Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/1/323830343a316137633a3a2f33322d3334203d3e203631383632.roa
File:                     323830343a316137633a3a2f33322d3334203d3e203631383632.roa (raw, json)
Hash identifier:          tMqHRVT7WZisgQQ/IyNR+KLXVUsmJKTf+KveY8JC7Zw=
Subject key identifier:   11:09:B1:29:9F:E9:41:96:A6:75:7F:92:A6:51:E9:ED:F7:34:23:10
Certificate issuer:       /CN=82C0DCA453DA0149230AB20FF5CF0E95CD577E8B
Certificate serial:       0FA16EA398E384798FDEA4440A942417083AC46B
Authority key identifier: 82:C0:DC:A4:53:DA:01:49:23:0A:B2:0F:F5:CF:0E:95:CD:57:7E:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82C0DCA453DA0149230AB20FF5CF0E95CD577E8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/1/323830343a316137633a3a2f33322d3334203d3e203631383632.roa
Signing time:             Thu 04 Apr 2024 02:19:01 +0000
ROA not before:           Thu 04 Apr 2024 02:14:01 +0000
ROA not after:            Thu 03 Apr 2025 02:19:01 +0000
asID:                     61862
IP address blocks:        2804:1a7c::/32 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a1:6e:a3:98:e3:84:79:8f:de:a4:44:0a:94:24:17:08:3a:c4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82C0DCA453DA0149230AB20FF5CF0E95CD577E8B
        Validity
            Not Before: Apr  4 02:14:01 2024 GMT
            Not After : Apr  3 02:19:01 2025 GMT
        Subject: CN=1109B1299FE94196A6757F92A651E9EDF7342310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:7a:07:2c:2b:5d:c6:db:64:ba:c2:45:d3:1d:
                    45:04:10:d2:75:5a:9b:4b:a6:e3:5c:21:33:99:dc:
                    eb:cf:cc:52:06:42:ee:59:34:ab:4e:88:9d:51:d6:
                    d2:74:8f:6e:fd:ab:c7:ac:2f:3e:e7:1f:ea:3c:d4:
                    54:85:a8:85:4d:92:43:5c:65:4d:8b:e0:03:f5:2e:
                    96:f3:3c:83:a5:c6:1a:60:57:db:4f:5e:fc:d6:5b:
                    26:8c:4d:a2:72:90:09:e5:ff:8c:e1:86:a2:04:b2:
                    68:5a:9d:be:d4:bc:c0:6c:13:0a:29:9f:50:f5:50:
                    2f:d7:66:0d:ab:22:a4:b1:b3:b6:d4:e5:0e:bf:c2:
                    db:0d:43:c8:92:2a:e1:8a:1c:35:5e:9d:47:37:db:
                    ea:52:39:48:a1:5b:5f:40:66:90:06:65:d1:7e:96:
                    a5:04:b1:28:2d:1e:6d:0d:20:4c:81:7f:0c:17:17:
                    6b:9a:cd:81:f9:9c:a4:b7:39:0a:1a:39:81:30:99:
                    b2:d9:91:66:e1:c6:ed:13:48:05:8e:53:f2:6c:3c:
                    dc:89:5a:ec:d3:55:f8:1b:81:c1:c6:79:3c:54:7b:
                    66:cb:59:79:08:d4:66:d9:23:95:88:1a:b3:ce:07:
                    46:ed:a6:c7:48:42:ba:7f:ae:c0:94:e9:80:ba:e9:
                    e8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:09:B1:29:9F:E9:41:96:A6:75:7F:92:A6:51:E9:ED:F7:34:23:10
            X509v3 Authority Key Identifier:
                keyid:82:C0:DC:A4:53:DA:01:49:23:0A:B2:0F:F5:CF:0E:95:CD:57:7E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/1/82C0DCA453DA0149230AB20FF5CF0E95CD577E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82C0DCA453DA0149230AB20FF5CF0E95CD577E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/1/323830343a316137633a3a2f33322d3334203d3e203631383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:46:36:a3:8e:a9:87:81:e7:66:c0:20:ab:ea:e9:07:f4:2a:
         1c:09:d5:cf:c5:a1:80:9d:ad:42:ac:d8:b4:1d:07:a0:47:51:
         2c:0f:28:81:0f:32:31:97:d1:b5:d9:ac:c0:6f:ce:da:d7:7c:
         0b:62:67:8a:80:0d:b5:56:54:c5:5d:bc:cc:c8:fa:20:a6:b7:
         89:3a:01:15:69:02:8c:bf:f2:65:be:56:49:f1:e6:a9:a4:a4:
         b0:7a:79:ef:7d:4a:9d:5a:0f:8c:02:22:72:47:a7:db:4a:9b:
         83:e9:e2:05:5e:08:e0:8a:2f:b7:c3:46:d7:a7:78:99:ee:ae:
         32:16:37:0b:37:d2:48:a4:2e:21:7c:1b:ba:7f:f7:04:c1:4c:
         dd:b0:41:81:9d:c7:92:68:15:b7:da:5d:47:f3:eb:c9:15:48:
         f2:44:41:96:a8:ec:0c:e2:33:c3:4d:d2:5a:74:c3:ee:cc:cc:
         39:09:46:2d:a5:d9:6e:60:2f:04:16:2a:f2:a0:be:02:96:ef:
         be:3d:92:30:3d:a8:b4:92:43:59:d7:cd:b3:2a:a8:41:60:e4:
         24:b3:91:fc:d2:ac:54:75:a5:5e:4d:ff:94:bc:83:bd:a1:92:
         0e:9b:39:3e:8e:8e:3d:d7:72:87:6c:1c:d9:9f:d0:6c:8c:b4:
         8a:0e:85:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 04:40:55 2024 by rpki-client on console-fra.rpki-client.org