Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/0/323830343a376138383a383030303a3a2f33342d3334203d3e20323731333737.roa
File:                     323830343a376138383a383030303a3a2f33342d3334203d3e20323731333737.roa (raw, json)
Hash identifier:          5541zTg7qSC0DDf91jXfwWxIfLzd2eaBIBn8xWLgyL4=
Subject key identifier:   9F:84:86:1D:C0:E2:A0:6B:CF:F0:6C:57:1A:62:A4:4E:FE:07:23:73
Certificate issuer:       /CN=9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4
Certificate serial:       7F99C85BD98D2CAB642FE33BD2BA88AFFD4B2B1E
Authority key identifier: 9E:D5:67:F8:6A:DA:E8:8C:DC:1B:94:F0:F1:6C:0A:36:55:A1:C4:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/0/323830343a376138383a383030303a3a2f33342d3334203d3e20323731333737.roa
Signing time:             Sat 08 Jun 2024 01:11:20 +0000
ROA not before:           Sat 08 Jun 2024 01:06:20 +0000
ROA not after:            Sat 07 Jun 2025 01:11:20 +0000
asID:                     271377
IP address blocks:        2804:7a88:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:99:c8:5b:d9:8d:2c:ab:64:2f:e3:3b:d2:ba:88:af:fd:4b:2b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4
        Validity
            Not Before: Jun  8 01:06:20 2024 GMT
            Not After : Jun  7 01:11:20 2025 GMT
        Subject: CN=9F84861DC0E2A06BCFF06C571A62A44EFE072373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e9:82:2a:61:72:1d:8a:4f:d6:ec:3c:31:ec:
                    99:af:63:fe:b4:40:e2:bd:4a:8a:48:c8:12:b0:0c:
                    c7:a9:da:5d:6c:54:97:fc:3c:aa:c8:65:aa:ad:d0:
                    9a:16:6c:66:f0:1c:16:15:e3:b7:fb:7b:36:65:07:
                    c9:cd:c8:e2:f5:e4:c3:22:2f:7f:71:60:4c:66:6c:
                    a2:94:c8:68:18:de:79:11:f4:8e:5c:4a:f7:2e:21:
                    6a:f1:bd:bf:b5:01:19:38:e7:3f:d3:38:59:87:b2:
                    15:ee:15:e4:f3:ba:a3:34:4c:22:9e:69:1a:53:c6:
                    60:f3:e2:39:1a:2b:0c:95:ce:a4:d6:59:e4:45:7b:
                    8b:3f:73:4e:63:36:ad:d0:73:84:08:1b:80:83:e0:
                    bd:cd:96:65:2e:c1:a0:c8:96:91:a6:ce:92:6c:bf:
                    42:6d:5e:f7:be:6f:0b:b7:6f:b1:30:7e:1a:13:99:
                    db:62:9e:13:81:2b:ac:a2:21:73:25:9c:ce:21:9d:
                    a9:c6:8b:2c:8e:af:71:b3:02:f8:6d:4f:80:ba:a7:
                    30:76:03:84:85:3f:60:2a:47:2b:af:c7:65:ea:c0:
                    56:20:b3:74:a9:e6:0c:00:93:11:7d:c7:57:2c:58:
                    b1:10:b6:46:e1:9c:fe:29:39:f9:64:72:81:19:b1:
                    af:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:84:86:1D:C0:E2:A0:6B:CF:F0:6C:57:1A:62:A4:4E:FE:07:23:73
            X509v3 Authority Key Identifier:
                keyid:9E:D5:67:F8:6A:DA:E8:8C:DC:1B:94:F0:F1:6C:0A:36:55:A1:C4:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/0/9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/0/323830343a376138383a383030303a3a2f33342d3334203d3e20323731333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a88:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         cb:c5:4f:c2:3d:67:70:5c:6d:84:77:ed:01:08:44:d4:e8:ec:
         75:2a:19:24:1b:6f:82:a3:b9:53:5f:78:b8:ac:16:1a:3b:87:
         06:f3:aa:76:74:b2:43:f0:62:15:28:07:73:13:3d:54:e4:26:
         b3:c7:38:81:bd:e2:c4:fa:fb:33:c4:47:d7:cf:82:29:e3:e4:
         9e:12:0a:0c:68:81:64:97:a7:76:b9:0a:23:8e:4b:6e:a8:8f:
         aa:35:9f:cd:b2:ee:8e:b0:a7:d7:9c:c3:ce:88:e3:74:76:88:
         26:83:2b:28:67:7a:ef:da:a3:ca:93:2a:f7:87:64:ea:1b:a9:
         1b:dd:1d:4a:91:21:d7:e0:77:28:e2:83:9d:96:f8:ad:d7:8c:
         93:7c:74:03:86:c9:51:15:f9:0b:34:35:34:04:d0:eb:06:1a:
         4f:6c:26:fb:07:e1:78:b0:39:ac:ca:c5:4d:7e:37:cf:fd:ab:
         a4:bf:ee:5f:bd:2b:3e:44:fe:a2:fa:97:95:6c:6e:cf:ff:54:
         f9:4b:19:66:c6:8e:a9:bd:e4:34:5e:89:c0:a9:2b:2c:26:56:
         34:b6:be:85:76:f7:54:a2:63:22:23:51:28:82:58:51:a0:22:
         b5:1a:09:92:cb:44:f8:d1:71:d0:f0:6a:4b:20:04:27:ff:ae:
         08:3b:f3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 18:22:48 2024 by rpki-client on console-ams.rpki-client.org