Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/0/323830343a376138383a3a2f33332d3333203d3e20323731333737.roa
File:                     323830343a376138383a3a2f33332d3333203d3e20323731333737.roa (raw, json)
Hash identifier:          oZqQkMdgXzjNCoIcDPNGE694KxWXIyvdEZXEicRFmJM=
Subject key identifier:   8A:54:84:68:F7:BD:33:FF:EC:C1:46:F4:8E:B4:5C:54:FC:C2:3B:FA
Certificate issuer:       /CN=9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4
Certificate serial:       6DE2D6761737A21ECE24D23C919D9A719A18C877
Authority key identifier: 9E:D5:67:F8:6A:DA:E8:8C:DC:1B:94:F0:F1:6C:0A:36:55:A1:C4:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/0/323830343a376138383a3a2f33332d3333203d3e20323731333737.roa
Signing time:             Sat 08 Jun 2024 01:11:21 +0000
ROA not before:           Sat 08 Jun 2024 01:06:21 +0000
ROA not after:            Sat 07 Jun 2025 01:11:21 +0000
asID:                     271377
IP address blocks:        2804:7a88::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e2:d6:76:17:37:a2:1e:ce:24:d2:3c:91:9d:9a:71:9a:18:c8:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4
        Validity
            Not Before: Jun  8 01:06:21 2024 GMT
            Not After : Jun  7 01:11:21 2025 GMT
        Subject: CN=8A548468F7BD33FFECC146F48EB45C54FCC23BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f8:2e:1a:eb:e0:2d:4a:3c:c8:6f:80:d1:45:
                    2d:16:ee:58:78:6b:dd:28:68:e9:ce:39:bd:3c:7c:
                    8f:4a:a7:b7:88:2d:e3:25:8d:bc:36:7d:83:45:d5:
                    c3:12:12:5c:70:e7:a2:c0:3a:56:ae:49:dd:3a:cb:
                    cb:54:63:d8:31:17:a4:ef:59:08:ce:58:45:21:e3:
                    af:d1:a4:a2:11:43:f6:84:86:e0:78:58:28:d3:09:
                    5d:5f:35:28:e5:62:f0:a3:0a:0a:6f:09:b0:00:5b:
                    c5:75:60:cb:90:ed:6c:9e:11:a0:5c:84:02:64:47:
                    ae:6b:eb:47:74:e8:18:d1:99:fe:ba:2a:40:bd:8d:
                    01:12:54:66:74:68:8c:73:61:44:5f:9c:06:eb:c5:
                    43:f6:0e:86:a8:39:bc:9a:d8:92:1b:12:f1:6f:c2:
                    1c:5a:03:fb:d6:d1:3e:f9:9a:d1:c8:b4:13:18:aa:
                    18:b5:2e:7b:3e:bd:5f:72:cb:eb:5a:9e:4a:26:f8:
                    24:49:5b:66:f0:0a:5f:54:ab:3e:c4:3d:88:49:08:
                    3f:fb:bf:72:4b:38:6e:6f:2f:45:ba:f7:58:c4:17:
                    02:6e:ef:aa:de:a6:57:ef:77:8e:e8:d4:12:1d:0c:
                    8a:f1:dd:ff:6e:2a:8f:0c:46:5e:65:9d:fe:90:45:
                    ee:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:54:84:68:F7:BD:33:FF:EC:C1:46:F4:8E:B4:5C:54:FC:C2:3B:FA
            X509v3 Authority Key Identifier:
                keyid:9E:D5:67:F8:6A:DA:E8:8C:DC:1B:94:F0:F1:6C:0A:36:55:A1:C4:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/0/9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED567F86ADAE88CDC1B94F0F16C0A3655A1C4E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4U1mjTYm1XGgfM7tXqHsDF4NkgsFwk8biwvxHczEefut/0/323830343a376138383a3a2f33332d3333203d3e20323731333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a88::/33

    Signature Algorithm: sha256WithRSAEncryption
         c0:0a:1f:40:19:ec:8c:f3:ba:96:d4:53:2f:4c:bd:93:b6:9f:
         c9:64:f8:95:63:af:71:19:f2:92:25:6f:7d:9f:95:8b:1d:01:
         7b:b3:f9:6a:2e:7f:5f:22:45:d7:06:13:f1:8a:fd:78:44:45:
         b3:3d:a7:91:3e:e8:07:8d:f9:22:51:67:74:0e:ad:7d:83:81:
         21:87:04:78:80:39:8e:0f:1b:fd:fc:00:51:a5:b6:7d:87:47:
         95:dc:71:31:64:9f:c8:46:b6:ee:24:93:8f:a0:57:88:cb:87:
         55:12:00:82:b5:09:da:c9:f5:cc:08:e8:00:20:53:16:36:b6:
         0f:be:88:c4:7e:f4:3a:c8:7f:2f:d1:55:03:70:ca:ea:8e:65:
         c1:30:6d:68:75:b5:3a:82:94:4f:4f:ca:98:8b:4b:7d:66:73:
         b1:b1:81:50:6e:c0:20:7f:05:82:f7:f2:86:66:95:1f:30:75:
         13:61:67:c2:28:d7:0c:9f:48:e9:db:27:b6:cb:a3:f5:13:ca:
         d9:b8:75:1e:a4:2c:14:a3:08:0f:af:4c:43:4d:e7:23:f7:f1:
         1f:4c:fe:e3:22:f1:37:42:e2:13:64:cd:67:e8:a4:0e:fc:aa:
         36:8b:65:a7:d0:9f:f2:8f:01:8c:d2:2c:3b:22:b1:b1:2f:cc:
         d3:cc:b2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 19:05:27 2024 by rpki-client on console-fra.rpki-client.org