Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/1/323830343a343137633a3a2f33322d3438203d3e20323637343336.roa
File:                     323830343a343137633a3a2f33322d3438203d3e20323637343336.roa (raw, json)
Hash identifier:          btcOiueTmT+veK8Kwus2MVXuTdIxZ8/IHDEJqYpveM0=
Subject key identifier:   B1:67:CB:AE:EC:00:81:EB:9C:B8:5C:D3:90:C5:37:3E:F1:24:BB:D4
Certificate issuer:       /CN=287D3948CD018DC083CEF786858DF019B1D3111B
Certificate serial:       7D5EB3C7A982E1D1E6A5D493A128ACE026A643A0
Authority key identifier: 28:7D:39:48:CD:01:8D:C0:83:CE:F7:86:85:8D:F0:19:B1:D3:11:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/287D3948CD018DC083CEF786858DF019B1D3111B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/1/323830343a343137633a3a2f33322d3438203d3e20323637343336.roa
Signing time:             Thu 04 Apr 2024 05:44:24 +0000
ROA not before:           Thu 04 Apr 2024 05:39:24 +0000
ROA not after:            Thu 03 Apr 2025 05:44:24 +0000
asID:                     267436
IP address blocks:        2804:417c::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5e:b3:c7:a9:82:e1:d1:e6:a5:d4:93:a1:28:ac:e0:26:a6:43:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=287D3948CD018DC083CEF786858DF019B1D3111B
        Validity
            Not Before: Apr  4 05:39:24 2024 GMT
            Not After : Apr  3 05:44:24 2025 GMT
        Subject: CN=B167CBAEEC0081EB9CB85CD390C5373EF124BBD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0d:e0:6a:86:c2:14:6f:48:d3:e1:84:28:0d:
                    a2:2e:b9:7c:89:9d:cf:14:7e:02:66:f6:bf:ac:cf:
                    05:2e:f2:dc:00:bc:61:7a:00:33:ab:91:bc:4e:f1:
                    3b:3f:67:cf:40:e5:70:3c:6c:d9:01:f9:17:fa:5a:
                    02:f0:9a:08:c8:5b:01:dd:bc:da:8b:20:c7:cb:77:
                    9c:23:e7:34:07:3f:32:a6:f9:a5:ca:96:a3:af:c9:
                    86:ad:ef:32:71:10:a8:b8:f4:07:9e:8b:6c:72:cf:
                    c7:61:8f:49:82:b9:37:33:6f:0e:94:db:fe:c7:4a:
                    01:f0:f1:8a:01:c5:5d:cf:4a:ad:3d:7a:43:43:59:
                    10:e1:c9:78:7c:fa:bb:e2:52:b5:b9:44:57:b2:7f:
                    68:1f:c7:8d:e6:8f:63:48:d6:d9:f1:e5:75:c4:c2:
                    51:25:5f:78:7f:80:ab:ff:48:89:28:e2:3c:ed:76:
                    c7:13:82:08:6c:55:a8:ae:d6:76:47:2f:1c:a7:db:
                    a5:ac:ba:b5:40:bd:58:82:d3:8b:62:c0:36:69:1e:
                    46:31:ef:3d:3d:0a:c9:c8:46:03:a9:a5:9e:86:47:
                    ee:05:ec:69:88:49:15:6d:aa:99:eb:11:ce:14:86:
                    28:22:b0:ec:76:39:9d:f3:65:16:3e:7f:61:84:3f:
                    e9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:67:CB:AE:EC:00:81:EB:9C:B8:5C:D3:90:C5:37:3E:F1:24:BB:D4
            X509v3 Authority Key Identifier:
                keyid:28:7D:39:48:CD:01:8D:C0:83:CE:F7:86:85:8D:F0:19:B1:D3:11:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/1/287D3948CD018DC083CEF786858DF019B1D3111B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/287D3948CD018DC083CEF786858DF019B1D3111B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/1/323830343a343137633a3a2f33322d3438203d3e20323637343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:417c::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:3c:b8:1a:9a:c1:8d:c0:c3:9e:f6:db:92:e1:27:7b:59:48:
         f8:8e:f6:48:c3:6c:e5:24:62:dc:ab:b5:a4:2d:7f:5d:c1:6e:
         4e:cf:68:10:cb:17:0b:08:3a:23:15:f0:3d:e2:0f:bf:cf:b9:
         44:be:92:24:12:be:0c:d3:e1:28:30:5b:0f:0d:cd:c1:9c:82:
         17:7f:4f:38:75:1f:3d:e1:80:98:f6:18:14:cd:c1:c0:9a:0c:
         f8:87:f5:37:84:db:63:f7:b6:0e:ef:e5:fc:1b:f7:cb:fd:8a:
         db:46:f4:de:e1:6f:d3:27:41:9b:d5:4e:af:90:f6:6f:3c:57:
         f4:7b:77:97:db:17:be:3c:86:c2:a1:fc:83:cf:86:25:1c:8e:
         62:c1:2b:13:e2:19:c1:42:c8:c5:19:b1:9b:61:60:42:15:db:
         c8:f3:2c:93:25:c7:03:00:89:5d:0b:cc:6b:36:39:a4:29:4a:
         ac:44:35:5a:f7:4b:e9:c2:d0:4d:d9:6c:28:e3:e7:5b:12:7c:
         b0:72:c7:5d:31:86:65:e2:ec:94:6d:6c:bb:55:7a:cb:d1:f7:
         12:bc:2b:e4:55:01:27:1f:34:98:69:a6:74:6f:19:ca:9b:a8:
         82:d3:13:3f:b9:7c:46:76:0c:98:e8:6a:4b:15:e8:41:dd:f0:
         b0:22:d1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 01:34:18 2024 by rpki-client on console-fra.rpki-client.org