Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/323830343a376434633a3a2f33322d313238203d3e20323731353532.roa
File:                     323830343a376434633a3a2f33322d313238203d3e20323731353532.roa (raw, json)
Hash identifier:          HadNGLZgXsJMGU54kmIhv6JeNWL8Li1GfKKM55vfIC0=
Subject key identifier:   D7:C2:EA:71:D9:8C:6D:2A:31:36:27:00:35:57:54:23:EA:28:74:40
Certificate issuer:       /CN=37EFBC17B63C1B7A0C6D73F7F2E1D428630B499A
Certificate serial:       63036C99C56D5EECC5AC19CBF3945835CE772125
Authority key identifier: 37:EF:BC:17:B6:3C:1B:7A:0C:6D:73:F7:F2:E1:D4:28:63:0B:49:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EFBC17B63C1B7A0C6D73F7F2E1D428630B499A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/323830343a376434633a3a2f33322d313238203d3e20323731353532.roa
Signing time:             Fri 04 Oct 2024 19:05:24 +0000
ROA not before:           Fri 04 Oct 2024 19:00:24 +0000
ROA not after:            Fri 03 Oct 2025 19:05:24 +0000
asID:                     271552
IP address blocks:        2804:7d4c::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:03:6c:99:c5:6d:5e:ec:c5:ac:19:cb:f3:94:58:35:ce:77:21:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37EFBC17B63C1B7A0C6D73F7F2E1D428630B499A
        Validity
            Not Before: Oct  4 19:00:24 2024 GMT
            Not After : Oct  3 19:05:24 2025 GMT
        Subject: CN=D7C2EA71D98C6D2A3136270035575423EA287440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:6e:7e:5a:f8:bd:b1:08:b8:75:7a:4d:a6:
                    57:8d:fd:61:cf:c7:33:b6:84:03:2d:ae:f2:4b:4f:
                    1c:a0:58:27:16:a1:31:c0:23:c1:51:82:01:cd:85:
                    9b:a5:f7:67:01:1b:f0:9f:4f:b9:6c:42:35:ee:00:
                    c9:44:ce:0c:50:b0:d3:62:96:3a:a4:39:25:9c:ab:
                    69:c2:50:44:c3:2c:2c:b3:2f:fb:d3:90:b3:eb:37:
                    29:61:82:90:a9:a8:74:11:b1:41:95:c3:e7:aa:7c:
                    6e:65:84:89:9e:c2:2a:c3:aa:79:56:7a:72:3b:b3:
                    da:36:1b:e9:b7:25:54:66:81:74:b5:cd:5b:ce:a7:
                    0e:6e:00:76:cd:de:14:f6:89:6c:88:f3:c6:d2:46:
                    1f:05:2e:b0:29:01:b0:85:fe:c8:ab:4d:8f:96:d9:
                    ad:c5:92:cb:93:07:a1:56:83:77:b8:9c:fe:72:49:
                    ca:5d:33:74:6b:c9:e6:ec:5e:bb:82:b0:0a:4e:52:
                    5d:1e:3f:4c:64:b4:ef:fb:e7:fb:ca:4f:70:60:c3:
                    d5:50:74:f4:dd:b6:35:95:bb:d0:34:2c:60:75:82:
                    d5:c2:6b:d3:9a:9e:74:12:86:3b:b6:73:c6:f8:0f:
                    c7:ae:ec:3e:4f:29:7c:81:f3:1f:2c:9f:e7:72:15:
                    5e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C2:EA:71:D9:8C:6D:2A:31:36:27:00:35:57:54:23:EA:28:74:40
            X509v3 Authority Key Identifier:
                keyid:37:EF:BC:17:B6:3C:1B:7A:0C:6D:73:F7:F2:E1:D4:28:63:0B:49:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/37EFBC17B63C1B7A0C6D73F7F2E1D428630B499A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EFBC17B63C1B7A0C6D73F7F2E1D428630B499A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/323830343a376434633a3a2f33322d313238203d3e20323731353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:49:b4:ac:c5:05:81:32:93:7c:04:4a:af:fc:c3:ca:ac:dc:
         ca:ca:d8:27:ad:57:e6:a1:28:f7:14:3c:20:bd:57:ac:60:d7:
         64:b5:e4:a7:38:9b:06:bc:df:a7:ce:0e:ee:4d:f5:9a:9f:cf:
         94:e3:8d:c4:41:cf:93:98:4b:d2:8d:7c:b4:b0:f5:ed:c8:d3:
         f3:b6:4e:b5:6a:7f:a7:78:6c:5a:41:c3:75:7e:2e:cc:3c:36:
         b0:f2:22:75:5d:17:3f:76:9a:55:be:06:89:62:ba:00:49:80:
         73:e9:50:31:34:58:61:37:08:88:09:1d:60:c2:2f:db:9d:39:
         bf:d5:e1:8a:7b:b7:ee:59:27:bd:06:e1:d5:f1:7b:ba:c8:0d:
         e1:04:ac:f1:49:eb:37:71:8f:fb:58:45:8d:53:83:1d:c1:8f:
         5b:43:b5:30:f4:a1:db:19:14:c8:21:ac:79:78:3b:14:4f:4b:
         20:ff:75:ed:c6:f2:87:2f:c5:ab:8c:9e:4b:79:ef:be:d3:b0:
         67:3a:db:f6:fa:d4:31:dd:57:5e:25:01:4f:8f:59:9c:dd:4b:
         04:27:40:f8:54:f3:96:8c:7f:dc:e3:66:d8:15:0a:eb:f1:23:
         3b:b6:3b:5b:43:5e:6e:62:07:90:d4:9e:7d:fa:1a:db:95:78:
         59:c7:07:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 04:07:02 2024 by rpki-client on console-fra.rpki-client.org