Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/323830343a373361383a3a2f33322d3332203d3e20323730393239.roa
File:                     323830343a373361383a3a2f33322d3332203d3e20323730393239.roa (raw, json)
Hash identifier:          USX60WJ0j0hF5aZxTsSz1NnmQgYSs2gB4Vo5/UzhnfM=
Subject key identifier:   82:8E:57:C4:F7:2F:E7:50:FD:6E:AA:6A:45:29:95:23:B0:57:E9:38
Certificate issuer:       /CN=96606AE9F5551FA02FD562A96A86DAC89ED5931B
Certificate serial:       781377090E237EC9B1F41A153650C6AE18DFD3FE
Authority key identifier: 96:60:6A:E9:F5:55:1F:A0:2F:D5:62:A9:6A:86:DA:C8:9E:D5:93:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96606AE9F5551FA02FD562A96A86DAC89ED5931B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/323830343a373361383a3a2f33322d3332203d3e20323730393239.roa
Signing time:             Tue 28 May 2024 19:41:56 +0000
ROA not before:           Tue 28 May 2024 19:36:56 +0000
ROA not after:            Tue 27 May 2025 19:41:56 +0000
asID:                     270929
IP address blocks:        2804:73a8::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:13:77:09:0e:23:7e:c9:b1:f4:1a:15:36:50:c6:ae:18:df:d3:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96606AE9F5551FA02FD562A96A86DAC89ED5931B
        Validity
            Not Before: May 28 19:36:56 2024 GMT
            Not After : May 27 19:41:56 2025 GMT
        Subject: CN=828E57C4F72FE750FD6EAA6A45299523B057E938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:4b:b6:d2:c2:79:47:1b:43:5e:21:a7:80:
                    78:bc:de:29:87:23:92:99:dc:87:ce:1f:af:ac:6c:
                    6d:05:cc:eb:0c:4d:42:44:bb:f5:36:15:60:13:6e:
                    15:cc:4b:d0:de:7a:e7:c9:9d:46:b6:22:f9:bf:99:
                    94:d2:8d:14:d4:74:41:f3:3c:5a:bf:41:2f:41:31:
                    1d:65:df:99:a2:e6:ab:34:4c:87:12:62:ea:a1:c9:
                    69:81:13:9c:34:ca:80:bc:44:e3:1f:90:78:9e:9c:
                    01:f3:96:f9:69:a2:4a:4e:69:87:97:16:5f:9a:a7:
                    3a:31:2a:dc:6b:08:31:0e:af:2d:3d:70:7a:93:f9:
                    9f:5a:dd:2f:77:b7:d1:5f:46:19:27:55:91:e1:b5:
                    48:df:09:b7:53:5a:a4:75:6c:27:00:29:8c:d7:8b:
                    65:de:a3:da:af:75:04:f6:cf:be:5e:2c:97:c2:cb:
                    0d:07:1b:af:59:9b:0a:52:b2:ec:99:20:84:70:99:
                    34:e5:27:93:d2:43:b0:71:c8:c1:c8:c5:5d:91:d1:
                    b2:a9:d9:d3:00:71:d8:df:ae:dd:90:fd:c2:49:90:
                    81:eb:b2:a7:17:36:d2:ec:00:8c:c7:4f:7d:ad:25:
                    16:00:11:9a:81:11:6f:93:fb:f3:aa:0d:16:3c:ff:
                    36:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8E:57:C4:F7:2F:E7:50:FD:6E:AA:6A:45:29:95:23:B0:57:E9:38
            X509v3 Authority Key Identifier:
                keyid:96:60:6A:E9:F5:55:1F:A0:2F:D5:62:A9:6A:86:DA:C8:9E:D5:93:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/96606AE9F5551FA02FD562A96A86DAC89ED5931B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96606AE9F5551FA02FD562A96A86DAC89ED5931B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/323830343a373361383a3a2f33322d3332203d3e20323730393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:25:85:b1:c1:b1:ff:90:1d:f7:f1:21:27:46:73:02:be:ba:
         ae:4a:e6:e2:43:fc:e2:2f:97:0e:76:1f:6e:60:50:ce:81:35:
         b1:cb:2e:a4:0d:02:12:bb:e6:10:8b:82:b6:90:44:c9:26:ad:
         1d:57:31:31:bb:e0:48:78:46:61:e6:24:25:b1:61:8e:b0:91:
         96:ba:06:11:8a:e1:71:94:5f:a7:d9:4b:d4:3e:15:37:de:77:
         de:82:90:91:f7:60:8d:58:ba:a8:50:c4:13:fd:8c:df:82:1b:
         f5:0c:96:88:af:7e:2c:8a:ac:1d:c6:62:87:4f:5b:a7:6f:fe:
         9e:d4:af:28:a5:c0:70:24:13:1a:8f:f5:c4:54:5b:b4:9d:e1:
         f5:fe:3b:94:94:f5:02:f5:98:82:d4:c5:15:98:ee:0c:15:fc:
         35:5d:31:77:92:89:5f:84:8a:41:18:d4:60:dc:20:00:e8:45:
         bc:1a:2d:df:5f:7b:0a:09:95:cb:5a:55:cc:f3:33:16:e3:f8:
         ed:d0:ec:fb:da:8b:0d:fb:a6:2c:95:10:79:9a:8b:34:ed:f3:
         0f:c3:09:45:6d:1d:ac:44:72:90:be:09:c7:0d:bd:b6:33:0e:
         14:fc:42:bb:ee:64:d8:14:51:29:19:12:f9:5b:8f:ee:16:3e:
         c6:8d:cb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 07:51:12 2024 by rpki-client on console-ams.rpki-client.org