Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/323830343a353330303a3a2f33322d3332203d3e20323638353536.roa
File:                     323830343a353330303a3a2f33322d3332203d3e20323638353536.roa (raw, json)
Hash identifier:          L7M7F568lJdgEOIYv398AxcwlvogQ2FlLBj4MWzUmcU=
Subject key identifier:   51:27:47:6A:05:F1:00:D2:AD:0B:1F:49:33:55:B9:22:6D:40:F2:40
Certificate issuer:       /CN=69FFE860858DE937FD8B0BA5FB8EF9A487532749
Certificate serial:       19E9AFDAC6EC0166182F11DAFB9BE7375EF10220
Authority key identifier: 69:FF:E8:60:85:8D:E9:37:FD:8B:0B:A5:FB:8E:F9:A4:87:53:27:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FFE860858DE937FD8B0BA5FB8EF9A487532749.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/323830343a353330303a3a2f33322d3332203d3e20323638353536.roa
Signing time:             Mon 24 Jun 2024 12:14:24 +0000
ROA not before:           Mon 24 Jun 2024 12:09:24 +0000
ROA not after:            Mon 23 Jun 2025 12:14:24 +0000
asID:                     268556
IP address blocks:        2804:5300::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e9:af:da:c6:ec:01:66:18:2f:11:da:fb:9b:e7:37:5e:f1:02:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FFE860858DE937FD8B0BA5FB8EF9A487532749
        Validity
            Not Before: Jun 24 12:09:24 2024 GMT
            Not After : Jun 23 12:14:24 2025 GMT
        Subject: CN=5127476A05F100D2AD0B1F493355B9226D40F240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f5:e0:6c:13:ce:1d:d0:6b:83:e3:5f:15:77:
                    36:99:fd:f6:e4:1d:2a:3c:6c:4f:db:2d:10:af:ef:
                    96:0d:ea:bf:c4:f2:46:83:b3:68:80:88:96:c9:74:
                    0e:1e:78:27:fe:b0:55:82:07:9d:1b:ca:25:f4:e4:
                    32:e7:09:16:41:4f:92:d7:f4:31:0a:86:71:45:d6:
                    fa:d1:e9:f6:2d:58:b3:de:ed:cc:62:fe:a4:69:66:
                    ba:66:ce:eb:0d:ae:e4:7f:a5:ed:e2:4a:2b:8e:6f:
                    90:88:b6:0c:a5:45:ed:87:90:0e:53:df:f8:1e:32:
                    ce:ae:2c:43:18:90:70:bf:7d:53:5d:95:f9:13:d0:
                    e3:0d:64:2b:ef:4c:09:c4:aa:55:f0:e3:07:79:52:
                    57:15:bb:82:60:10:3e:8d:84:87:ab:89:d1:f9:b4:
                    05:49:2d:a4:7b:6c:72:c4:d2:75:02:5e:6c:48:a3:
                    aa:09:a6:cd:38:78:b3:25:62:18:85:59:56:4b:5c:
                    01:2a:73:af:85:2a:df:be:6d:6f:3d:cb:a1:f1:a5:
                    79:16:23:ed:6c:b2:e1:c9:f4:19:d4:a6:43:34:76:
                    99:c8:b8:76:8b:96:c5:c4:0e:a0:c0:9d:13:d8:3e:
                    50:9f:0b:5d:1f:c4:77:05:2f:ea:67:2c:2c:0c:38:
                    d6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:27:47:6A:05:F1:00:D2:AD:0B:1F:49:33:55:B9:22:6D:40:F2:40
            X509v3 Authority Key Identifier:
                keyid:69:FF:E8:60:85:8D:E9:37:FD:8B:0B:A5:FB:8E:F9:A4:87:53:27:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/69FFE860858DE937FD8B0BA5FB8EF9A487532749.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FFE860858DE937FD8B0BA5FB8EF9A487532749.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/323830343a353330303a3a2f33322d3332203d3e20323638353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5300::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:4b:48:96:d2:d6:2d:70:37:14:07:c9:02:be:f8:b7:df:d6:
         58:8f:e4:d8:eb:67:d8:f4:22:ec:1a:9e:50:21:51:b2:2a:f3:
         bb:32:22:a9:dc:b1:d3:cd:38:8e:b0:e5:cd:e8:fe:35:cb:5e:
         2a:3b:fe:82:5d:a3:02:01:82:3f:54:c2:f9:86:0c:e1:d3:a4:
         c3:a7:d5:9f:c2:b3:a0:d0:f1:40:0e:d0:9b:6d:b7:40:d6:fb:
         29:c0:4a:13:ef:71:97:a5:b6:45:53:91:9c:c0:9a:9c:eb:f8:
         9d:ca:1c:20:ba:2a:a1:7b:48:dc:b9:8d:91:e7:d2:b6:89:2c:
         b2:7b:5e:44:22:27:98:17:f8:9c:d6:de:3b:ea:f5:a2:b3:e3:
         d1:1e:80:1e:a8:ea:37:74:67:69:45:a1:7f:a9:f3:10:1e:d9:
         86:e0:e5:a2:c7:93:9e:30:c8:b4:f1:3b:91:97:18:6d:4a:db:
         d1:5e:d1:f8:2f:75:2f:47:ed:17:6b:de:06:af:7f:77:cf:65:
         90:bf:54:07:a9:be:d0:4f:50:8d:0e:2c:e0:60:ee:88:c5:55:
         38:4d:88:64:db:ea:b9:41:6b:80:39:82:56:30:2a:90:e7:87:
         f2:94:2f:6d:cf:7e:f6:04:d5:af:53:14:66:51:7b:77:60:67:
         60:a7:d8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 16:30:41 2024 by rpki-client on console-ams.rpki-client.org