Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a373030303a3a2f33362d3336203d3e20323730323636.roa
File:                     323830343a363936303a373030303a3a2f33362d3336203d3e20323730323636.roa (raw, json)
Hash identifier:          EI7/jUXsl8wkF0GtFrOWwTPEOjUKpFrreVCvkyx7JOs=
Subject key identifier:   42:A6:B3:F3:83:4C:75:BA:1E:3B:86:AD:7F:77:D9:29:25:E7:E7:94
Certificate issuer:       /CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
Certificate serial:       7357D5161FB1035D09F11D238406233F64323F8D
Authority key identifier: 87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a373030303a3a2f33362d3336203d3e20323730323636.roa
Signing time:             Thu 04 Apr 2024 23:09:34 +0000
ROA not before:           Thu 04 Apr 2024 23:04:34 +0000
ROA not after:            Thu 03 Apr 2025 23:09:34 +0000
asID:                     270266
IP address blocks:        2804:6960:7000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:57:d5:16:1f:b1:03:5d:09:f1:1d:23:84:06:23:3f:64:32:3f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
        Validity
            Not Before: Apr  4 23:04:34 2024 GMT
            Not After : Apr  3 23:09:34 2025 GMT
        Subject: CN=42A6B3F3834C75BA1E3B86AD7F77D92925E7E794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:96:02:26:c7:d6:26:28:0c:5b:9e:6e:9b:d8:
                    85:37:75:51:85:71:6a:77:be:0e:e7:aa:d5:37:78:
                    04:21:35:af:b1:bd:be:a4:5a:9c:19:41:86:ef:ac:
                    c4:ee:84:56:fa:3a:8b:e2:bf:9b:f1:3a:6e:20:0c:
                    3a:ef:1f:18:c5:c9:bd:fb:40:c0:be:19:1c:2b:aa:
                    db:ad:b2:4f:4b:dc:e2:03:ea:97:97:9f:f6:7e:ef:
                    32:41:30:24:28:0d:bd:27:83:69:a6:e5:ac:ba:3f:
                    ae:22:47:69:ed:8b:cb:6d:72:9d:9c:5f:9f:90:55:
                    fd:b1:46:2b:8c:0e:cd:ce:82:df:66:c1:eb:72:81:
                    fe:07:03:bc:7f:1a:aa:21:ff:53:22:c0:a6:d7:8d:
                    66:ec:a5:ba:3e:f6:f2:76:c5:ff:98:a2:01:cf:9d:
                    b5:7c:da:88:b2:34:08:86:66:cf:82:d2:90:4e:e2:
                    f1:86:9b:8b:6a:82:e8:14:66:32:25:aa:4b:aa:2c:
                    6b:9a:11:41:02:70:d0:d3:9f:49:38:5a:6f:ba:00:
                    f4:a4:44:5c:95:1b:07:78:7f:d5:5e:fb:56:6f:c7:
                    61:04:ec:93:2e:b6:57:cf:e6:ae:4c:c9:b3:ad:0a:
                    e5:b0:05:83:80:62:88:72:ec:1c:32:d9:03:77:22:
                    b6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A6:B3:F3:83:4C:75:BA:1E:3B:86:AD:7F:77:D9:29:25:E7:E7:94
            X509v3 Authority Key Identifier:
                keyid:87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a373030303a3a2f33362d3336203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a8:e6:82:7d:22:bb:d5:a4:63:07:6f:db:04:cf:4a:91:3d:9b:
         55:ac:8c:52:8e:e2:2e:e2:ae:66:f5:44:5a:5f:f4:db:7d:8a:
         64:a6:83:9d:2e:04:82:fb:15:23:05:0f:17:1f:c3:54:21:04:
         f7:ed:64:52:55:9e:90:51:76:dd:cc:7c:61:ab:60:60:82:55:
         51:a7:31:97:b7:5d:0a:d3:83:b0:b2:0d:5f:59:16:d5:55:b0:
         f3:65:94:88:54:cd:00:71:ef:e9:9a:cf:6f:35:c8:39:d1:9b:
         d6:cf:e4:e5:8e:f8:23:47:30:0a:55:51:bc:03:47:39:ba:6c:
         b6:7f:69:37:e3:db:f3:c8:69:fe:17:c5:6f:a1:ad:90:d1:c0:
         04:aa:1b:59:7c:a1:5a:3a:91:13:03:83:9b:b0:c4:ae:28:26:
         40:e3:63:c0:35:51:90:3a:06:7c:24:d2:93:e7:9a:c1:32:6d:
         92:2c:2d:2a:40:78:75:38:fe:c5:2f:4c:a4:20:bd:e2:e5:03:
         7b:b1:99:72:d3:5d:b2:a3:2f:8f:c9:b6:42:a5:ab:43:8f:7a:
         95:0a:0b:20:33:81:4f:01:3b:7f:81:46:22:96:9d:79:11:c5:
         49:39:52:49:47:94:15:82:38:0a:10:3a:04:43:29:35:95:46:
         1c:52:70:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 07:01:29 2024 by rpki-client on console-fra.rpki-client.org