Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/1/323830343a313233303a3a2f33352d3335203d3e20323633343632.roa
File:                     323830343a313233303a3a2f33352d3335203d3e20323633343632.roa (raw, json)
Hash identifier:          WGO3HT3WHNi/2bthmV+AtwERxDExG0IofvjoelxCjyA=
Subject key identifier:   91:5D:87:FF:3B:08:CA:7E:B8:78:59:C8:31:83:2D:D9:86:65:DC:54
Certificate issuer:       /CN=AB9F9158B8623535AF95D0D282ACBB1552914A4E
Certificate serial:       4E0F358BF089814DDC6F6AEE4D597378607DE800
Authority key identifier: AB:9F:91:58:B8:62:35:35:AF:95:D0:D2:82:AC:BB:15:52:91:4A:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9F9158B8623535AF95D0D282ACBB1552914A4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/1/323830343a313233303a3a2f33352d3335203d3e20323633343632.roa
Signing time:             Thu 04 Apr 2024 11:03:45 +0000
ROA not before:           Thu 04 Apr 2024 10:58:45 +0000
ROA not after:            Thu 03 Apr 2025 11:03:45 +0000
asID:                     263462
IP address blocks:        2804:1230::/35 maxlen: 35

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:0f:35:8b:f0:89:81:4d:dc:6f:6a:ee:4d:59:73:78:60:7d:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB9F9158B8623535AF95D0D282ACBB1552914A4E
        Validity
            Not Before: Apr  4 10:58:45 2024 GMT
            Not After : Apr  3 11:03:45 2025 GMT
        Subject: CN=915D87FF3B08CA7EB87859C831832DD98665DC54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:59:37:aa:c2:88:76:d8:b5:e5:f6:92:15:30:
                    37:2a:2d:95:39:c5:00:f2:6f:83:93:62:7b:5a:df:
                    e4:65:8c:65:45:99:8f:bf:e8:22:6a:06:aa:91:a6:
                    d5:7c:d2:ee:12:b6:ce:c7:98:a8:37:a1:dd:76:68:
                    78:c7:97:dc:1a:bd:63:99:16:91:5b:ce:f6:9f:74:
                    52:19:c1:c4:96:dc:b1:d5:66:a0:bd:bc:07:7a:43:
                    27:18:c7:21:a1:93:ea:27:f6:9d:00:5e:8a:77:9d:
                    21:e0:17:6f:1f:e3:e4:7c:70:f1:dc:0a:2c:b3:c4:
                    6a:b5:8d:c2:83:c5:6d:83:25:b6:34:38:ce:b5:1d:
                    a2:12:d2:21:97:6e:31:71:f4:51:ec:2c:73:7d:b8:
                    01:97:38:d4:5b:f5:e7:20:25:17:44:8f:9e:90:a2:
                    9f:53:ee:53:25:b7:d8:54:f6:bb:95:b8:66:70:99:
                    f1:ef:7b:11:5f:17:09:ed:10:3c:4d:b9:4b:77:3b:
                    92:e5:ea:c0:30:cf:33:52:70:04:4d:ca:cb:71:a6:
                    c4:e4:fa:a9:44:0c:f4:08:3c:41:d2:52:04:32:45:
                    ec:30:b2:96:e3:d3:98:ce:e5:af:e0:59:cc:ad:40:
                    e6:da:7e:b5:52:72:18:ab:ad:80:b1:9e:fd:b2:01:
                    c2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5D:87:FF:3B:08:CA:7E:B8:78:59:C8:31:83:2D:D9:86:65:DC:54
            X509v3 Authority Key Identifier:
                keyid:AB:9F:91:58:B8:62:35:35:AF:95:D0:D2:82:AC:BB:15:52:91:4A:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/1/AB9F9158B8623535AF95D0D282ACBB1552914A4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9F9158B8623535AF95D0D282ACBB1552914A4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/1/323830343a313233303a3a2f33352d3335203d3e20323633343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1230::/35

    Signature Algorithm: sha256WithRSAEncryption
         7d:af:14:df:2f:07:b3:22:b3:43:22:3a:b9:44:a4:e5:7e:72:
         e5:ea:15:cf:ce:49:9b:a5:ff:6b:7b:c6:2a:da:cf:63:bc:76:
         af:b0:cf:a3:db:6b:8d:51:71:fb:a7:3b:57:1b:d7:91:1b:11:
         9f:04:58:e9:a1:84:6f:d2:88:f5:e4:67:54:ed:85:21:a4:36:
         61:78:3c:57:e4:09:3a:32:0e:81:70:26:31:fb:0a:8f:9d:93:
         5d:68:7d:83:7d:7e:ab:73:2a:39:8c:b2:aa:f8:59:0a:eb:4f:
         e7:99:62:3c:81:75:3e:36:91:51:65:41:17:64:84:c5:f5:8b:
         ea:52:cc:1d:e5:4c:8a:47:25:56:b3:9b:50:c1:c9:89:b6:26:
         88:b4:48:00:e0:82:d1:2a:d4:49:6e:8a:78:e9:81:e4:69:51:
         12:9c:46:6a:a4:92:f5:5c:b6:a5:ac:77:26:f2:60:f1:4a:8f:
         c4:94:7a:b1:c0:e7:9b:53:9e:03:f7:ad:f7:38:9d:1b:86:de:
         4f:51:3d:61:4d:7e:3f:2f:b8:09:12:fd:58:2b:77:e4:e7:10:
         44:f3:81:b5:a6:71:bd:14:27:17:ea:ae:c9:f3:c0:4f:0b:6e:
         35:f8:d8:d6:b3:de:7f:9e:03:f6:c0:68:28:d4:9b:df:f2:7d:
         1e:a0:6c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 11:18:42 2024 by rpki-client on console-fra.rpki-client.org