Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/323830343a366638633a3a2f33332d3333203d3e20323730363638.roa
File:                     323830343a366638633a3a2f33332d3333203d3e20323730363638.roa (raw, json)
Hash identifier:          iEDCrkkYlRAKqEQCO0e7ijpzpmGliM/jCJamEfBBERg=
Subject key identifier:   54:8B:FE:F8:F4:71:EC:72:BA:AB:66:F3:BB:16:6E:E1:11:78:DA:19
Certificate issuer:       /CN=FF5B34241FA8B70EAA5F16545A0A89B675926B59
Certificate serial:       07456624ACB31DFD038B371BFC0531E96A8F2F6F
Authority key identifier: FF:5B:34:24:1F:A8:B7:0E:AA:5F:16:54:5A:0A:89:B6:75:92:6B:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5B34241FA8B70EAA5F16545A0A89B675926B59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/323830343a366638633a3a2f33332d3333203d3e20323730363638.roa
Signing time:             Thu 04 Apr 2024 12:53:20 +0000
ROA not before:           Thu 04 Apr 2024 12:48:20 +0000
ROA not after:            Thu 03 Apr 2025 12:53:20 +0000
asID:                     270668
IP address blocks:        2804:6f8c::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:45:66:24:ac:b3:1d:fd:03:8b:37:1b:fc:05:31:e9:6a:8f:2f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5B34241FA8B70EAA5F16545A0A89B675926B59
        Validity
            Not Before: Apr  4 12:48:20 2024 GMT
            Not After : Apr  3 12:53:20 2025 GMT
        Subject: CN=548BFEF8F471EC72BAAB66F3BB166EE11178DA19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:35:42:c0:9a:d5:ce:48:1d:34:17:62:32:8a:
                    ee:75:13:38:48:00:f1:84:f0:57:47:80:2f:79:e0:
                    6f:8a:2f:a0:f9:48:a0:dc:95:60:4e:aa:bf:93:aa:
                    3d:71:9a:bb:9f:8b:93:77:c6:36:d4:38:5d:1c:54:
                    79:f0:04:e5:85:1a:95:9b:f9:83:71:51:15:51:ab:
                    55:27:be:0b:5e:51:00:ec:93:fd:ea:fe:8e:57:ee:
                    4f:97:a4:fc:8d:81:ab:9a:e3:04:ff:4f:35:8d:20:
                    68:a9:45:cf:2b:07:bf:c8:61:bb:b3:b2:b1:e4:0d:
                    67:20:d6:fb:e0:fd:9b:a4:03:70:e5:69:f4:15:f5:
                    bf:ba:51:34:c9:7e:a4:5c:d1:e7:9d:24:91:7e:b0:
                    21:a5:29:92:64:65:34:2a:ab:08:12:ff:1c:af:0e:
                    b6:b8:86:a9:3b:ab:b2:a3:73:02:ba:84:46:f9:f0:
                    c6:41:e7:85:c1:d6:f6:2d:ca:3d:7e:ba:bb:eb:8f:
                    14:d9:c0:91:8a:8e:a3:a1:a9:4e:9c:59:48:ba:6e:
                    d9:2e:d1:9d:b1:f1:15:d6:3f:39:6a:be:25:44:a3:
                    69:16:2b:9b:04:61:2f:aa:78:62:d0:87:b6:b5:0e:
                    03:41:57:b4:07:95:22:85:cd:d7:c4:e3:66:18:94:
                    4d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8B:FE:F8:F4:71:EC:72:BA:AB:66:F3:BB:16:6E:E1:11:78:DA:19
            X509v3 Authority Key Identifier:
                keyid:FF:5B:34:24:1F:A8:B7:0E:AA:5F:16:54:5A:0A:89:B6:75:92:6B:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/FF5B34241FA8B70EAA5F16545A0A89B675926B59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5B34241FA8B70EAA5F16545A0A89B675926B59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/323830343a366638633a3a2f33332d3333203d3e20323730363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f8c::/33

    Signature Algorithm: sha256WithRSAEncryption
         50:a3:ed:63:80:ff:df:c2:69:2d:7c:5f:93:dc:ab:78:6e:46:
         74:0b:3f:22:04:e6:52:72:7b:ce:ec:c3:2e:40:22:b4:f0:dc:
         66:f7:f8:ad:f5:6f:c0:cb:66:f5:68:63:14:36:e1:e7:fb:f2:
         25:48:64:81:bd:ef:38:44:b2:62:f8:38:99:66:56:fd:8b:49:
         5e:e0:f9:aa:e7:82:30:bb:00:dd:db:19:a6:c5:18:ba:af:d6:
         e3:13:36:7a:57:b0:ea:ac:96:00:1a:27:9a:3d:c5:d7:21:64:
         af:6b:fe:dd:5d:1b:84:ef:0f:d5:ee:30:4f:a4:8f:27:47:aa:
         ce:74:04:b8:87:09:19:ab:63:2f:10:d9:82:8e:7c:e3:25:6a:
         2a:e4:27:c6:fd:a4:03:48:0c:98:e0:57:d7:e3:86:c0:09:d8:
         f8:3d:62:13:36:01:8a:4c:87:48:91:a4:3b:5e:c7:7e:1d:43:
         f0:48:ea:78:36:50:7b:e9:29:0b:11:9a:6f:0a:00:87:a8:5a:
         c6:c2:b1:06:fd:cc:83:16:52:57:e5:3a:00:a9:32:ce:77:83:
         e3:00:53:ab:2d:7f:09:9a:a3:42:5d:cc:35:b6:51:12:86:5c:
         0a:a5:c4:66:52:52:1a:f5:90:2e:3e:9d:f7:49:ca:a3:14:d1:
         a7:1e:0c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 11:19:21 2024 by rpki-client on console-ams.rpki-client.org