Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/1/323830343a313233303a3a2f33322d3332203d3e20323633343632.roa
File:                     323830343a313233303a3a2f33322d3332203d3e20323633343632.roa (raw, json)
Hash identifier:          hrEOj12N8u24XCbbTI9i5VkjaM64LhhetWAcEZsQrGM=
Subject key identifier:   57:91:CB:7A:23:FE:97:E5:AE:58:2E:FE:D8:1A:6B:81:77:88:33:6E
Certificate issuer:       /CN=AB9F9158B8623535AF95D0D282ACBB1552914A4E
Certificate serial:       78181DA0A2AF4B3C48C79727097F7D463D5A4BB4
Authority key identifier: AB:9F:91:58:B8:62:35:35:AF:95:D0:D2:82:AC:BB:15:52:91:4A:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9F9158B8623535AF95D0D282ACBB1552914A4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/1/323830343a313233303a3a2f33322d3332203d3e20323633343632.roa
Signing time:             Thu 04 Apr 2024 11:03:45 +0000
ROA not before:           Thu 04 Apr 2024 10:58:45 +0000
ROA not after:            Thu 03 Apr 2025 11:03:45 +0000
asID:                     263462
IP address blocks:        2804:1230::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:18:1d:a0:a2:af:4b:3c:48:c7:97:27:09:7f:7d:46:3d:5a:4b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB9F9158B8623535AF95D0D282ACBB1552914A4E
        Validity
            Not Before: Apr  4 10:58:45 2024 GMT
            Not After : Apr  3 11:03:45 2025 GMT
        Subject: CN=5791CB7A23FE97E5AE582EFED81A6B817788336E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c0:fe:ec:ec:ab:4d:cc:81:e8:16:90:2a:65:
                    43:91:d1:61:7b:3b:bb:fc:cf:3a:a1:a8:a7:88:9c:
                    d7:9a:16:3d:1c:25:17:33:39:d8:78:6c:84:f3:4d:
                    95:49:34:17:dd:8a:7b:18:2a:0c:fd:fa:12:0e:54:
                    82:dc:ef:c0:a6:5f:53:08:9b:02:4c:5f:a9:72:48:
                    ad:91:85:2f:be:ab:05:dc:d7:aa:2e:c0:95:09:27:
                    98:53:62:18:93:21:b8:53:78:f4:26:7f:3a:fc:38:
                    b6:65:89:0a:4f:58:8f:4e:0c:07:59:a4:6f:45:89:
                    81:b4:d7:4d:cd:5c:30:b3:2d:8b:ca:c7:43:c7:10:
                    4b:e0:eb:93:a9:75:f4:51:c8:7d:d9:70:46:d1:0d:
                    95:17:e6:4f:46:2b:e4:48:dc:01:4e:a7:79:71:1c:
                    ed:4e:7e:12:8c:24:9a:c5:4b:b3:56:af:25:63:cf:
                    e8:c0:58:58:44:9d:93:a9:27:bf:4d:71:b2:45:78:
                    dd:a1:9c:4c:72:93:83:47:b0:03:b5:a2:de:18:91:
                    3f:01:60:de:6e:ba:a5:d4:90:5f:84:3b:40:f2:11:
                    92:11:aa:d1:c1:e1:3d:9c:d9:e5:54:7d:24:6b:4c:
                    02:6f:5a:14:0e:8b:9c:71:9f:69:b7:68:05:b8:98:
                    87:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:91:CB:7A:23:FE:97:E5:AE:58:2E:FE:D8:1A:6B:81:77:88:33:6E
            X509v3 Authority Key Identifier:
                keyid:AB:9F:91:58:B8:62:35:35:AF:95:D0:D2:82:AC:BB:15:52:91:4A:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/1/AB9F9158B8623535AF95D0D282ACBB1552914A4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9F9158B8623535AF95D0D282ACBB1552914A4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/1/323830343a313233303a3a2f33322d3332203d3e20323633343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1230::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:e7:03:52:a6:87:02:52:74:4e:4f:dd:8d:58:18:cf:c9:5c:
         f6:49:b2:b7:6b:88:3e:b2:26:31:cd:89:95:ed:fd:da:ae:26:
         78:b5:07:5c:a0:46:7e:a8:bd:e0:22:e7:1e:e4:67:52:3d:97:
         43:9b:40:ad:a0:4a:59:5d:69:64:e5:ae:e6:aa:f2:a7:a8:ac:
         0b:24:97:5f:f6:e5:ea:ea:2c:a7:74:31:fd:54:ec:86:84:da:
         3e:69:fb:2c:4e:1b:f2:3a:e2:f8:33:e3:85:0d:f9:c8:de:b3:
         b4:29:49:78:9d:12:84:4d:13:57:f2:43:77:31:c4:81:cf:ee:
         1a:bb:52:8a:a8:c9:aa:a8:5c:3e:06:16:c9:78:9e:bd:76:f0:
         6c:38:76:a1:75:87:9b:a1:0c:a0:40:3b:db:f8:f3:ae:c4:bc:
         e1:8a:c1:9d:d4:95:99:ca:8e:d4:18:ad:22:e4:20:11:26:9a:
         df:56:cb:d6:09:ab:78:ba:d5:04:13:f7:0a:f4:47:8d:f6:cd:
         e9:b9:8c:58:c6:a2:b9:6d:df:d9:96:9e:c3:22:98:e6:32:93:
         bd:95:d2:a3:56:97:f4:6d:1f:f8:b2:c1:04:82:1e:be:b1:75:
         11:e6:46:a4:b5:62:df:82:be:9d:c2:72:2e:d4:89:70:78:6f:
         9b:3c:da:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 11:18:42 2024 by rpki-client on console-fra.rpki-client.org