Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/323830343a333336343a383230303a3a2f34302d3430203d3e20323635333933.roa
File:                     323830343a333336343a383230303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier:          tzOGTaW6nuLL5zrtbc3Y751xPDm4t0XozSIII4OKIfo=
Subject key identifier:   BB:AC:8B:C8:D7:23:AF:C1:34:1A:8A:A8:28:E4:E4:0E:FA:2F:E0:D3
Certificate issuer:       /CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
Certificate serial:       074AA3267642187CAF8316ECE8D70EB40263CB05
Authority key identifier: 64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/323830343a333336343a383230303a3a2f34302d3430203d3e20323635333933.roa
Signing time:             Wed 01 May 2024 23:48:41 +0000
ROA not before:           Wed 01 May 2024 23:43:41 +0000
ROA not after:            Wed 30 Apr 2025 23:48:41 +0000
asID:                     265393
IP address blocks:        2804:3364:8200::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:4a:a3:26:76:42:18:7c:af:83:16:ec:e8:d7:0e:b4:02:63:cb:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
        Validity
            Not Before: May  1 23:43:41 2024 GMT
            Not After : Apr 30 23:48:41 2025 GMT
        Subject: CN=BBAC8BC8D723AFC1341A8AA828E4E40EFA2FE0D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:19:df:94:af:5f:96:4f:81:68:c6:78:64:a6:
                    3d:bd:fa:28:aa:cf:cd:a5:f5:fe:fc:d3:75:cc:83:
                    71:45:1b:13:b2:e2:87:7a:d5:7b:b5:eb:bd:01:6a:
                    80:7a:36:53:be:1f:a3:5f:dc:84:d4:5e:56:88:0f:
                    67:74:20:0c:b7:d5:5b:c7:de:05:9b:55:40:31:24:
                    24:d6:35:7c:b8:67:9d:96:50:de:ed:b6:66:4d:c2:
                    d1:01:e4:58:9d:0f:59:ca:b0:a1:94:79:05:93:d6:
                    67:7c:5b:00:08:ec:85:05:f8:d9:f4:4e:c5:f9:b3:
                    c3:7d:46:a2:e2:ce:11:e3:89:42:54:36:56:57:cf:
                    0b:82:6b:60:90:89:a7:37:69:86:6e:af:cd:bf:a8:
                    98:6a:3d:20:cc:c4:25:5f:75:8c:90:38:e6:4c:e9:
                    b1:70:35:dc:7f:71:4a:46:49:66:76:98:cb:77:10:
                    ef:d2:39:c5:9e:38:cb:c4:90:f1:e8:be:41:f5:d4:
                    c5:df:86:03:be:03:a2:1f:2c:2d:fc:a2:53:e3:f8:
                    4a:f7:aa:3e:75:f2:9a:43:74:1b:37:56:b0:aa:e7:
                    3e:ea:d5:90:e3:b5:46:2e:5f:10:c7:b9:00:78:50:
                    a4:f9:7d:d2:b1:07:d1:34:5a:82:aa:48:dd:80:aa:
                    6e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:AC:8B:C8:D7:23:AF:C1:34:1A:8A:A8:28:E4:E4:0E:FA:2F:E0:D3
            X509v3 Authority Key Identifier:
                keyid:64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/323830343a333336343a383230303a3a2f34302d3430203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3364:8200::/40

    Signature Algorithm: sha256WithRSAEncryption
         0f:97:21:a8:9b:85:91:53:e4:05:4a:5f:cd:f7:4a:81:70:2f:
         98:af:24:18:39:f5:80:dd:bf:b0:b7:aa:a4:28:71:1a:95:91:
         e3:13:c6:7e:90:48:c3:5c:27:32:e5:93:12:da:b0:16:97:80:
         d6:52:32:b1:7a:a7:3f:aa:0e:01:03:37:46:cc:97:82:b1:00:
         1a:fd:9e:53:77:43:c6:c0:90:32:59:2b:3d:54:1f:ff:85:ac:
         71:ce:d1:c6:b6:fa:be:21:13:6b:6f:f2:26:77:66:9c:7c:4f:
         0a:f1:09:57:1f:2c:71:c5:93:dd:be:6e:68:2d:14:51:4f:d0:
         e3:09:06:48:43:a9:97:11:28:80:73:63:2b:cc:19:4b:4b:ce:
         e1:37:c9:54:a5:77:6f:0d:c9:de:a5:c6:86:74:29:f1:f2:98:
         2e:ac:f8:ef:43:38:29:5b:b4:7d:2d:b1:d6:81:75:cb:36:e4:
         f0:b6:7b:36:9f:8a:b0:d0:52:03:c8:52:60:14:e3:ad:f3:96:
         ae:52:0d:8a:59:b3:5d:a8:46:b5:08:41:5e:12:2f:12:8c:0e:
         cf:86:1c:81:8d:7b:96:ad:91:bd:73:60:fd:1b:f1:7c:fb:80:
         b1:9e:b6:2d:92:f1:3d:60:c6:b9:9c:46:8d:33:c9:2e:0e:5c:
         ca:6f:9d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 22:39:17 2024 by rpki-client on console-ams.rpki-client.org