Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/323830343a316634633a3a2f33332d3333203d3e20323639313735.roa
File:                     323830343a316634633a3a2f33332d3333203d3e20323639313735.roa (raw, json)
Hash identifier:          rRRB3ODgj5+j+yxj61FT5noPQ/UNTC0nl4U/zIGmobc=
Subject key identifier:   31:2F:7A:9A:4A:96:7C:21:2F:E4:AF:32:83:1F:22:5A:26:20:DA:7E
Certificate issuer:       /CN=D06B11E63B9C70F7F811C6806C7FE298F81295CC
Certificate serial:       78B7E9328603B8632126D139EB6EA038D9BB80DF
Authority key identifier: D0:6B:11:E6:3B:9C:70:F7:F8:11:C6:80:6C:7F:E2:98:F8:12:95:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/323830343a316634633a3a2f33332d3333203d3e20323639313735.roa
Signing time:             Wed 03 Apr 2024 21:10:50 +0000
ROA not before:           Wed 03 Apr 2024 21:05:50 +0000
ROA not after:            Wed 02 Apr 2025 21:10:50 +0000
asID:                     269175
IP address blocks:        2804:1f4c::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b7:e9:32:86:03:b8:63:21:26:d1:39:eb:6e:a0:38:d9:bb:80:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D06B11E63B9C70F7F811C6806C7FE298F81295CC
        Validity
            Not Before: Apr  3 21:05:50 2024 GMT
            Not After : Apr  2 21:10:50 2025 GMT
        Subject: CN=312F7A9A4A967C212FE4AF32831F225A2620DA7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b3:0e:f7:c1:d4:50:c5:f6:9f:66:56:28:4b:
                    9b:b1:14:e8:d1:cc:80:8c:79:f1:4f:93:cb:c6:da:
                    b0:19:f7:fe:34:e5:04:80:5a:61:9e:cc:91:02:e9:
                    72:de:8f:3b:fb:cf:2d:a7:b8:ca:9e:45:fb:1f:92:
                    96:90:5f:0b:dc:a0:fb:84:3b:13:81:61:89:04:dd:
                    41:7a:bd:f8:ce:83:cf:41:5e:8a:e0:0a:a5:08:57:
                    6e:dc:59:32:d8:4d:f7:04:59:8b:e4:2b:a1:27:0b:
                    f4:39:67:5e:e3:1c:c0:a1:fb:89:31:b1:af:a2:f7:
                    20:eb:c6:69:78:a1:27:56:38:24:a5:9f:15:1c:d2:
                    27:ee:f1:90:73:fd:f3:4f:16:5b:6b:2a:10:f4:a1:
                    19:d9:a5:72:a5:20:09:8f:e0:5d:1e:aa:39:f2:b5:
                    2c:fb:8b:8e:fb:27:51:cd:84:4d:4f:01:ef:dd:47:
                    b6:aa:6d:f0:13:12:e3:31:f1:58:d6:7c:d1:1f:cb:
                    9b:e9:83:1b:5d:64:2f:bf:48:b7:8e:ba:ab:9d:7f:
                    2d:6f:7d:ba:49:d9:48:7a:ed:58:e1:36:10:9f:91:
                    e0:35:29:8a:31:a1:f1:b1:be:45:82:3e:42:33:37:
                    83:92:85:8d:16:1a:2d:9e:a6:4b:5e:be:70:85:12:
                    b6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2F:7A:9A:4A:96:7C:21:2F:E4:AF:32:83:1F:22:5A:26:20:DA:7E
            X509v3 Authority Key Identifier:
                keyid:D0:6B:11:E6:3B:9C:70:F7:F8:11:C6:80:6C:7F:E2:98:F8:12:95:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/323830343a316634633a3a2f33332d3333203d3e20323639313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f4c::/33

    Signature Algorithm: sha256WithRSAEncryption
         25:80:a4:90:25:fe:38:22:8d:41:46:8c:71:a8:a0:ba:f6:67:
         cb:4d:2e:84:43:c6:bb:85:fa:38:48:b5:6f:ab:36:7d:ae:35:
         ad:fc:a4:91:39:7e:40:23:41:13:b8:3d:0a:c1:12:14:05:b9:
         e4:28:c7:1d:2b:09:95:3d:de:91:bd:e4:83:c3:f4:23:8d:4d:
         df:d5:be:31:60:b0:ff:6d:12:38:5e:b1:ad:31:b7:11:ba:f1:
         95:34:05:46:b1:e7:92:8f:7e:55:07:ac:2f:fc:df:d1:b3:d5:
         68:b8:14:f2:87:c6:df:f5:41:76:b9:ed:b7:c0:8e:41:1f:3d:
         48:82:10:fd:01:c7:cc:59:4c:3d:b8:00:cc:1a:1d:f7:c8:9d:
         c2:11:d0:8b:f9:f9:b9:0c:79:db:59:76:04:d5:d6:04:dd:81:
         7d:f7:f7:11:d3:2d:04:1c:5f:52:2c:bd:fa:04:a7:41:7e:ec:
         5d:4d:db:4e:13:02:f8:03:87:84:5f:8a:00:43:01:79:f2:63:
         0f:b4:19:79:3d:9f:a6:72:2d:bb:99:ea:5e:16:c2:4f:99:c0:
         42:6f:64:c1:f3:87:8b:95:65:c5:e5:e2:e4:fa:19:67:fa:68:
         5a:67:34:25:e2:9e:dc:5d:9c:db:2b:72:f0:97:ce:98:77:27:
         06:a4:5e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 09:09:22 2024 by rpki-client on console-fra.rpki-client.org