Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a353030303a3a2f34362d3436203d3e20323730323636.roa
File:                     323830343a363936303a353030303a3a2f34362d3436203d3e20323730323636.roa (raw, json)
Hash identifier:          NQHOIe6Bq9ttu9sLWkZNtNdSzUSFTkNZCuGM8xIQBac=
Subject key identifier:   7E:04:4B:C8:F5:26:1B:93:EC:F7:79:42:4B:20:8A:BD:08:02:4F:53
Certificate issuer:       /CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
Certificate serial:       1B7B854FED0AE68370FB74F398BFDC5DB5B3D396
Authority key identifier: 87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a353030303a3a2f34362d3436203d3e20323730323636.roa
Signing time:             Thu 04 Apr 2024 23:09:31 +0000
ROA not before:           Thu 04 Apr 2024 23:04:31 +0000
ROA not after:            Thu 03 Apr 2025 23:09:31 +0000
asID:                     270266
IP address blocks:        2804:6960:5000::/46 maxlen: 46

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:7b:85:4f:ed:0a:e6:83:70:fb:74:f3:98:bf:dc:5d:b5:b3:d3:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
        Validity
            Not Before: Apr  4 23:04:31 2024 GMT
            Not After : Apr  3 23:09:31 2025 GMT
        Subject: CN=7E044BC8F5261B93ECF779424B208ABD08024F53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:45:c6:d2:7b:59:65:be:d0:97:0a:05:b0:69:
                    53:1d:fe:45:6b:13:17:46:47:ee:87:34:d2:3c:23:
                    c7:3b:51:9a:76:ce:a9:9c:9f:e1:68:91:ef:b2:36:
                    e4:cf:fe:dc:86:92:cf:28:1a:32:15:30:b5:41:19:
                    37:75:28:6f:68:2b:57:7e:53:39:5b:6d:6e:66:50:
                    c0:24:06:84:44:cc:6b:bf:a2:73:51:68:0c:f9:15:
                    8f:6d:89:54:6b:25:8c:af:b7:e5:f0:87:90:ef:d7:
                    4e:40:56:29:fc:62:9d:66:2c:be:0c:2b:62:f1:79:
                    81:dc:b1:f3:d4:76:e2:87:43:26:7d:eb:55:63:9c:
                    ca:58:18:3d:66:c7:27:65:b2:5f:ee:3b:d0:54:25:
                    f1:4d:7e:fb:87:2b:02:fc:ab:19:10:84:97:a3:50:
                    44:b0:7a:27:e1:fb:d4:d0:4f:69:e1:55:bf:28:ad:
                    7b:e5:6e:59:e2:ac:e7:2a:d7:80:8a:ef:fe:dc:70:
                    79:88:b0:dc:bc:6a:be:7c:07:49:8a:e5:7c:69:41:
                    a4:21:bd:1a:f7:da:64:fa:80:10:87:fc:2f:ae:7e:
                    be:25:2f:d7:39:9c:bb:8d:ca:42:11:86:4f:ec:2b:
                    02:f3:d3:04:19:40:c1:d9:88:04:73:80:f5:59:d1:
                    60:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:04:4B:C8:F5:26:1B:93:EC:F7:79:42:4B:20:8A:BD:08:02:4F:53
            X509v3 Authority Key Identifier:
                keyid:87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a353030303a3a2f34362d3436203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:5000::/46

    Signature Algorithm: sha256WithRSAEncryption
         84:c6:06:49:84:eb:50:4b:dd:5b:0d:59:48:a6:19:f5:a1:bf:
         49:af:71:2e:2d:8e:d9:a2:cc:e9:a9:8d:fc:ec:e3:ab:b9:9d:
         ac:f2:6e:14:73:be:ea:92:d3:f9:f1:ae:6d:08:04:eb:e4:a8:
         c3:7f:27:1a:5c:b9:52:5f:ee:14:a9:96:09:d2:27:8d:87:8f:
         1e:54:db:25:2e:b0:c7:1c:af:f0:0b:3c:fd:81:bf:e2:f5:96:
         85:d1:79:b5:85:75:c4:83:08:5f:0d:33:77:85:dd:e4:c0:5d:
         5b:91:47:4e:2b:26:ec:a8:47:ed:76:55:63:9a:79:c2:2d:37:
         61:2e:d9:0e:7f:ee:6a:92:44:46:29:75:bd:f9:67:00:1d:93:
         ca:8e:be:cb:bb:e9:9d:c9:c4:65:ce:6e:ce:76:40:f1:73:91:
         80:8a:3d:67:d7:00:be:a6:eb:e3:73:70:9c:7b:19:0d:54:e6:
         62:c5:b6:ef:23:18:b8:ad:c3:90:ac:a3:3e:9c:bf:8b:60:7a:
         dd:89:5b:97:27:af:54:c5:79:65:db:25:f1:c2:27:f5:e4:8d:
         66:6e:ee:f3:15:c4:13:de:12:c0:7c:d1:2b:95:0f:4f:a7:7d:
         40:bd:49:51:af:ac:88:41:f1:63:73:a7:df:ae:bd:ca:9c:11:
         ae:a6:5e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 07:53:26 2024 by rpki-client on console-ams.rpki-client.org