Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a3a2f33322d3438203d3e20323637343639.roa
File:                     323830343a343166383a3a2f33322d3438203d3e20323637343639.roa (raw, json)
Hash identifier:          K2cm+8m4fzT+gJLMy/ZJeQfnKhSe+1IrozwjbuqhQWs=
Subject key identifier:   0B:79:74:E5:43:81:96:8A:85:05:6A:41:7D:29:39:01:37:67:EB:FC
Certificate issuer:       /CN=AE40E98214ECBDAC0F3A759AED2DD76B1BA56B49
Certificate serial:       34C204B372E7287124F554017CE394E5D15C8868
Authority key identifier: AE:40:E9:82:14:EC:BD:AC:0F:3A:75:9A:ED:2D:D7:6B:1B:A5:6B:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE40E98214ECBDAC0F3A759AED2DD76B1BA56B49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a3a2f33322d3438203d3e20323637343639.roa
Signing time:             Tue 16 Apr 2024 19:26:22 +0000
ROA not before:           Tue 16 Apr 2024 19:21:22 +0000
ROA not after:            Tue 15 Apr 2025 19:26:22 +0000
asID:                     267469
IP address blocks:        2804:41f8::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c2:04:b3:72:e7:28:71:24:f5:54:01:7c:e3:94:e5:d1:5c:88:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE40E98214ECBDAC0F3A759AED2DD76B1BA56B49
        Validity
            Not Before: Apr 16 19:21:22 2024 GMT
            Not After : Apr 15 19:26:22 2025 GMT
        Subject: CN=0B7974E54381968A85056A417D2939013767EBFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:04:5b:cc:1b:90:fd:b9:87:16:54:8b:83:3c:
                    92:71:40:07:6d:b9:33:10:11:26:55:c5:f8:b2:46:
                    fe:97:e5:c8:02:09:32:82:85:2a:93:73:ce:a7:4c:
                    fb:a1:af:4c:db:c2:71:75:90:48:30:7b:de:2c:0a:
                    f8:ae:5d:72:1c:d9:ee:e4:35:e8:63:49:2a:e9:90:
                    89:85:3d:39:44:5c:e1:6b:ef:68:8c:8d:c2:f7:72:
                    31:3a:59:c4:a4:a4:4d:a7:c0:9e:ca:51:00:17:de:
                    69:ee:f3:47:b4:02:d5:d0:8a:ec:7a:f0:15:a9:fc:
                    25:39:53:c7:ec:c2:d5:a3:e4:cd:b8:54:8b:10:61:
                    06:b2:15:65:1f:63:21:6e:d3:07:50:17:d1:d3:5a:
                    c3:19:e2:ce:65:57:7e:da:73:d1:a7:f8:ee:f4:ea:
                    e4:b1:6c:bb:97:4c:fe:c6:e9:8d:b4:c6:a5:45:a6:
                    6a:e4:f2:b2:e5:bd:37:c2:dc:7b:31:8c:81:2d:a5:
                    d9:4a:27:5f:04:30:5a:cf:04:ed:f4:6f:a6:1e:c6:
                    01:a1:33:b7:15:0d:35:3c:87:64:bf:9c:62:e9:df:
                    98:8b:b5:8b:e1:39:c4:cf:29:90:65:8a:a9:09:80:
                    a0:27:3f:0e:d6:83:89:0b:98:53:fc:61:5d:f2:0c:
                    d7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:79:74:E5:43:81:96:8A:85:05:6A:41:7D:29:39:01:37:67:EB:FC
            X509v3 Authority Key Identifier:
                keyid:AE:40:E9:82:14:EC:BD:AC:0F:3A:75:9A:ED:2D:D7:6B:1B:A5:6B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/AE40E98214ECBDAC0F3A759AED2DD76B1BA56B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE40E98214ECBDAC0F3A759AED2DD76B1BA56B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a3a2f33322d3438203d3e20323637343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         dc:63:35:4d:57:b7:67:d0:72:72:ff:4d:8d:63:ce:5d:7e:95:
         7b:56:b7:08:21:99:03:5a:68:bb:bf:76:0c:f9:0c:57:e9:92:
         c8:08:35:8d:fa:ed:4f:e9:15:8b:c3:36:3a:66:c9:a8:38:8d:
         cb:d8:72:41:66:26:75:cc:ed:68:e6:c2:c6:00:a6:c3:e4:33:
         f0:c7:93:0c:17:08:17:af:bd:c9:8d:58:b4:4a:1b:1c:96:df:
         50:82:da:f4:7d:8d:27:c8:10:8e:58:b4:bd:57:e2:5b:f8:af:
         d2:0b:95:19:cc:dc:48:9d:b4:5e:b9:84:05:5d:56:59:c4:6f:
         19:14:4c:c4:5a:a8:45:0a:56:33:49:36:d9:1d:0c:5c:ed:fe:
         a3:f2:c6:f8:58:32:c1:36:45:25:aa:27:f2:fa:12:ac:1a:4a:
         0a:d4:93:27:97:c2:1b:ee:3d:9d:bb:ec:00:2e:45:79:05:b3:
         82:77:7f:94:d2:f5:1c:a1:41:42:b9:d2:5b:49:30:08:4e:54:
         4a:0e:98:40:d0:30:52:94:6e:71:e6:f0:ad:e1:37:bb:3b:3b:
         a6:41:d0:33:b7:b4:75:f9:fe:5f:20:80:e9:5d:cb:ea:ed:c9:
         50:4d:b3:e9:e4:81:c5:9c:24:f7:3b:14:97:d8:50:0b:52:c5:
         76:3e:2e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 08:59:50 2024 by rpki-client on console-fra.rpki-client.org