Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Wf7Wq6KH1sCbxFeowfFcKipQEGbfjmMCzZJeGGL37eh/0/323830343a383735383a3a2f33322d3336203d3e20323732373033.roa
File:                     323830343a383735383a3a2f33322d3336203d3e20323732373033.roa (raw, json)
Hash identifier:          T2tUXHdwEKOaggrC/PcHTvHBZCozIH6jc1Bgi7y0fc8=
Subject key identifier:   70:81:A4:DA:FB:98:01:3F:A8:DF:88:42:E3:D0:21:74:29:D8:CD:34
Certificate issuer:       /CN=785AA2797D19E81643E557E04D46633D46CA5C81
Certificate serial:       499FC3A8850335AA2B632B352FD21C9D5F21AF41
Authority key identifier: 78:5A:A2:79:7D:19:E8:16:43:E5:57:E0:4D:46:63:3D:46:CA:5C:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785AA2797D19E81643E557E04D46633D46CA5C81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Wf7Wq6KH1sCbxFeowfFcKipQEGbfjmMCzZJeGGL37eh/0/323830343a383735383a3a2f33322d3336203d3e20323732373033.roa
Signing time:             Wed 10 Apr 2024 22:14:09 +0000
ROA not before:           Wed 10 Apr 2024 22:09:09 +0000
ROA not after:            Wed 09 Apr 2025 22:14:09 +0000
asID:                     272703
IP address blocks:        2804:8758::/32 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:9f:c3:a8:85:03:35:aa:2b:63:2b:35:2f:d2:1c:9d:5f:21:af:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785AA2797D19E81643E557E04D46633D46CA5C81
        Validity
            Not Before: Apr 10 22:09:09 2024 GMT
            Not After : Apr  9 22:14:09 2025 GMT
        Subject: CN=7081A4DAFB98013FA8DF8842E3D0217429D8CD34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1c:d3:28:81:90:97:ff:6a:5c:e9:ac:0e:06:
                    3e:0d:41:a4:3e:66:2c:4e:37:81:70:63:ba:d4:00:
                    cf:a7:f3:2b:5c:fb:5a:c4:9b:70:d0:a2:7a:f7:4b:
                    1f:00:c7:5e:db:b8:2b:d6:ef:e4:93:be:85:e8:f9:
                    a1:5e:a7:22:e8:1a:cd:38:91:d5:e8:91:68:94:64:
                    10:64:97:06:75:bd:ef:eb:c1:e5:f1:d5:07:9e:64:
                    e7:b2:0b:10:9c:2f:34:e8:d6:64:5f:e0:be:a6:a3:
                    66:ee:2d:2c:bc:f8:55:45:24:27:f3:a3:5b:b9:05:
                    d8:0a:ab:45:11:d8:51:e3:8c:ac:25:ad:c6:45:a0:
                    de:28:f3:dd:25:70:62:03:fc:67:f1:5d:51:62:59:
                    2a:ef:47:19:c5:34:e6:81:ea:4a:cd:58:d8:95:3d:
                    fa:27:20:34:7c:e9:9f:aa:ea:92:22:dc:6d:96:8a:
                    85:ab:8c:83:af:de:ba:a1:be:ac:31:28:ff:91:53:
                    14:e4:dd:da:0f:29:47:fa:90:24:4a:e7:20:ba:be:
                    3d:02:65:30:a0:52:f2:01:16:8f:17:f1:bb:50:b3:
                    85:9f:7d:f7:14:b9:f4:11:5b:90:f1:d5:89:3d:45:
                    70:e4:c3:b4:65:fa:58:a0:fe:71:3a:ec:19:23:29:
                    ac:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:81:A4:DA:FB:98:01:3F:A8:DF:88:42:E3:D0:21:74:29:D8:CD:34
            X509v3 Authority Key Identifier:
                keyid:78:5A:A2:79:7D:19:E8:16:43:E5:57:E0:4D:46:63:3D:46:CA:5C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Wf7Wq6KH1sCbxFeowfFcKipQEGbfjmMCzZJeGGL37eh/0/785AA2797D19E81643E557E04D46633D46CA5C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785AA2797D19E81643E557E04D46633D46CA5C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Wf7Wq6KH1sCbxFeowfFcKipQEGbfjmMCzZJeGGL37eh/0/323830343a383735383a3a2f33322d3336203d3e20323732373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8758::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:0e:c8:9d:4e:4f:da:ce:b5:62:cf:15:37:f9:68:7a:b7:99:
         94:21:9b:0f:34:e3:81:38:77:57:c9:99:d2:4e:69:6f:08:ed:
         64:12:50:e2:39:53:5c:69:60:9d:11:7f:71:34:1c:c4:a2:de:
         31:9d:fc:05:ff:35:32:40:c7:82:1d:67:d9:ae:f6:d7:85:a7:
         7f:4b:fb:8a:aa:04:40:87:6e:68:6a:f9:ec:11:22:31:00:c8:
         7c:03:56:47:b0:13:a5:c5:d7:d6:1c:30:28:29:c3:7b:58:fb:
         e3:b1:85:89:de:05:ca:a4:09:34:36:53:0e:a5:00:4c:73:26:
         cb:0d:92:f3:d7:c9:1f:20:58:6e:17:56:2c:90:d7:29:49:3e:
         95:24:d5:20:40:5d:8a:c8:be:af:42:ce:0b:b6:48:01:25:08:
         98:b8:0e:33:e2:e0:44:8f:01:51:4f:9b:1c:0c:36:81:5a:32:
         22:bd:9e:b9:fb:bf:12:80:06:ae:a7:5b:1a:75:b3:2f:8f:40:
         49:8f:7c:03:67:e2:56:08:79:33:f7:08:22:a1:d6:06:e9:ae:
         4c:8e:73:dd:c5:43:75:9b:aa:d4:de:5e:78:2b:bc:0a:c2:08:
         33:0a:e0:3c:ac:c6:f1:9a:21:ca:56:bc:cb:4a:f3:f3:6a:19:
         ac:21:69:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 23:46:28 2024 by rpki-client on console-fra.rpki-client.org