Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/323830343a383030303a363030323a3a2f34382d3438203d3e20323731373233.roa
File:                     323830343a383030303a363030323a3a2f34382d3438203d3e20323731373233.roa (raw, json)
Hash identifier:          oLcIZKs2K8YP25bA3IzcQLuUU6oW04l0dmV9XiDCgb8=
Subject key identifier:   16:74:30:13:D4:E0:C3:62:FC:3D:57:0B:E8:17:D6:6C:3F:59:F3:52
Certificate issuer:       /CN=00329BFCE59988BC06ECC86EE26ADD745B04C576
Certificate serial:       44CA88D36EBB5DC65B88CCE4F96286725AE2BDB0
Authority key identifier: 00:32:9B:FC:E5:99:88:BC:06:EC:C8:6E:E2:6A:DD:74:5B:04:C5:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00329BFCE59988BC06ECC86EE26ADD745B04C576.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/323830343a383030303a363030323a3a2f34382d3438203d3e20323731373233.roa
Signing time:             Thu 25 Apr 2024 13:59:20 +0000
ROA not before:           Thu 25 Apr 2024 13:54:20 +0000
ROA not after:            Thu 24 Apr 2025 13:59:20 +0000
asID:                     271723
IP address blocks:        2804:8000:6002::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ca:88:d3:6e:bb:5d:c6:5b:88:cc:e4:f9:62:86:72:5a:e2:bd:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00329BFCE59988BC06ECC86EE26ADD745B04C576
        Validity
            Not Before: Apr 25 13:54:20 2024 GMT
            Not After : Apr 24 13:59:20 2025 GMT
        Subject: CN=16743013D4E0C362FC3D570BE817D66C3F59F352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ff:a7:b5:fb:79:8b:3f:b2:09:0e:99:8c:d2:
                    10:98:c3:52:19:61:09:8f:7c:25:73:d8:13:80:6f:
                    cd:11:24:21:97:a5:79:08:d4:ab:39:e6:db:58:0a:
                    77:81:4f:64:7c:d8:96:e7:fa:2c:ba:bc:08:5a:8f:
                    19:d2:78:09:d6:1f:2f:4e:1d:19:85:8f:d3:96:87:
                    73:f9:de:7b:2b:99:44:ff:5c:f2:b5:49:7b:05:fb:
                    0e:b4:62:97:db:63:29:85:5f:9f:c9:ac:04:a4:52:
                    ff:ed:11:72:26:9a:95:79:0c:4b:86:35:8c:e7:5c:
                    50:76:ad:ae:82:07:e5:05:08:76:e2:cf:fa:b5:33:
                    0e:e4:78:fe:29:f1:7a:ea:a4:c4:d1:03:87:b8:36:
                    f4:d0:81:34:66:56:78:54:00:0f:5b:ba:f0:da:1d:
                    1d:09:e5:81:a9:12:b0:b3:a3:44:64:bb:8f:24:f8:
                    22:54:8a:7f:6b:19:ec:ae:f1:43:8c:e4:95:7a:1d:
                    9e:23:13:c4:cf:c4:a6:fb:dc:8b:e6:d3:9a:c7:a6:
                    19:43:96:70:f0:ee:6e:59:70:f9:20:ba:2a:ea:f9:
                    94:0b:d0:d0:1d:1d:dc:28:20:02:1b:3d:59:7e:f8:
                    e2:ab:3e:97:a4:da:f8:7f:1c:51:82:94:12:82:97:
                    7f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:74:30:13:D4:E0:C3:62:FC:3D:57:0B:E8:17:D6:6C:3F:59:F3:52
            X509v3 Authority Key Identifier:
                keyid:00:32:9B:FC:E5:99:88:BC:06:EC:C8:6E:E2:6A:DD:74:5B:04:C5:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/00329BFCE59988BC06ECC86EE26ADD745B04C576.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00329BFCE59988BC06ECC86EE26ADD745B04C576.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/323830343a383030303a363030323a3a2f34382d3438203d3e20323731373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8000:6002::/48

    Signature Algorithm: sha256WithRSAEncryption
         d2:33:36:c1:08:81:09:33:48:cb:f3:f0:5c:a9:b3:8b:54:08:
         01:ff:21:61:55:37:28:59:a7:64:51:30:26:9a:7d:59:12:51:
         9f:01:58:b9:ec:ee:d0:93:e1:a1:c9:1d:60:42:4c:21:95:b7:
         13:d1:b7:7f:2c:ed:0a:f7:a6:09:78:18:6d:2a:1b:78:7d:9d:
         e5:2f:34:6d:40:59:6f:d7:c1:7a:db:c1:f9:9d:bd:7b:e6:7b:
         c3:6e:eb:8f:bd:36:9c:4a:8e:7f:46:ca:14:a5:37:88:e0:29:
         f7:13:56:74:e1:73:49:2c:89:48:9b:af:59:3c:20:21:f5:be:
         2f:40:26:c3:2b:b8:fb:9f:0c:a0:d0:45:5c:3d:a5:c3:02:57:
         59:b4:df:fe:f0:ad:4e:ee:09:a5:dc:33:81:ff:5d:84:ee:b7:
         ae:7e:98:22:62:68:e5:b1:5f:d5:30:ba:7e:6e:44:75:3d:5e:
         08:48:69:7b:7d:1d:4e:1b:6c:1a:18:cc:44:33:df:02:91:65:
         ed:da:47:5a:f3:77:a7:ef:d5:3e:2e:46:6b:c2:de:bf:98:9f:
         5d:a1:a7:3e:30:2c:1e:ca:dd:49:5e:65:df:05:64:e5:51:19:
         90:9a:d6:8a:f4:64:06:8d:82:5c:f6:45:8a:9f:32:1b:23:fb:
         f6:eb:45:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 00:36:47 2024 by rpki-client on console-ams.rpki-client.org