Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/323830343a373938303a383030303a3a2f33342d3334203d3e20323731333039.roa
File:                     323830343a373938303a383030303a3a2f33342d3334203d3e20323731333039.roa (raw, json)
Hash identifier:          Q1oWPxGCvSwDi7C7j6zoPT5nRWyz8eqJzOxuiXc3ARk=
Subject key identifier:   67:1E:8F:26:E4:58:7E:B3:D4:1F:DC:36:D7:2F:84:C6:22:DD:37:11
Certificate issuer:       /CN=93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C
Certificate serial:       1E6704ED8EEB5F857589854089639B229842289A
Authority key identifier: 93:FB:9F:2D:6D:D9:3C:EF:BB:1D:F8:3F:7E:2E:EC:7F:1A:BF:FF:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/323830343a373938303a383030303a3a2f33342d3334203d3e20323731333039.roa
Signing time:             Thu 04 Apr 2024 08:15:35 +0000
ROA not before:           Thu 04 Apr 2024 08:10:35 +0000
ROA not after:            Thu 03 Apr 2025 08:15:35 +0000
asID:                     271309
IP address blocks:        2804:7980:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:67:04:ed:8e:eb:5f:85:75:89:85:40:89:63:9b:22:98:42:28:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C
        Validity
            Not Before: Apr  4 08:10:35 2024 GMT
            Not After : Apr  3 08:15:35 2025 GMT
        Subject: CN=671E8F26E4587EB3D41FDC36D72F84C622DD3711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f0:04:8c:f0:13:7c:2f:04:78:6f:99:60:49:
                    36:ef:fd:ef:7a:b8:f5:e1:87:54:b8:e3:54:ef:d9:
                    88:2b:b4:b1:0f:1b:5e:a6:c9:7b:b6:c3:22:b6:aa:
                    0f:24:aa:bc:f0:5d:be:d9:b8:f3:72:23:15:d8:ed:
                    c9:68:ab:69:49:43:5a:1e:3f:a8:29:fc:6f:c1:3a:
                    34:fd:51:ad:7c:35:16:4d:29:fa:da:4a:0e:d7:9d:
                    53:d4:9f:f0:44:65:e7:eb:0c:00:f7:70:d9:58:c0:
                    c1:98:b9:36:d8:21:72:ac:7a:33:46:f4:83:26:10:
                    95:2e:93:87:fa:55:8a:0e:35:2b:1f:20:2a:f0:6f:
                    1b:0e:60:7b:97:1f:39:98:81:f9:ae:64:24:46:54:
                    07:c8:fd:1b:2c:eb:d4:43:58:fe:24:96:b2:07:23:
                    de:e6:86:6d:15:23:bb:1b:f0:e5:62:9f:9c:60:81:
                    6b:88:03:09:46:2e:14:83:04:ef:68:c8:8a:31:3c:
                    7a:7e:0e:31:01:b9:fa:7c:ec:f9:13:fc:61:a9:62:
                    38:46:6a:d3:1b:1f:df:9a:90:6d:fe:4b:f0:fd:e4:
                    4e:fe:f3:41:d8:7a:04:4f:31:7a:31:3c:5d:64:73:
                    6f:9b:76:51:67:de:fa:de:89:7c:a9:7d:11:a5:25:
                    f4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1E:8F:26:E4:58:7E:B3:D4:1F:DC:36:D7:2F:84:C6:22:DD:37:11
            X509v3 Authority Key Identifier:
                keyid:93:FB:9F:2D:6D:D9:3C:EF:BB:1D:F8:3F:7E:2E:EC:7F:1A:BF:FF:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/323830343a373938303a383030303a3a2f33342d3334203d3e20323731333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7980:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b6:0c:ba:57:b4:c2:5d:47:5e:83:73:1b:af:21:0b:0e:b3:fc:
         59:a5:07:d5:f0:2e:dc:76:a7:c8:4a:6a:25:fd:89:a9:63:88:
         8e:33:0d:1f:8e:dd:85:ee:c1:91:97:9f:9e:58:21:b9:c7:84:
         e0:39:e8:c7:f4:1f:50:66:9f:e0:88:e5:d4:7d:6c:e0:88:f0:
         e8:4f:ec:9a:54:b0:7d:e2:78:08:93:eb:80:20:77:14:86:a1:
         03:db:af:3b:ca:b7:a8:2c:92:56:11:cc:8a:5a:e2:b9:02:e4:
         1e:ff:4f:8a:43:91:e7:1b:67:a0:4a:46:3f:62:80:3b:c2:62:
         5f:4a:67:b4:b6:f0:ff:78:ca:b8:e5:05:6f:e8:8b:54:fb:68:
         a9:47:0e:87:03:64:79:e9:ae:fc:96:a2:a7:99:c0:fe:9f:13:
         1f:8f:d0:9d:4e:46:c7:25:63:6e:b7:b2:6e:76:f9:4e:e3:ae:
         f6:f4:75:cb:7a:57:2c:c2:c1:f2:55:14:eb:ac:94:f2:1a:68:
         9a:9e:3d:3c:ff:2b:e3:0b:de:b7:30:42:b4:28:9a:17:83:c7:
         f1:82:42:81:42:aa:e5:ee:dc:e9:65:12:53:fc:dd:cb:be:af:
         b9:d6:02:54:c7:9b:77:0f:82:b8:41:46:e9:aa:b8:8d:c7:fb:
         07:d8:20:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 02:07:11 2024 by rpki-client on console-fra.rpki-client.org