Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/323830343a343730383a643830303a3a2f33372d3337203d3e20323637303237.roa
File:                     323830343a343730383a643830303a3a2f33372d3337203d3e20323637303237.roa (raw, json)
Hash identifier:          P2LHRRjbkJjDr+01nS1T3LerJgYqzkX3HtdVS3/gX40=
Subject key identifier:   96:C7:D6:A6:EA:D2:9A:96:07:B5:4E:B0:03:7C:AF:F7:7D:06:BC:23
Certificate issuer:       /CN=9C735966D1D875EFEDB80B5961E45249EF1F0EE8
Certificate serial:       06ADE6DB1D7A6C29706B310FC432D68D991023F1
Authority key identifier: 9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/323830343a343730383a643830303a3a2f33372d3337203d3e20323637303237.roa
Signing time:             Sat 13 Apr 2024 13:37:45 +0000
ROA not before:           Sat 13 Apr 2024 13:32:45 +0000
ROA not after:            Sat 12 Apr 2025 13:37:45 +0000
asID:                     267027
IP address blocks:        2804:4708:d800::/37 maxlen: 37

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ad:e6:db:1d:7a:6c:29:70:6b:31:0f:c4:32:d6:8d:99:10:23:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C735966D1D875EFEDB80B5961E45249EF1F0EE8
        Validity
            Not Before: Apr 13 13:32:45 2024 GMT
            Not After : Apr 12 13:37:45 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:a0:e8:cf:3b:fc:d3:00:b1:91:6c:f2:a9:
                    8a:e8:dd:ad:f4:ad:73:ae:a9:2f:f6:51:fb:52:a1:
                    3d:58:83:22:7c:49:c2:f9:64:d8:49:9b:f4:b6:a8:
                    34:fa:37:d5:3f:6b:0b:4d:78:dd:88:fb:e5:5f:8c:
                    b7:ee:5f:a5:07:8e:b5:c8:a7:a1:39:c7:95:bb:1f:
                    30:96:46:20:b5:e0:7e:c8:04:f2:90:6a:f3:eb:d4:
                    db:8b:bd:f5:01:41:df:68:71:f1:6c:5f:45:b1:3a:
                    cf:7c:c9:18:e5:b2:ff:c0:01:0b:5f:d6:72:50:fc:
                    61:89:ff:fb:16:32:67:16:2d:4a:82:ae:0a:bc:f7:
                    ae:0f:6f:c8:ee:0e:13:6a:f7:0a:fb:18:1a:1b:c4:
                    06:34:3f:e8:fd:01:18:3c:df:20:32:68:4f:31:fd:
                    6c:21:96:33:5c:55:b4:04:1b:39:ea:d8:11:12:4b:
                    e9:7e:11:08:eb:6a:f3:52:07:40:76:90:ed:35:5f:
                    69:f3:17:26:bb:d5:5c:41:a1:66:5c:bd:f7:09:b3:
                    1a:de:68:0d:25:ad:d3:d6:a5:db:03:e5:12:78:c9:
                    f4:d0:e7:e7:19:a8:98:53:60:04:13:65:04:f0:39:
                    5b:ca:db:2a:58:fe:90:9e:90:3e:94:cb:64:63:20:
                    a1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C7:D6:A6:EA:D2:9A:96:07:B5:4E:B0:03:7C:AF:F7:7D:06:BC:23
            X509v3 Authority Key Identifier:
                keyid:9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/323830343a343730383a643830303a3a2f33372d3337203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708:d800::/37

    Signature Algorithm: sha256WithRSAEncryption
         08:93:7c:fe:a6:7e:f3:a1:7f:d8:f3:b0:64:60:18:06:8c:9a:
         c8:53:f3:86:b8:11:95:77:b3:55:e3:d5:5b:5b:89:e3:4c:b8:
         38:e0:b2:c3:b4:ed:06:bc:8b:28:7a:be:06:3c:58:07:f9:c5:
         c5:d0:e3:9c:ad:2a:3d:42:2b:5b:d9:02:0d:41:12:82:c6:55:
         a4:58:3c:17:d1:73:32:1d:e1:a6:80:9e:46:aa:9e:d0:96:50:
         57:62:ec:5c:00:91:39:57:5e:dc:c6:34:91:c7:84:1a:27:76:
         31:b1:94:ab:50:84:60:d1:ad:5b:fe:12:36:4e:b4:80:ce:ab:
         1b:0e:f4:b4:b6:b6:ec:47:37:18:82:fc:87:4e:4e:ed:85:b7:
         10:25:53:a8:49:3e:c4:5f:f5:f2:fa:5e:3c:e4:3a:5a:0c:9e:
         15:c4:35:be:76:13:96:56:c2:a6:c1:7e:53:3b:e7:61:fd:67:
         17:d2:91:52:6b:b9:26:80:1b:36:b9:a7:7a:fd:52:75:fa:f5:
         6e:8b:b6:91:d5:63:65:ac:9b:f3:b2:68:37:40:c6:f0:29:58:
         b5:fb:c9:dc:be:59:bd:53:52:94:1a:75:7f:a8:28:b5:4c:44:
         41:9c:34:f6:7f:48:6b:0e:d8:a9:ef:16:29:82:ba:9f:db:e5:
         00:92:4c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:48:39 2024 by rpki-client on console-ams.rpki-client.org