Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a333a3a2f34382d3438203d3e20323730323636.roa
File:                     323830343a363936303a333a3a2f34382d3438203d3e20323730323636.roa (raw, json)
Hash identifier:          uJqTnKhlnNRLRU9OGtxWcjyCG+1+vPT+pzuivsXXZwM=
Subject key identifier:   B8:7E:CA:DF:7E:33:6E:21:18:22:B6:AB:2F:20:5E:1B:20:B5:B4:6D
Certificate issuer:       /CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
Certificate serial:       561A8E6D81057EDF1F00F2C3CAAC2747A66638BE
Authority key identifier: 87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a333a3a2f34382d3438203d3e20323730323636.roa
Signing time:             Thu 04 Apr 2024 23:09:43 +0000
ROA not before:           Thu 04 Apr 2024 23:04:43 +0000
ROA not after:            Thu 03 Apr 2025 23:09:43 +0000
asID:                     270266
IP address blocks:        2804:6960:3::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:1a:8e:6d:81:05:7e:df:1f:00:f2:c3:ca:ac:27:47:a6:66:38:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
        Validity
            Not Before: Apr  4 23:04:43 2024 GMT
            Not After : Apr  3 23:09:43 2025 GMT
        Subject: CN=B87ECADF7E336E211822B6AB2F205E1B20B5B46D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7e:ac:4c:7b:fc:b4:c6:7e:8b:40:b0:24:53:
                    d0:fe:8e:7c:e9:e5:6e:b0:e6:82:7a:09:67:92:53:
                    89:8d:1a:fe:47:0c:29:dd:78:10:6d:4e:69:b1:3c:
                    2a:89:a0:34:4e:22:f6:e9:5f:13:22:3d:4b:4e:7f:
                    cd:97:f1:72:ce:7f:d8:ad:a8:28:80:21:7c:57:ec:
                    0a:fe:46:01:d7:e9:2c:c8:95:a3:32:1a:a4:42:36:
                    ae:5c:88:4f:92:b1:ba:90:81:28:9a:fc:12:fc:1d:
                    46:bc:77:40:f6:da:09:e0:d3:dc:77:02:1c:4f:ce:
                    d4:20:1e:70:7c:09:7b:9f:7a:67:64:2b:0b:a4:e0:
                    0d:06:40:3f:37:e7:3b:8f:ae:6c:17:4f:53:c8:b0:
                    30:93:03:85:3f:83:fc:eb:41:dc:29:4f:92:11:83:
                    13:3e:0d:e1:3b:15:94:91:fd:e8:5e:1f:b1:d4:ba:
                    f2:36:ee:15:4b:c0:5f:1c:24:d4:36:69:df:21:bc:
                    09:ec:8e:02:2b:a6:77:2b:f6:03:9d:4a:2c:21:c3:
                    4c:ae:d3:1b:4e:3d:c7:4f:91:4b:ef:eb:ab:bc:e9:
                    ac:4d:d7:c8:e1:5f:ea:c1:61:0f:c8:e6:d7:86:ab:
                    86:7c:ce:60:64:b7:77:1b:3f:e0:6e:0f:d0:05:83:
                    03:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7E:CA:DF:7E:33:6E:21:18:22:B6:AB:2F:20:5E:1B:20:B5:B4:6D
            X509v3 Authority Key Identifier:
                keyid:87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a333a3a2f34382d3438203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:bf:2c:6d:53:48:01:32:ad:f1:b2:50:22:4d:35:d9:12:c9:
         ad:56:ee:39:78:c8:ee:64:33:22:1f:0a:0a:e7:6b:51:83:ec:
         ac:6e:78:d9:1a:cc:d5:a4:c2:d4:07:11:91:f0:4b:ac:f2:65:
         68:38:7a:f1:a5:a9:89:3f:56:63:8a:ab:81:bb:8c:21:a3:c5:
         58:b9:00:3f:f8:e6:63:c6:e4:17:fa:5c:e5:05:85:e7:fc:4d:
         56:41:e6:cc:4b:8b:9e:63:04:9a:bd:93:3a:3e:f1:2a:5f:e7:
         6d:91:7e:a2:a0:1c:2b:3f:76:73:51:06:5a:be:cc:27:4f:5d:
         1c:46:8d:3a:e3:22:fe:b9:0e:08:13:69:19:60:e9:5d:d5:5e:
         63:95:45:87:af:e3:4b:b9:32:34:e1:ca:0b:7a:1f:28:da:0f:
         bd:b3:4b:98:64:ab:ad:23:27:77:1c:98:d6:b5:eb:d0:07:0a:
         17:44:fe:49:84:6a:90:c5:54:0e:06:09:21:a4:4c:9d:bd:36:
         e3:2a:6a:87:07:72:fb:54:bd:26:ac:7f:52:25:6c:2d:ec:9d:
         bd:d0:97:91:5d:b7:9e:bf:06:06:bb:89:d9:00:a0:d2:cd:2c:
         15:b3:cb:49:2e:39:95:0e:ba:6b:60:53:26:73:39:55:13:81:
         69:db:8e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 07:01:29 2024 by rpki-client on console-fra.rpki-client.org