Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/323830343a383030303a363030343a3a2f34382d3438203d3e20323731373233.roa
File:                     323830343a383030303a363030343a3a2f34382d3438203d3e20323731373233.roa (raw, json)
Hash identifier:          tNawWTvJIijDHsJz7U5+KRzwJGGB5gFa35nLGWfkaio=
Subject key identifier:   DC:EE:3D:A1:E9:CA:4F:32:2E:BD:AD:1B:0B:B9:EB:FF:89:81:3B:86
Certificate issuer:       /CN=00329BFCE59988BC06ECC86EE26ADD745B04C576
Certificate serial:       358F2C75C6EFAF73385099E0D1649BDBD11BFD45
Authority key identifier: 00:32:9B:FC:E5:99:88:BC:06:EC:C8:6E:E2:6A:DD:74:5B:04:C5:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00329BFCE59988BC06ECC86EE26ADD745B04C576.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/323830343a383030303a363030343a3a2f34382d3438203d3e20323731373233.roa
Signing time:             Thu 25 Apr 2024 14:00:10 +0000
ROA not before:           Thu 25 Apr 2024 13:55:10 +0000
ROA not after:            Thu 24 Apr 2025 14:00:10 +0000
asID:                     271723
IP address blocks:        2804:8000:6004::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:8f:2c:75:c6:ef:af:73:38:50:99:e0:d1:64:9b:db:d1:1b:fd:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00329BFCE59988BC06ECC86EE26ADD745B04C576
        Validity
            Not Before: Apr 25 13:55:10 2024 GMT
            Not After : Apr 24 14:00:10 2025 GMT
        Subject: CN=DCEE3DA1E9CA4F322EBDAD1B0BB9EBFF89813B86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:09:3c:0a:a8:83:b3:e4:a8:fc:34:b1:86:8a:
                    49:38:77:fc:c8:b5:18:19:0a:db:28:72:fa:0e:e5:
                    e9:22:d5:90:62:b6:7f:e7:7d:e3:e5:b5:b4:ab:47:
                    bb:5b:21:ed:d7:31:65:3f:05:9a:bc:ba:1e:54:74:
                    41:a2:9e:19:d5:4c:bd:ff:49:e3:9b:dc:f1:8a:56:
                    7d:e2:85:a3:80:50:3d:13:35:aa:b6:0a:ee:a8:53:
                    e6:e0:f5:74:a4:07:a5:b5:87:3c:e8:0c:58:82:85:
                    0e:e3:64:14:f0:59:92:ad:53:5b:8c:c9:63:66:c7:
                    bb:6c:be:e8:af:c0:cb:87:75:28:d8:f7:7f:22:62:
                    a7:18:74:8c:6c:4f:86:7c:2d:4d:ca:ca:60:c0:3a:
                    82:71:a9:55:c7:6e:1b:e6:72:fd:6b:7e:ab:9f:05:
                    d5:ab:79:12:eb:29:31:75:1f:4a:a6:b5:ca:5a:1d:
                    d8:66:e0:07:57:2d:96:e4:88:16:74:be:98:a1:fa:
                    ed:db:d5:d5:95:bc:8b:50:ba:c7:a5:cb:ef:0a:b4:
                    bd:21:e6:b8:92:6b:5e:c6:23:dd:f7:14:ae:df:85:
                    ba:33:22:19:4e:b4:ed:37:45:34:79:8a:09:21:65:
                    f9:cb:37:fc:d7:ab:34:04:06:15:3e:25:a2:f0:0a:
                    f9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EE:3D:A1:E9:CA:4F:32:2E:BD:AD:1B:0B:B9:EB:FF:89:81:3B:86
            X509v3 Authority Key Identifier:
                keyid:00:32:9B:FC:E5:99:88:BC:06:EC:C8:6E:E2:6A:DD:74:5B:04:C5:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/00329BFCE59988BC06ECC86EE26ADD745B04C576.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00329BFCE59988BC06ECC86EE26ADD745B04C576.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/323830343a383030303a363030343a3a2f34382d3438203d3e20323731373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8000:6004::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:7e:06:53:de:27:44:82:a9:8c:b8:0f:22:72:0f:1f:c1:82:
         ea:81:99:89:d9:38:92:3c:e5:f6:65:c5:e5:7c:7d:e5:a7:93:
         94:2f:45:c4:84:b3:99:24:c9:ac:d7:b0:1f:a4:8a:2e:44:b4:
         c3:29:87:1a:fd:c3:fc:97:32:ce:23:fe:a3:5c:56:0f:aa:ba:
         99:49:2d:07:3e:25:a4:6d:7c:e9:31:b9:99:2f:66:33:1e:23:
         37:cf:1e:0a:f7:6d:e9:c7:e9:98:87:53:df:81:60:a3:92:ea:
         92:6f:39:ed:04:35:87:18:e4:1b:a6:3e:dd:62:06:f8:76:be:
         5f:42:0b:29:c4:6a:56:95:b6:4d:19:2d:9c:22:58:97:7b:17:
         77:44:56:be:4c:89:1d:2c:75:1c:aa:c2:cb:f9:79:7a:a7:2d:
         7c:04:f8:84:8e:2e:b0:15:b5:2d:c8:56:32:21:d6:2a:5e:d6:
         0d:49:7b:96:7c:00:a7:b4:cb:a4:93:5e:3b:ab:45:ae:50:58:
         f3:d1:17:26:e6:b7:c1:e1:4e:e0:8b:6d:82:5c:7c:bb:38:7a:
         6c:67:8e:c8:d4:76:6f:fd:79:c1:75:68:4a:ec:5e:e3:72:be:
         eb:f5:d6:3b:90:4e:3f:00:2f:60:27:49:0f:f5:67:78:2e:71:
         dd:ad:37:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 00:36:47 2024 by rpki-client on console-ams.rpki-client.org