Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a3a2f33322d3332203d3e20323730323636.roa
File:                     323830343a363936303a3a2f33322d3332203d3e20323730323636.roa (raw, json)
Hash identifier:          G4Dvl0RdgNiRy0xdow3uBEy0r31MM2crql1SF9gN41w=
Subject key identifier:   C8:A9:1D:AC:21:AE:47:A3:E9:83:35:49:53:EA:25:56:76:E7:8F:9E
Certificate issuer:       /CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
Certificate serial:       33C62B2237812E1B5031385296DA1D35039675F4
Authority key identifier: 87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a3a2f33322d3332203d3e20323730323636.roa
Signing time:             Thu 04 Apr 2024 23:09:35 +0000
ROA not before:           Thu 04 Apr 2024 23:04:35 +0000
ROA not after:            Thu 03 Apr 2025 23:09:35 +0000
asID:                     270266
IP address blocks:        2804:6960::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c6:2b:22:37:81:2e:1b:50:31:38:52:96:da:1d:35:03:96:75:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
        Validity
            Not Before: Apr  4 23:04:35 2024 GMT
            Not After : Apr  3 23:09:35 2025 GMT
        Subject: CN=C8A91DAC21AE47A3E983354953EA255676E78F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f9:4a:80:9e:3d:9d:16:22:9f:ea:fe:ed:16:
                    6e:8e:9c:d5:cb:0a:b2:c1:18:46:b1:91:ee:c1:27:
                    68:7d:53:30:9c:01:b5:45:dd:c2:58:4c:06:ef:57:
                    73:3d:04:0c:4b:52:39:01:bc:d3:d9:78:17:62:c3:
                    ea:3e:fc:2c:16:d9:8b:64:80:59:e3:fb:a9:0a:ad:
                    22:3f:ec:e9:17:13:60:dd:2c:bc:20:63:e1:e6:e8:
                    45:c6:87:de:4a:d4:13:87:86:2d:9c:ed:a4:d5:b7:
                    67:08:c8:f5:fc:c5:da:b6:be:9f:c2:35:d7:e9:df:
                    61:a5:aa:ea:c1:15:11:73:d3:9b:9b:f4:df:7a:08:
                    07:34:ea:c6:9f:9f:bc:73:65:cc:da:fd:37:5d:a0:
                    6b:92:9c:04:2b:48:54:e5:bf:67:4e:9c:0c:11:40:
                    b5:32:78:c3:f2:2c:80:f9:be:6a:ee:98:fc:3b:14:
                    cf:98:5d:88:a0:c3:a0:ce:60:c7:03:4a:62:34:25:
                    8f:50:e0:c4:5e:47:2d:42:8e:5b:7c:68:4e:1a:a6:
                    69:04:70:3a:11:fc:62:f8:86:d7:ad:a2:67:c6:16:
                    36:ba:a1:14:85:7b:e6:a3:37:b5:f5:21:69:1a:f0:
                    ee:c7:11:5f:21:53:c2:05:7b:f2:f5:7c:4d:6e:dc:
                    7f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A9:1D:AC:21:AE:47:A3:E9:83:35:49:53:EA:25:56:76:E7:8F:9E
            X509v3 Authority Key Identifier:
                keyid:87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a3a2f33322d3332203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:3c:28:6b:3d:86:b0:df:42:f8:59:7a:13:64:93:b7:b2:10:
         f5:9f:54:8a:85:19:2d:9e:d3:bd:c2:69:d2:45:5a:d8:62:7e:
         72:cc:cb:3d:25:2f:a8:18:45:7d:dc:1a:22:69:07:e4:00:dd:
         f8:6b:24:66:7f:44:9c:08:79:4d:56:49:20:88:df:eb:8e:60:
         80:8a:cd:57:9d:25:fa:68:20:11:fe:ac:ac:29:99:37:00:c0:
         b7:7c:d9:84:5f:ac:e4:2d:de:78:b7:32:50:6d:9b:ba:60:5a:
         16:21:d0:45:ae:f4:0e:f3:61:3f:8b:18:ef:97:8e:97:bf:eb:
         66:c4:35:6a:50:7d:e4:01:de:2d:46:0a:78:26:15:a4:62:eb:
         c5:90:5f:f8:03:61:5f:03:07:d5:8c:32:ea:b9:7a:e9:21:34:
         b6:45:c2:9f:e5:4f:f9:3f:8a:96:a5:f0:c5:32:94:e4:a6:ed:
         b2:a9:9c:5d:5b:74:6a:19:ab:06:a5:64:dd:e2:e9:3e:db:1d:
         4d:5e:66:43:47:85:a4:e4:26:4f:0d:68:c2:09:61:f8:92:7a:
         8c:f0:80:f2:a1:74:cd:ce:91:4c:96:57:11:e8:00:8e:f4:47:
         d2:27:3a:22:71:04:c5:b0:a4:30:72:69:9b:16:51:45:92:8c:
         f8:af:c5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 07:01:29 2024 by rpki-client on console-fra.rpki-client.org