Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/323830343a376236343a343030303a3a2f33342d3334203d3e20323731343239.roa
File:                     323830343a376236343a343030303a3a2f33342d3334203d3e20323731343239.roa (raw, json)
Hash identifier:          4UFzZNo58Xl5L7zyqGuduP90QVmfY5qdqV+1VWWZRAU=
Subject key identifier:   28:82:63:06:B2:19:F5:85:39:4C:D1:24:CE:55:E9:33:03:AD:F5:71
Certificate issuer:       /CN=FF08FFB6D0FE39D46098F29E2561500E8827C3B3
Certificate serial:       50B1087FCE17319E428F2722EF20EAF831AC7C74
Authority key identifier: FF:08:FF:B6:D0:FE:39:D4:60:98:F2:9E:25:61:50:0E:88:27:C3:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/323830343a376236343a343030303a3a2f33342d3334203d3e20323731343239.roa
Signing time:             Mon 08 Jul 2024 12:44:05 +0000
ROA not before:           Mon 08 Jul 2024 12:39:05 +0000
ROA not after:            Mon 07 Jul 2025 12:44:05 +0000
asID:                     271429
IP address blocks:        2804:7b64:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b1:08:7f:ce:17:31:9e:42:8f:27:22:ef:20:ea:f8:31:ac:7c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF08FFB6D0FE39D46098F29E2561500E8827C3B3
        Validity
            Not Before: Jul  8 12:39:05 2024 GMT
            Not After : Jul  7 12:44:05 2025 GMT
        Subject: CN=28826306B219F585394CD124CE55E93303ADF571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e4:94:d5:c1:5f:d5:c3:6e:bb:d6:b5:55:0b:
                    e2:13:73:6d:80:5a:64:7e:1d:a2:ff:5d:a1:6f:79:
                    71:1d:20:01:e3:63:43:3a:9b:fa:81:46:cf:49:dd:
                    03:69:5a:a4:a6:0e:d9:ff:42:82:b1:4d:c8:00:cb:
                    99:d0:f7:15:1b:a0:f6:57:8e:53:b2:b8:b6:40:8c:
                    07:46:57:21:a6:aa:ed:16:b4:88:20:8a:ca:19:f9:
                    89:f2:71:60:12:70:db:c6:09:d1:d8:b5:62:35:3f:
                    eb:93:af:6a:9c:bf:c1:a5:73:1a:c4:c7:7d:84:1f:
                    b8:df:f7:46:3d:e3:84:03:82:e0:d8:d0:a7:4a:f5:
                    d6:d8:44:d6:74:53:d9:b7:61:98:d4:49:9c:a2:8f:
                    a2:74:ef:42:07:ca:84:89:59:18:68:ce:e7:9e:76:
                    a3:78:d6:0e:d0:1d:c7:ef:f6:54:54:14:fa:62:3b:
                    d5:cb:34:30:2c:67:bd:98:3d:f2:eb:4b:8e:77:80:
                    bf:46:b9:76:2f:b1:3e:5d:e5:82:3f:0a:5f:7c:ad:
                    2c:93:6c:74:c8:16:8b:21:85:c4:aa:07:d3:8b:20:
                    62:3d:cf:13:95:16:23:6d:d4:3e:24:d8:b9:57:11:
                    42:21:6f:0b:a6:33:fc:d4:b0:b1:bd:a9:88:be:aa:
                    79:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:82:63:06:B2:19:F5:85:39:4C:D1:24:CE:55:E9:33:03:AD:F5:71
            X509v3 Authority Key Identifier:
                keyid:FF:08:FF:B6:D0:FE:39:D4:60:98:F2:9E:25:61:50:0E:88:27:C3:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/323830343a376236343a343030303a3a2f33342d3334203d3e20323731343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b64:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0f:5c:cf:55:cc:6c:b4:64:4c:a6:9f:38:33:a7:e1:39:cc:1e:
         08:b3:c2:fd:81:71:35:2c:1e:06:42:85:7e:98:79:e6:9a:06:
         4d:bd:86:fe:1a:50:77:4e:df:4c:6c:33:b7:54:ab:b0:f5:9c:
         16:5c:fc:17:3a:1b:b4:1c:a1:4c:07:ac:a0:6e:f1:87:ad:cb:
         0c:0c:08:6f:52:8b:94:6a:c9:4b:05:d6:fe:42:46:1e:4b:c4:
         01:8e:2e:1e:93:5f:73:41:41:d9:57:7c:4e:89:df:e3:22:a0:
         cf:1e:a7:68:54:59:61:59:bb:72:94:b3:f7:97:47:3d:5c:cf:
         69:3d:8c:6d:88:13:97:92:75:f9:51:a1:0c:5b:b9:c5:ce:2a:
         bb:78:94:90:ff:45:bd:f3:0c:f4:b4:79:bd:5d:8a:b2:6d:b1:
         10:c6:c1:29:f1:0e:9e:44:44:07:44:95:21:eb:5b:b2:84:85:
         ad:6f:29:11:24:d4:ac:a4:d5:4c:37:f3:db:52:08:df:b9:fe:
         e3:6e:f8:ca:54:16:16:66:74:9d:7c:af:8e:7f:4a:d7:36:6d:
         a3:5d:e3:30:f9:b8:3f:d6:5e:62:0b:41:0d:94:a9:0f:31:b4:
         b2:8a:11:40:c0:03:4c:b8:ce:a5:65:70:c0:73:42:a1:1a:c4:
         3a:3a:73:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:37:59 2024 by rpki-client on console-fra.rpki-client.org