Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/1/323830343a363935343a3a2f33322d313238203d3e20323730323633.roa
File:                     323830343a363935343a3a2f33322d313238203d3e20323730323633.roa (raw, json)
Hash identifier:          Giy12CZxcFpwFejx1QaINxqg0IjfnI/5kuVF6fBE2d0=
Subject key identifier:   3F:72:D3:93:CF:2F:1E:08:10:37:83:E8:58:03:D1:72:E7:B1:E7:B3
Certificate issuer:       /CN=CC08DC41D500DFB56DD55261F3D06CA5C6495ED4
Certificate serial:       68850A982CB78F8BA85D6E1C389AEBF0671037A6
Authority key identifier: CC:08:DC:41:D5:00:DF:B5:6D:D5:52:61:F3:D0:6C:A5:C6:49:5E:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC08DC41D500DFB56DD55261F3D06CA5C6495ED4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/1/323830343a363935343a3a2f33322d313238203d3e20323730323633.roa
Signing time:             Thu 04 Apr 2024 15:04:55 +0000
ROA not before:           Thu 04 Apr 2024 14:59:55 +0000
ROA not after:            Thu 03 Apr 2025 15:04:55 +0000
asID:                     270263
IP address blocks:        2804:6954::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:85:0a:98:2c:b7:8f:8b:a8:5d:6e:1c:38:9a:eb:f0:67:10:37:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC08DC41D500DFB56DD55261F3D06CA5C6495ED4
        Validity
            Not Before: Apr  4 14:59:55 2024 GMT
            Not After : Apr  3 15:04:55 2025 GMT
        Subject: CN=3F72D393CF2F1E08103783E85803D172E7B1E7B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0b:5b:e8:2e:ee:41:93:2f:b8:81:85:8d:fd:
                    fc:39:c2:2b:dc:98:fb:c8:b5:aa:44:2c:f4:d1:44:
                    65:74:80:fc:18:6c:7f:da:6c:10:1e:5b:b7:95:a7:
                    2d:cf:3a:55:53:45:2c:63:cd:55:6c:89:0f:9c:0a:
                    68:9d:ed:27:b7:10:53:45:59:91:5b:67:05:75:d8:
                    88:43:8a:e6:95:a9:43:05:21:04:ca:6b:af:24:94:
                    a3:70:d3:c8:ee:0c:01:bc:8c:fe:b7:4f:0c:f4:e0:
                    7e:34:98:75:08:cd:a3:b0:0c:7d:13:42:fa:39:6e:
                    4f:85:13:15:5c:09:d8:e5:dd:9e:6a:0d:ad:08:cd:
                    44:4e:c6:dc:e9:ab:a7:9b:1e:47:52:85:56:e3:68:
                    6c:5a:a6:08:af:01:fd:a5:50:64:ab:73:ef:7e:53:
                    87:9e:e7:e0:8d:ae:a2:c4:dc:1d:3e:ae:ba:46:e1:
                    40:d3:b6:de:84:12:cd:65:62:c3:b4:77:20:c1:88:
                    a3:d0:30:8d:be:9c:29:1b:d4:e6:ab:ce:04:0f:fa:
                    fa:97:3e:7b:cd:8f:95:f5:90:53:84:a8:57:f7:cd:
                    af:c2:b3:14:74:28:44:0b:29:be:bf:52:80:d2:fb:
                    14:af:b1:bb:b9:b5:26:59:b4:21:cd:3e:f8:a5:12:
                    a2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:72:D3:93:CF:2F:1E:08:10:37:83:E8:58:03:D1:72:E7:B1:E7:B3
            X509v3 Authority Key Identifier:
                keyid:CC:08:DC:41:D5:00:DF:B5:6D:D5:52:61:F3:D0:6C:A5:C6:49:5E:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/1/CC08DC41D500DFB56DD55261F3D06CA5C6495ED4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC08DC41D500DFB56DD55261F3D06CA5C6495ED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/1/323830343a363935343a3a2f33322d313238203d3e20323730323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6954::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:05:08:00:5c:ce:74:5f:54:a3:0e:37:64:ca:96:6f:16:1d:
         20:8c:fc:5d:54:21:dc:4b:ce:7e:3e:20:a1:41:71:e4:8a:9e:
         a0:e5:48:95:c4:d9:71:5a:7d:90:b7:6d:6a:ed:de:bf:02:cc:
         67:aa:25:a7:39:0e:20:3e:51:55:0e:1b:62:34:2b:8d:90:eb:
         61:f1:33:95:c8:10:35:e6:bf:f0:04:b3:6c:0c:64:5e:8d:1b:
         d0:0f:1d:d5:99:79:4c:1c:79:dd:6b:01:de:a0:f0:6f:02:b8:
         89:14:1d:7d:d7:dc:29:79:f3:a6:77:87:0b:83:77:cd:bb:de:
         e8:8c:33:a0:d6:7a:35:06:38:32:e4:98:c6:b4:c0:34:e2:4e:
         a3:d1:4f:23:9a:36:60:6f:ba:e7:ea:26:a7:b8:e7:4a:2c:d0:
         d4:9a:7f:07:81:1d:96:79:04:15:d1:fa:34:78:5c:4c:90:ed:
         56:69:7a:ce:c1:db:fc:48:95:85:3c:02:d4:f0:55:f3:45:06:
         61:5a:9a:1a:84:8f:03:ca:c2:64:a9:71:a9:f5:3c:6a:bb:f1:
         00:13:4b:f6:24:94:81:01:ac:dc:fc:f2:5a:95:86:46:fa:cf:
         d0:67:ea:cd:bf:a6:fb:33:8d:2d:87:05:4f:bf:8b:53:d5:cc:
         eb:bb:2e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 24 13:50:22 2024 by rpki-client on console-fra.rpki-client.org