Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/323830343a366638633a383030303a3a2f33332d3333203d3e20323730363638.roa
File:                     323830343a366638633a383030303a3a2f33332d3333203d3e20323730363638.roa (raw, json)
Hash identifier:          jDBRUse3pCGu62JxfSHU4Yw3tXnmiZbiOZVSmwWMt8A=
Subject key identifier:   C1:20:7D:1A:03:7A:D6:39:0D:EF:9A:08:F9:2F:D1:34:2C:A7:A7:66
Certificate issuer:       /CN=FF5B34241FA8B70EAA5F16545A0A89B675926B59
Certificate serial:       725387453A83F0F1D22D84DC6939AEEC4C0E0599
Authority key identifier: FF:5B:34:24:1F:A8:B7:0E:AA:5F:16:54:5A:0A:89:B6:75:92:6B:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5B34241FA8B70EAA5F16545A0A89B675926B59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/323830343a366638633a383030303a3a2f33332d3333203d3e20323730363638.roa
Signing time:             Thu 04 Apr 2024 12:53:21 +0000
ROA not before:           Thu 04 Apr 2024 12:48:21 +0000
ROA not after:            Thu 03 Apr 2025 12:53:21 +0000
asID:                     270668
IP address blocks:        2804:6f8c:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:53:87:45:3a:83:f0:f1:d2:2d:84:dc:69:39:ae:ec:4c:0e:05:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5B34241FA8B70EAA5F16545A0A89B675926B59
        Validity
            Not Before: Apr  4 12:48:21 2024 GMT
            Not After : Apr  3 12:53:21 2025 GMT
        Subject: CN=C1207D1A037AD6390DEF9A08F92FD1342CA7A766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7f:ff:14:1a:c8:09:3b:cf:90:b2:56:22:e4:
                    68:5e:d5:14:3a:6f:07:10:c0:39:c5:bb:65:b2:cb:
                    27:cb:06:63:be:dd:dd:f7:c8:31:2e:98:3e:cb:d3:
                    1d:76:d1:ff:43:ec:65:80:4b:73:0f:11:90:d2:fd:
                    ba:8b:83:a1:a8:93:3d:a3:84:73:dc:00:67:3e:7c:
                    2e:6e:ea:6e:51:3a:98:21:31:20:80:23:8c:81:bd:
                    4f:d9:a6:41:f1:51:74:dc:d6:66:f5:de:f4:6b:f8:
                    7f:b2:ca:8b:75:93:72:f0:18:aa:42:ba:ae:c2:56:
                    bd:33:d6:e9:1d:9c:98:98:8a:ca:4a:af:11:c6:1d:
                    e2:d9:db:54:11:9c:99:63:22:c5:d4:c3:99:8c:a6:
                    41:b9:e0:82:e3:81:b6:60:11:b3:06:39:e4:bb:aa:
                    5e:ba:d8:0e:cb:0c:55:c6:a6:6b:97:67:d0:f0:ed:
                    17:da:d7:66:ba:1d:f8:9b:d0:70:6c:c5:53:23:0d:
                    71:47:5e:71:81:d2:1e:9b:23:1e:84:ba:05:f7:9f:
                    cd:8d:d8:f9:17:46:f0:cb:eb:89:f3:2c:54:22:19:
                    54:5c:18:b7:81:de:31:75:d5:8a:10:5e:f7:b1:e9:
                    97:ae:5c:19:80:2b:d1:6e:21:89:1e:a1:4c:00:dd:
                    cc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:20:7D:1A:03:7A:D6:39:0D:EF:9A:08:F9:2F:D1:34:2C:A7:A7:66
            X509v3 Authority Key Identifier:
                keyid:FF:5B:34:24:1F:A8:B7:0E:AA:5F:16:54:5A:0A:89:B6:75:92:6B:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/FF5B34241FA8B70EAA5F16545A0A89B675926B59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5B34241FA8B70EAA5F16545A0A89B675926B59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/323830343a366638633a383030303a3a2f33332d3333203d3e20323730363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f8c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         70:8f:8e:05:ee:50:87:59:5c:89:31:e9:e5:d9:24:ff:39:27:
         5a:41:65:53:75:d5:0d:41:27:80:10:88:9d:95:65:99:d9:b4:
         96:48:68:a3:6f:cf:18:85:f7:7c:06:2d:5d:05:7e:47:5f:2f:
         22:ac:59:f2:29:d3:3b:41:28:dd:0f:bb:c0:6a:53:ec:17:bc:
         b3:3d:ed:e8:b8:27:db:09:16:06:4f:f4:d7:e1:69:52:14:3c:
         c9:96:e2:c4:32:66:13:1d:65:ee:12:3f:60:85:dc:38:9e:d1:
         14:e5:3b:8d:3d:27:aa:57:c9:8a:77:77:d2:3e:a6:c0:15:bb:
         93:ed:0f:03:ed:db:27:e7:1e:90:f8:5d:3d:84:15:1d:0c:ce:
         39:cd:ab:bf:1f:7d:bc:12:d8:bb:ea:07:47:86:b1:4d:f9:aa:
         56:1b:3d:a6:4d:9b:05:64:17:fb:b9:0a:74:32:76:1a:fc:4a:
         78:3c:f1:0c:de:45:d2:2e:5f:cb:72:e2:7a:e1:93:e5:0b:d2:
         4e:7f:da:52:d1:64:91:d1:e8:ef:8a:f4:63:e0:be:88:d9:b5:
         60:44:08:e9:9d:7e:27:1a:6b:10:db:52:58:9e:e8:59:bf:21:
         d2:ad:e1:2d:ea:d5:21:c1:6f:97:96:c1:72:59:32:0b:3d:bf:
         be:b5:9e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 11:19:21 2024 by rpki-client on console-ams.rpki-client.org