Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/1/323830343a373131383a3a2f33322d313238203d3e20323730373636.roa
File:                     323830343a373131383a3a2f33322d313238203d3e20323730373636.roa (raw, json)
Hash identifier:          vZ5Lqxocvl3CR1JBL48oFUGcaZnkDwu8eIsOoV7CjvI=
Subject key identifier:   9F:C2:93:0B:ED:95:19:96:0A:CA:A5:05:26:FE:60:A3:A4:2B:C8:4B
Certificate issuer:       /CN=7495F04590CB4152908088C6B7EA1568F5B72425
Certificate serial:       217199EF7F31CC813256348D2D17D116E73504B6
Authority key identifier: 74:95:F0:45:90:CB:41:52:90:80:88:C6:B7:EA:15:68:F5:B7:24:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7495F04590CB4152908088C6B7EA1568F5B72425.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/1/323830343a373131383a3a2f33322d313238203d3e20323730373636.roa
Signing time:             Thu 04 Apr 2024 07:35:20 +0000
ROA not before:           Thu 04 Apr 2024 07:30:20 +0000
ROA not after:            Thu 03 Apr 2025 07:35:20 +0000
asID:                     270766
IP address blocks:        2804:7118::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:71:99:ef:7f:31:cc:81:32:56:34:8d:2d:17:d1:16:e7:35:04:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7495F04590CB4152908088C6B7EA1568F5B72425
        Validity
            Not Before: Apr  4 07:30:20 2024 GMT
            Not After : Apr  3 07:35:20 2025 GMT
        Subject: CN=9FC2930BED9519960ACAA50526FE60A3A42BC84B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:56:ec:ed:67:63:95:17:3f:3f:32:20:38:3c:
                    89:69:df:49:08:12:72:a7:d2:a4:93:3e:0b:ee:0b:
                    f2:ac:ee:fc:1d:ee:41:85:97:18:a1:b5:1d:67:93:
                    f2:32:15:f4:89:2c:0f:ba:e2:d4:ea:e7:72:eb:b4:
                    bc:b0:b6:94:e3:a5:3c:45:51:7c:b3:48:c2:10:4d:
                    6f:eb:a0:de:ff:47:8f:4e:14:6b:56:87:50:f1:74:
                    2c:fa:2c:a7:d9:da:f4:ef:2c:af:de:87:53:32:19:
                    be:0d:44:b7:91:7b:a4:9f:0c:27:03:5c:a0:5f:ec:
                    e3:fa:6b:72:f4:bc:e7:8f:4f:b6:bd:62:a1:0e:c0:
                    98:73:10:5d:63:ec:fa:1c:3b:9f:f0:07:e6:6c:4d:
                    de:6e:1f:6e:5f:cf:37:dc:fd:f9:65:b6:be:39:35:
                    7f:ec:1b:0f:78:1f:57:83:7a:be:30:9c:8a:e0:75:
                    b1:eb:d6:06:c7:f8:24:f8:30:58:2e:0f:5a:9d:ea:
                    ce:46:a9:07:b4:77:e0:84:c3:98:2f:ad:74:56:1b:
                    ad:58:8f:d5:a1:dd:ab:36:1c:f5:46:59:fa:2b:96:
                    3f:92:02:1d:3c:06:76:f3:38:33:ad:16:9b:a6:1b:
                    29:05:87:66:69:a6:6f:43:34:17:58:ce:cf:1d:12:
                    97:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C2:93:0B:ED:95:19:96:0A:CA:A5:05:26:FE:60:A3:A4:2B:C8:4B
            X509v3 Authority Key Identifier:
                keyid:74:95:F0:45:90:CB:41:52:90:80:88:C6:B7:EA:15:68:F5:B7:24:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/1/7495F04590CB4152908088C6B7EA1568F5B72425.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7495F04590CB4152908088C6B7EA1568F5B72425.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/1/323830343a373131383a3a2f33322d313238203d3e20323730373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7118::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:69:ea:ab:32:9c:02:a9:4e:82:f0:19:57:ac:20:71:b4:29:
         d5:d9:05:3c:85:58:4e:6a:7f:c1:90:46:43:ee:18:2a:c1:4c:
         f9:ee:d0:38:a1:b8:ab:60:46:45:22:a7:7a:30:66:c7:53:be:
         8a:60:df:ab:d8:c8:7c:58:1a:0a:1b:05:69:ee:83:ad:22:8d:
         ce:f9:81:b8:0a:83:f3:af:69:18:d7:d0:2b:76:8c:d0:44:de:
         ab:83:15:77:2d:0e:67:7c:0d:fb:cd:57:4e:65:7a:1f:f8:91:
         d8:9c:1f:1c:36:37:65:ee:e2:ec:af:a0:f1:ec:47:41:b9:77:
         ea:22:90:84:8a:c9:2d:1d:bf:ba:08:a5:9a:8d:d7:fc:09:27:
         a6:28:f5:8d:3d:56:02:0f:d9:40:4f:37:f8:37:c5:1d:de:94:
         3f:aa:22:95:4f:78:87:08:4e:8b:4f:8d:71:a3:5e:11:90:1c:
         b4:67:75:f1:3f:f7:a9:44:cc:60:6b:2c:d8:08:74:a7:41:35:
         33:c5:82:e3:62:2c:e8:1b:dd:05:04:c8:81:4e:38:6a:65:28:
         cb:97:b8:f2:70:5f:70:f5:3b:b0:9b:43:aa:18:e9:98:3a:83:
         8a:d4:9b:f0:78:37:37:39:7e:f9:a8:00:e5:d7:1a:fd:24:da:
         05:2b:68:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 00:34:31 2024 by rpki-client on console-ams.rpki-client.org