Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/323830343a343730383a633830303a3a2f33372d3337203d3e20323637303237.roa
File:                     323830343a343730383a633830303a3a2f33372d3337203d3e20323637303237.roa (raw, json)
Hash identifier:          X6arvtyuvH6rPK74ZODvYFvryKGg9U7b/vr58NgoO8o=
Subject key identifier:   8F:9D:22:99:CA:7B:7D:8D:33:67:7F:8D:1B:53:7D:FD:FD:6B:22:6A
Certificate issuer:       /CN=9C735966D1D875EFEDB80B5961E45249EF1F0EE8
Certificate serial:       106361AB8D1B93FE2408967C136058A1EC5139BF
Authority key identifier: 9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/323830343a343730383a633830303a3a2f33372d3337203d3e20323637303237.roa
Signing time:             Sat 13 Apr 2024 13:37:45 +0000
ROA not before:           Sat 13 Apr 2024 13:32:45 +0000
ROA not after:            Sat 12 Apr 2025 13:37:45 +0000
asID:                     267027
IP address blocks:        2804:4708:c800::/37 maxlen: 37

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:63:61:ab:8d:1b:93:fe:24:08:96:7c:13:60:58:a1:ec:51:39:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C735966D1D875EFEDB80B5961E45249EF1F0EE8
        Validity
            Not Before: Apr 13 13:32:45 2024 GMT
            Not After : Apr 12 13:37:45 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c7:fc:88:b5:26:63:2d:9d:6e:82:73:3c:62:
                    b5:7d:d7:2f:7b:ff:b6:b4:4e:4b:8a:6d:4b:58:06:
                    24:41:be:df:d7:9d:e4:4a:d6:96:f6:dc:37:bf:d6:
                    df:d5:a5:8a:98:57:d3:e3:03:53:19:0f:5c:29:7b:
                    0f:c0:d6:8d:ac:98:4d:96:56:37:9e:2c:18:79:4f:
                    55:82:6b:bc:5d:3c:d2:d4:98:eb:32:22:19:81:8a:
                    b3:e2:db:a3:57:85:cc:a6:5b:a8:a4:d4:d5:1d:58:
                    cf:31:f3:53:0b:0d:a7:43:b0:75:0b:5b:65:11:c0:
                    26:7a:4e:27:92:bf:ed:ae:b3:17:5d:72:1e:fd:b9:
                    9c:88:42:ba:45:38:f1:37:67:49:98:6d:01:87:04:
                    af:97:ab:53:0b:08:4e:17:d3:15:23:ca:23:e0:47:
                    1f:0d:2b:bd:75:bf:83:54:c0:a4:85:1b:3d:dd:59:
                    ff:e4:e3:5c:0a:49:89:0f:f1:12:94:f3:b3:36:a0:
                    65:d3:fa:e4:6e:e2:f0:02:56:72:80:ef:ad:92:c4:
                    99:43:80:a5:77:97:ef:fd:c9:40:50:d7:d6:b1:0f:
                    c5:6c:55:62:c6:eb:7a:71:1c:2b:de:6e:5d:fc:76:
                    1a:cc:35:f2:db:c8:e5:d4:61:6f:0b:29:e8:ed:cc:
                    b3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9D:22:99:CA:7B:7D:8D:33:67:7F:8D:1B:53:7D:FD:FD:6B:22:6A
            X509v3 Authority Key Identifier:
                keyid:9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/323830343a343730383a633830303a3a2f33372d3337203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708:c800::/37

    Signature Algorithm: sha256WithRSAEncryption
         be:5a:67:94:a5:40:d6:04:6f:3c:ae:10:c6:b9:75:9e:ce:81:
         aa:3a:df:36:5f:60:4d:1e:e2:b2:62:c3:83:4d:71:85:73:f2:
         bb:7e:3a:9f:c6:cd:7a:b7:cb:07:3b:43:39:ad:1a:d8:36:02:
         38:c6:90:16:69:6c:d4:1e:92:d7:d3:6f:8e:a5:86:59:41:8b:
         9b:98:c9:e4:a1:33:12:68:d0:96:8b:2d:0d:f9:92:a5:ed:ab:
         e5:ee:02:46:6a:2a:d2:c1:b6:0d:2f:33:5e:b3:3c:48:17:cb:
         33:dd:71:ba:28:a0:28:01:5c:7d:01:2a:7b:ba:bb:38:cd:bd:
         d9:aa:17:ab:7a:63:50:dc:0c:6c:9a:06:db:91:24:1d:89:7f:
         7c:1a:d2:c8:6e:8d:14:92:ee:34:3a:5c:07:47:d2:14:11:e2:
         7f:a5:4a:d4:c2:9c:de:0f:f0:b0:53:47:80:b1:8b:b8:e5:36:
         73:5f:a6:b9:8b:14:b0:78:5c:1b:93:27:27:93:bb:08:7c:41:
         09:37:df:8e:a7:dc:fe:ff:82:a7:96:44:aa:32:be:80:5e:37:
         8d:1b:8d:0e:13:8b:16:67:06:bc:bd:ee:4f:93:93:b7:16:cb:
         0e:80:5f:45:e1:b5:2b:96:a1:2f:7f:fc:f0:e3:6f:78:c9:a3:
         c5:fe:99:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:48:39 2024 by rpki-client on console-ams.rpki-client.org