Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/323830343a343730383a633030303a3a2f33372d3337203d3e20323637303237.roa
File:                     323830343a343730383a633030303a3a2f33372d3337203d3e20323637303237.roa (raw, json)
Hash identifier:          D0c50Kxl2SdTc5fTLVwQJrWFFBQzlMjAm13CH05v16M=
Subject key identifier:   1E:C5:76:C0:E7:B7:42:E5:A0:49:2C:F2:CB:D9:70:02:0A:14:68:A6
Certificate issuer:       /CN=9C735966D1D875EFEDB80B5961E45249EF1F0EE8
Certificate serial:       4D7086E53F439FA5941978D34F538F619548883A
Authority key identifier: 9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/323830343a343730383a633030303a3a2f33372d3337203d3e20323637303237.roa
Signing time:             Sat 13 Apr 2024 13:37:45 +0000
ROA not before:           Sat 13 Apr 2024 13:32:45 +0000
ROA not after:            Sat 12 Apr 2025 13:37:45 +0000
asID:                     267027
IP address blocks:        2804:4708:c000::/37 maxlen: 37

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:70:86:e5:3f:43:9f:a5:94:19:78:d3:4f:53:8f:61:95:48:88:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C735966D1D875EFEDB80B5961E45249EF1F0EE8
        Validity
            Not Before: Apr 13 13:32:45 2024 GMT
            Not After : Apr 12 13:37:45 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e3:f6:b1:f6:c6:d3:a8:96:8b:08:cd:4c:f3:
                    f1:48:10:7a:78:4d:60:3d:89:4e:59:d0:fa:b8:53:
                    e4:72:5f:35:0b:82:fb:cf:f2:f1:71:f9:1e:14:f7:
                    3c:7d:34:56:12:c5:1e:97:11:fb:26:95:7e:58:65:
                    53:a2:56:18:0f:10:8f:d2:91:79:bf:5c:e5:fe:69:
                    fb:fc:c4:4e:7a:55:68:a6:00:39:5b:d0:a6:f0:4d:
                    32:2c:f5:4e:85:32:1c:9e:ab:d9:0f:96:62:a1:e5:
                    55:67:7a:78:c8:fd:1f:c2:65:7c:9c:ea:97:91:66:
                    f1:5f:47:31:0a:f7:b2:d8:3f:98:4f:84:e5:a1:42:
                    90:91:77:26:b1:f6:dd:6d:13:17:a1:fb:cc:c6:73:
                    1a:aa:9f:d2:2f:a5:da:1a:eb:6a:1b:78:b4:79:13:
                    94:4c:21:77:b2:23:54:b6:da:73:b7:68:fa:60:1a:
                    56:55:88:ff:cc:7c:06:67:47:cd:f8:7a:21:b5:58:
                    b4:ce:c2:fd:4f:64:c0:c0:59:88:cb:2d:71:f9:12:
                    e0:fd:b1:76:99:97:81:c4:b4:93:43:46:3c:21:5b:
                    e1:ab:09:30:c6:e0:14:60:60:41:3e:84:27:d0:81:
                    f1:82:46:29:ad:14:33:03:62:76:54:4c:55:6c:68:
                    73:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C5:76:C0:E7:B7:42:E5:A0:49:2C:F2:CB:D9:70:02:0A:14:68:A6
            X509v3 Authority Key Identifier:
                keyid:9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/323830343a343730383a633030303a3a2f33372d3337203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708:c000::/37

    Signature Algorithm: sha256WithRSAEncryption
         e5:40:4f:ed:fc:ac:6f:68:cb:a9:11:96:22:a9:69:42:49:4a:
         f5:23:32:87:38:c1:f3:86:9e:f9:db:b8:fb:2c:29:6d:af:20:
         c2:2c:e1:48:51:de:82:f3:06:40:d2:50:10:a1:45:f2:23:3d:
         6d:6a:03:a5:15:82:95:69:2e:d0:13:f6:6c:3e:b9:0f:cf:c9:
         58:11:5e:19:9f:14:3d:75:35:f1:f3:ff:49:30:66:d8:0c:b2:
         68:87:19:0c:4b:e5:5f:da:36:55:4c:ba:97:76:a2:55:59:b6:
         c1:10:eb:1d:0a:0e:92:ff:41:b0:07:dd:ee:72:08:b0:f9:f2:
         2b:ba:71:d4:18:bb:65:85:a7:b5:fc:43:b3:18:42:8d:35:8f:
         64:69:6e:c4:cb:18:a6:69:ad:7a:b7:fe:71:9b:d9:54:17:2d:
         ae:77:48:32:92:02:4e:5b:1e:b4:4a:d9:08:72:4c:25:af:e3:
         08:87:64:f7:7f:4a:1b:47:78:fb:46:a7:67:b5:0a:b4:ab:6e:
         59:da:82:65:a9:b1:9d:1b:d0:b8:35:d6:a1:60:3d:17:b0:d3:
         bd:a2:4a:78:68:d4:d2:27:a0:71:15:81:40:40:18:4c:f8:5c:
         0a:cc:3a:1a:d8:c7:4b:15:39:e2:a7:07:93:d5:f9:7b:b0:88:
         89:f1:29:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:48:39 2024 by rpki-client on console-ams.rpki-client.org