Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/323830343a343730383a3a2f33332d3333203d3e20323637303237.roa
File:                     323830343a343730383a3a2f33332d3333203d3e20323637303237.roa (raw, json)
Hash identifier:          0RRxFGuRsmqi5eys8mbSN30Lic9vW2hrRB6BS1upZmk=
Subject key identifier:   53:65:A6:5B:8F:2D:22:73:EE:5E:DD:A6:30:D1:98:A3:AD:BA:71:8A
Certificate issuer:       /CN=9C735966D1D875EFEDB80B5961E45249EF1F0EE8
Certificate serial:       599CACE05C531A5F5BDFC70BD3959B057E22BFA3
Authority key identifier: 9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/323830343a343730383a3a2f33332d3333203d3e20323637303237.roa
Signing time:             Sat 13 Apr 2024 13:37:45 +0000
ROA not before:           Sat 13 Apr 2024 13:32:45 +0000
ROA not after:            Sat 12 Apr 2025 13:37:45 +0000
asID:                     267027
IP address blocks:        2804:4708::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9c:ac:e0:5c:53:1a:5f:5b:df:c7:0b:d3:95:9b:05:7e:22:bf:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C735966D1D875EFEDB80B5961E45249EF1F0EE8
        Validity
            Not Before: Apr 13 13:32:45 2024 GMT
            Not After : Apr 12 13:37:45 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:72:69:16:b0:3f:82:1e:7e:ca:d0:fe:44:90:
                    45:0c:c6:d8:af:5a:9c:6e:29:00:fe:0c:f1:a7:75:
                    a3:4e:c4:40:a4:72:78:57:b3:e8:83:59:d6:f1:07:
                    0e:b5:ad:49:2e:dd:e3:f3:13:9a:fa:ad:ec:5a:5a:
                    c4:b8:26:24:e9:92:2c:c9:be:41:cd:42:d1:30:4d:
                    5f:a4:da:d7:57:aa:c9:3e:89:7e:48:9b:a3:72:84:
                    eb:5b:5d:b8:0b:d1:79:55:01:b3:6f:20:40:63:c1:
                    22:2d:bd:5b:1c:bd:13:31:af:9b:6c:f1:d9:d2:5e:
                    03:56:79:14:6b:a9:c1:db:ba:d1:52:81:ae:58:e8:
                    6e:de:73:a3:96:27:e4:72:bf:fa:d0:f7:0e:75:92:
                    19:42:96:db:16:92:3f:d5:f4:72:0b:74:ca:fe:a6:
                    62:c7:8e:5b:92:37:7c:c6:7e:32:c7:d3:c4:b9:4b:
                    f7:e2:c3:9a:9f:f4:fb:ea:51:a8:04:13:83:20:bb:
                    db:8b:3e:84:49:17:75:0a:7a:5a:e1:21:90:db:27:
                    8f:7c:8e:9c:f8:c0:61:26:ce:76:e2:00:c9:04:dc:
                    9c:cd:ee:03:62:bf:86:26:e4:49:33:c8:0f:1a:43:
                    1f:6c:4f:d6:7b:ef:c9:44:f0:0f:f1:f5:b0:f3:5c:
                    49:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:65:A6:5B:8F:2D:22:73:EE:5E:DD:A6:30:D1:98:A3:AD:BA:71:8A
            X509v3 Authority Key Identifier:
                keyid:9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/323830343a343730383a3a2f33332d3333203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708::/33

    Signature Algorithm: sha256WithRSAEncryption
         96:65:11:c4:8e:45:94:89:25:18:d2:9f:57:a1:2d:a2:69:78:
         3d:34:e9:e8:e2:a8:44:80:7d:15:8a:e6:bc:0c:33:5a:af:fc:
         c1:32:d7:f8:74:b7:97:33:eb:d0:0c:2f:8b:6b:5b:6f:95:63:
         e6:11:e7:17:42:1a:b6:63:4c:2e:3e:34:b9:85:0d:dd:ee:d0:
         c5:c7:86:26:08:a2:9f:1c:10:7f:02:b6:9d:85:8d:2f:3d:50:
         66:f2:50:13:f3:71:14:7d:9d:8c:49:a8:fd:82:97:5f:4b:cc:
         d5:58:1a:6b:fa:35:0b:c3:7e:4b:5d:07:72:d1:69:14:c7:e3:
         99:4c:b3:e2:8d:1d:46:09:db:4d:ef:fa:da:64:4e:06:ec:34:
         51:81:8f:96:69:0a:88:f0:57:b8:29:d0:ad:44:7b:8c:f9:d7:
         20:c7:04:3c:20:4e:98:1a:8a:fc:39:b3:dd:ec:7f:f0:70:28:
         ce:25:f8:6b:07:18:90:13:6a:b1:0c:ed:e5:90:08:7f:5d:da:
         ba:de:36:bf:15:df:8f:07:09:56:04:a4:78:43:4a:23:37:7b:
         62:32:34:65:4a:98:1d:52:f4:ac:95:b1:bb:7b:7b:3d:66:8b:
         c1:50:8e:bb:76:81:a6:fc:c8:d4:34:b0:ea:39:af:83:1c:e0:
         9b:5b:7d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:48:39 2024 by rpki-client on console-ams.rpki-client.org