:EF:C8:D5:AE:D0:37:FC
Certificate issuer:       /CN=FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97
Certificate serial:       0D74E99A16CC6B7B78B777C7422E890C489270F9
Authority key identifier: FD:09:3A:D3:0F:DD:C7:28:0A:72:C5:D5:E1:61:4E:D3:4E:E8:CD:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/323830343a386235633a3a2f33342d3334203d3e20323733373238.roa
Signing time:             Thu 04 Apr 2024 14:55:37 +0000
ROA not before:           Thu 04 Apr 2024 14:50:37 +0000
ROA not after:            Thu 03 Apr 2025 14:55:37 +0000
asID:                     273728
IP address blocks:        2804:8b5c::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:74:e9:9a:16:cc:6b:7b:78:b7:77:c7:42:2e:89:0c:48:92:70:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97
        Validity
            Not Before: Apr  4 14:50:37 2024 GMT
            Not After : Apr  3 14:55:37 2025 GMT
        Subject: CN=EE6AD8A634ABB43B53290CFFB1EFC8D5AED037FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:22:4a:73:08:19:2d:27:89:8d:53:24:b7:8a:
                    e0:05:ef:9f:eb:81:75:cf:eb:23:cb:2a:74:f4:29:
                    68:0f:ab:25:48:27:4b:a1:65:64:c1:a1:f3:2e:96:
                    77:20:a4:f1:0a:f7:2e:09:ce:64:96:3c:57:b4:b6:
                    84:31:a3:9a:ae:1b:25:f0:0c:61:62:8d:b1:ce:4d:
                    a9:97:b5:39:cb:48:f0:5c:d1:53:56:e4:98:02:7c:
                    60:c7:07:be:18:a9:b5:f0:7d:18:1f:ca:cd:f2:d6:
                    a0:75:37:63:9d:73:5d:f2:f6:db:29:42:d7:d6:db:
                    f1:5f:ee:05:9f:c5:52:65:8f:1d:02:05:bb:85:93:
                    1f:5b:5b:34:32:c7:b7:de:ce:98:e3:ef:ff:d8:98:
                    22:f9:1e:d1:73:26:8c:50:7d:a8:19:03:2f:bb:38:
                    d4:1f:9c:cf:da:63:d2:7c:eb:de:00:0d:bc:0f:7f:
                    7a:44:e8:48:18:64:a9:62:c3:a1:2c:7c:6b:43:49:
                    a6:b3:01:82:70:35:ce:16:6a:bd:39:1a:01:29:52:
                    ca:75:26:0f:0b:33:77:38:f0:29:15:e4:5b:6d:1a:
                    3c:0f:61:c3:10:ae:82:8b:5c:e8:94:e1:54:7e:5d:
                    af:7e:17:61:6a:73:8a:d7:96:a4:50:1d:14:26:09:
                    42:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6A:D8:A6:34:AB:B4:3B:53:29:0C:FF:B1:EF:C8:D5:AE:D0:37:FC
            X509v3 Authority Key Identifier:
                keyid:FD:09:3A:D3:0F:DD:C7:28:0A:72:C5:D5:E1:61:4E:D3:4E:E8:CD:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/323830343a386235633a3a2f33342d3334203d3e20323733373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c::/34

    Signature Algorithm: sha256WithRSAEncryption
         48:07:5f:c9:5e:ba:60:2b:92:db:5a:f4:87:d9:13:af:44:1f:
         ea:7d:bf:25:e6:1d:56:30:56:f0:c3:27:8c:00:d5:64:79:43:
         9f:e3:f7:0d:68:c3:26:ba:d7:2b:b3:14:cb:25:73:1a:a1:14:
         1f:26:e2:17:70:cf:92:89:71:51:71:d3:d9:cf:2a:81:8c:b3:
         5a:14:f2:c9:7b:97:52:2f:1b:cf:f8:4a:2f:9b:0c:30:9f:13:
         27:12:a6:3c:47:11:48:a4:40:ee:a0:71:a3:1b:f2:2d:5b:82:
         eb:1a:da:e5:6b:7d:7d:e2:0e:ef:93:9d:76:6d:eb:f1:ab:17:
         61:e9:1c:48:d7:c1:7f:50:36:df:a7:55:b3:e8:b2:57:59:e9:
         d8:d2:1b:1f:eb:1c:55:29:f7:bd:4d:ba:e3:70:ce:67:f8:12:
         35:da:b6:7b:27:9f:68:06:90:b0:68:8c:ef:ef:e6:ed:ea:9e:
         5b:3a:57:14:ed:fe:aa:d6:36:54:63:33:ab:bc:28:1d:4f:74:
         f8:2a:2d:11:03:e1:76:b4:96:2e:92:19:38:a6:60:02:46:5c:
         a6:c6:85:26:91:ab:fc:ad:5c:3f:80:9a:2f:26:b4:90:25:cd:
         8a:a4:3a:5c:89:9f:0d:85:be:ca:b2:57:7f:e4:68:4b:aa:99:
         f3:54:13:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 14:50:05 2024 by rpki-client on console-ams.rpki-client.org