Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/0/323830343a376138383a383030303a3a2f33332d3333203d3e20323731333737.roa
File:                     323830343a376138383a383030303a3a2f33332d3333203d3e20323731333737.roa (raw, json)
Hash identifier:          iuJYndpmlaWU//CN3S4UbVQPW1pNClcbgyKujy33dcg=
Subject key identifier:   B3:03:8F:5D:34:51:06:85:5D:73:85:5D:E3:6F:E5:6D:A2:C1:AA:DA
Certificate issuer:       /CN=9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4
Certificate serial:       23FA9F5456C620EC8C8B89031AC315958F1125D4
Authority key identifier: 9E:D5:67:F8:6A:DA:E8:8C:DC:1B:94:F0:F1:6C:0A:36:55:A1:C4:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/0/323830343a376138383a383030303a3a2f33332d3333203d3e20323731333737.roa
Signing time:             Sat 08 Jun 2024 01:11:21 +0000
ROA not before:           Sat 08 Jun 2024 01:06:21 +0000
ROA not after:            Sat 07 Jun 2025 01:11:21 +0000
asID:                     271377
IP address blocks:        2804:7a88:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:fa:9f:54:56:c6:20:ec:8c:8b:89:03:1a:c3:15:95:8f:11:25:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4
        Validity
            Not Before: Jun  8 01:06:21 2024 GMT
            Not After : Jun  7 01:11:21 2025 GMT
        Subject: CN=B3038F5D345106855D73855DE36FE56DA2C1AADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:13:83:64:2f:6c:4f:7b:98:71:b5:c2:93:9f:
                    f9:28:7f:71:30:a1:1a:0e:7b:ea:aa:22:e6:41:81:
                    df:b5:1e:62:d7:7a:9b:f0:4a:f5:42:22:84:0e:ca:
                    99:d2:8f:da:3f:26:5c:89:fb:97:6a:0e:e2:88:88:
                    cf:d4:b6:93:fa:34:43:3c:c1:3d:99:16:43:eb:40:
                    9d:05:f6:cf:32:0a:d8:19:1d:67:d5:80:e8:95:24:
                    3d:ae:7e:68:a8:82:8c:f1:64:39:0d:46:c7:c5:14:
                    39:ba:69:7a:32:6a:3e:23:41:14:72:9e:ab:b1:13:
                    9b:59:c4:a4:25:f7:ce:55:e5:8f:45:54:ca:70:70:
                    91:7a:3d:6d:20:5f:1d:c6:20:24:6e:c3:a5:dc:44:
                    45:dd:63:89:57:af:2a:b7:57:fe:2c:02:03:bd:9c:
                    67:f0:bd:fd:e0:f0:9a:fc:b0:48:22:74:e0:63:76:
                    c6:b5:7f:44:1d:2e:f7:ac:78:25:b6:1a:e2:ad:94:
                    aa:d9:13:a0:66:0d:4e:9f:e7:6d:e1:f7:2e:3c:a5:
                    4f:78:d1:00:a2:d3:23:3e:3c:d6:64:2c:df:b0:1f:
                    d2:2e:42:0d:c2:b8:4c:05:92:68:e0:85:86:fd:38:
                    8a:ab:3a:31:55:d0:94:f5:4c:84:8c:9e:b9:31:62:
                    2e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:03:8F:5D:34:51:06:85:5D:73:85:5D:E3:6F:E5:6D:A2:C1:AA:DA
            X509v3 Authority Key Identifier:
                keyid:9E:D5:67:F8:6A:DA:E8:8C:DC:1B:94:F0:F1:6C:0A:36:55:A1:C4:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/0/9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/0/323830343a376138383a383030303a3a2f33332d3333203d3e20323731333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a88:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         92:e3:a2:16:fc:a6:9a:d5:eb:ff:c6:fc:e1:c4:b4:18:5f:28:
         3f:36:d6:28:37:57:31:c3:20:03:08:26:dd:ad:1e:46:52:14:
         0e:17:8a:bf:1a:68:65:b3:81:ff:d1:26:9d:f1:67:cf:3b:bf:
         47:4c:17:7e:d6:57:a5:73:3c:aa:b6:e8:18:19:53:0a:37:72:
         d8:c5:c0:52:6d:c0:93:84:f8:dc:1e:9b:0a:ec:4d:a6:7b:9e:
         cf:c2:50:04:07:00:b5:b0:a6:63:5b:fd:61:36:a0:f9:73:04:
         0d:69:ea:16:60:97:d2:5b:9f:34:b7:04:65:bd:51:7d:c7:80:
         4d:d9:82:e7:24:69:fd:87:c6:63:c8:1a:c8:62:08:98:af:ab:
         1a:05:2f:92:31:1e:7a:9d:ef:2d:c3:1d:dc:69:ea:cb:d2:1b:
         8d:e4:60:a9:ad:cd:d5:22:b0:44:b1:4d:22:1b:83:4f:aa:da:
         1f:52:a8:3f:75:4e:9b:26:b5:57:96:4e:d7:49:27:fe:71:dd:
         79:50:f2:0f:6a:67:4b:38:25:43:35:90:0f:b6:9d:0a:1f:b0:
         24:ad:19:81:de:3c:7b:98:74:18:55:2d:0f:11:57:2d:6c:1f:
         b3:f5:f4:b7:55:dc:ff:35:6c:cb:9d:be:d3:af:6d:9d:e9:f1:
         ba:93:8e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 18:22:48 2024 by rpki-client on console-ams.rpki-client.org