Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a616530303a3a2f34302d3430203d3e20323638373037.roa
File:                     323830343a353938343a616530303a3a2f34302d3430203d3e20323638373037.roa (raw, json)
Hash identifier:          vXdZa367Ob9SATMkTC4kjPxB8oUC9JAo5e1OCPYOnMw=
Subject key identifier:   E0:55:BC:F1:11:B0:0C:B1:AD:1D:85:E0:81:18:D5:B0:91:D7:26:A5
Certificate issuer:       /CN=5AC8759123B17EF922F441C2EC527CCA9757CB30
Certificate serial:       78E9F1C460D46CABFC7C12A30B510B3A5E2F44C8
Authority key identifier: 5A:C8:75:91:23:B1:7E:F9:22:F4:41:C2:EC:52:7C:CA:97:57:CB:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AC8759123B17EF922F441C2EC527CCA9757CB30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a616530303a3a2f34302d3430203d3e20323638373037.roa
Signing time:             Wed 27 Sep 2023 13:15:30 +0000
ROA not before:           Wed 27 Sep 2023 13:10:30 +0000
ROA not after:            Wed 25 Sep 2024 13:15:30 +0000
asID:                     268707
IP address blocks:        2804:5984:ae00::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e9:f1:c4:60:d4:6c:ab:fc:7c:12:a3:0b:51:0b:3a:5e:2f:44:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC8759123B17EF922F441C2EC527CCA9757CB30
        Validity
            Not Before: Sep 27 13:10:30 2023 GMT
            Not After : Sep 25 13:15:30 2024 GMT
        Subject: CN=E055BCF111B00CB1AD1D85E08118D5B091D726A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1a:ee:a8:b1:c2:8e:80:48:a1:d4:af:3b:3a:
                    9b:ea:8d:f8:a3:69:e8:0e:c1:fe:c8:a0:d6:d7:56:
                    36:dc:b7:4e:5b:af:b9:03:1a:5d:69:3b:53:ae:04:
                    43:43:ef:98:2d:65:ab:23:aa:09:71:91:ad:3a:59:
                    d9:31:10:14:94:96:c5:ac:5d:f1:5b:28:ac:09:80:
                    b9:a3:2c:ee:35:ae:d8:a6:c8:74:62:33:76:37:f3:
                    f1:74:e4:0d:55:ea:02:ce:e6:ca:a4:5d:9b:12:29:
                    3c:45:6c:86:4c:0a:8e:f5:4e:3e:2a:fd:28:d1:70:
                    e8:29:3c:ea:82:7c:2f:e0:21:ec:65:ff:fa:ca:79:
                    4e:a8:3b:40:8e:e5:8f:3f:83:1d:2a:bd:2f:f3:85:
                    71:22:b0:c3:33:ec:2b:f1:8b:23:6e:8b:24:fe:3f:
                    30:3a:c4:98:35:c2:f7:fe:d6:e3:be:99:e4:00:47:
                    83:14:76:59:97:dd:24:8d:ba:46:5f:20:96:03:c8:
                    2c:b5:75:cb:e9:f3:e3:1d:d3:32:26:10:65:36:43:
                    84:e1:84:fc:06:45:d8:40:92:0e:54:80:5b:20:b7:
                    57:94:fa:a6:0e:6b:4e:2a:45:4b:90:2f:ea:b7:c8:
                    a5:68:b1:aa:ce:a1:b8:d1:cd:9d:19:14:08:84:1f:
                    c9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:55:BC:F1:11:B0:0C:B1:AD:1D:85:E0:81:18:D5:B0:91:D7:26:A5
            X509v3 Authority Key Identifier:
                keyid:5A:C8:75:91:23:B1:7E:F9:22:F4:41:C2:EC:52:7C:CA:97:57:CB:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/5AC8759123B17EF922F441C2EC527CCA9757CB30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AC8759123B17EF922F441C2EC527CCA9757CB30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a616530303a3a2f34302d3430203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984:ae00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b4:fd:5f:64:9d:2b:39:8f:1b:7f:1a:e3:1d:eb:cd:c1:11:28:
         c3:35:55:ed:45:2e:ee:70:d9:ea:06:7c:24:9d:e8:74:d3:4e:
         33:ab:8f:40:f8:e5:45:bb:fc:e3:fa:61:c3:06:ad:8c:8a:96:
         7e:a5:85:69:78:65:db:23:34:f3:b6:3d:d0:96:c8:44:31:d5:
         96:f0:56:97:5f:12:cc:46:8b:59:9a:1b:db:0b:97:ee:bc:15:
         e8:da:a4:2b:eb:0b:ad:55:44:38:15:c6:cf:4e:32:db:30:7d:
         4c:6f:4a:6f:b7:5e:2f:18:f7:b6:9e:0e:b2:c0:f4:a1:53:ce:
         16:10:6e:26:f2:47:b7:e0:66:2e:76:f2:3f:27:6b:86:df:36:
         56:4f:2d:0a:5b:53:f6:e0:1d:38:9a:32:ad:0d:92:bc:fb:aa:
         4c:24:e7:21:f5:3c:0e:9a:93:3d:a4:d7:32:00:d8:0a:d4:58:
         c0:67:51:4b:b4:ae:30:5a:ec:4c:aa:bc:e5:e9:dd:ab:dc:2b:
         10:64:ba:1f:8b:10:ed:86:83:24:03:1c:25:dc:d1:01:94:bf:
         52:7f:75:4c:3b:97:31:26:ae:cb:78:63:1b:32:a9:2d:2c:88:
         63:3a:15:36:0a:85:05:65:ec:36:07:21:af:91:90:28:95:61:
         14:1a:95:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:32 2024 by rpki-client on console.sobornost.net