Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/323830343a373266303a3130303a3a2f34302d3430203d3e20323730383835.roa
File:                     323830343a373266303a3130303a3a2f34302d3430203d3e20323730383835.roa (raw, json)
Hash identifier:          O4ZzB9gdBqVVoEsd5qafdMH6LFhcfi25SF+s8uCK6U4=
Subject key identifier:   8B:D0:51:79:F6:77:3C:04:BF:7E:E0:61:6E:B9:73:39:38:BC:26:4E
Certificate issuer:       /CN=DC049CCDCC417B7071369106C6F115AD908A6D43
Certificate serial:       2A3DB4F085F2A7D9477AB5D20CC7B0E5AA7627D0
Authority key identifier: DC:04:9C:CD:CC:41:7B:70:71:36:91:06:C6:F1:15:AD:90:8A:6D:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC049CCDCC417B7071369106C6F115AD908A6D43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/323830343a373266303a3130303a3a2f34302d3430203d3e20323730383835.roa
Signing time:             Fri 06 Sep 2024 18:55:57 +0000
ROA not before:           Fri 06 Sep 2024 18:50:57 +0000
ROA not after:            Fri 05 Sep 2025 18:55:57 +0000
asID:                     270885
IP address blocks:        2804:72f0:100::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:3d:b4:f0:85:f2:a7:d9:47:7a:b5:d2:0c:c7:b0:e5:aa:76:27:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC049CCDCC417B7071369106C6F115AD908A6D43
        Validity
            Not Before: Sep  6 18:50:57 2024 GMT
            Not After : Sep  5 18:55:57 2025 GMT
        Subject: CN=8BD05179F6773C04BF7EE0616EB9733938BC264E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4f:19:5e:81:1f:37:4d:1a:2a:89:3f:d9:30:
                    01:ef:33:a3:1c:8e:18:24:7b:34:60:1a:74:ac:94:
                    a6:d2:5e:20:68:a8:48:06:79:40:26:0f:da:51:ee:
                    2f:1f:ff:fc:f8:a6:79:35:2a:e3:3d:7a:b2:83:35:
                    91:90:a7:02:14:4f:c3:a3:47:7a:75:4f:ca:fc:21:
                    f0:b4:a0:85:f5:de:cf:35:f6:af:98:c3:95:32:a2:
                    3c:1c:c1:e8:95:2f:74:b7:72:53:0f:c0:27:02:b9:
                    d6:79:7c:68:5a:99:0b:7a:8d:53:92:3c:2d:21:9e:
                    a3:d5:40:18:13:24:2c:92:40:fa:71:bf:ae:4f:38:
                    c6:fd:52:c1:d8:84:78:b9:8b:18:30:de:9e:8c:2d:
                    c9:8b:9e:6e:27:12:70:b5:a4:2e:4d:9b:30:8e:0d:
                    79:e9:fd:56:7b:3a:b5:f6:69:71:58:37:c4:62:81:
                    37:60:f2:08:d8:4c:dd:27:ad:8d:1f:fd:f6:af:68:
                    a8:5a:98:00:a1:e4:85:3e:7e:ba:33:fa:de:61:ec:
                    0a:fa:fa:7c:a1:0a:e9:81:a5:59:ee:5a:c9:cf:fe:
                    38:c1:27:b4:77:6d:d0:77:52:89:b9:e3:5e:ce:5f:
                    e0:88:e9:19:5a:8d:30:d4:f2:fb:10:11:a1:12:db:
                    b6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D0:51:79:F6:77:3C:04:BF:7E:E0:61:6E:B9:73:39:38:BC:26:4E
            X509v3 Authority Key Identifier:
                keyid:DC:04:9C:CD:CC:41:7B:70:71:36:91:06:C6:F1:15:AD:90:8A:6D:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/DC049CCDCC417B7071369106C6F115AD908A6D43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC049CCDCC417B7071369106C6F115AD908A6D43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/323830343a373266303a3130303a3a2f34302d3430203d3e20323730383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72f0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         9a:ab:66:75:fd:6e:24:0e:87:81:0e:51:c1:82:1b:23:10:61:
         9a:95:a0:d2:20:e8:11:63:da:26:1e:55:33:b0:90:73:41:39:
         27:5d:49:c3:ad:d5:7e:1d:0b:5c:95:2c:9d:6c:e0:72:ba:82:
         62:93:d9:03:f7:80:a8:a8:d1:2a:42:47:d0:a7:6f:7a:a0:d5:
         73:2a:25:17:7f:69:c5:32:21:03:e9:31:94:8f:86:67:56:62:
         94:90:05:00:11:d1:60:b7:44:77:4e:74:43:c1:06:b6:e1:ec:
         19:9d:6a:9f:f1:78:c2:8a:69:0b:2b:bc:ce:b1:b5:e8:a3:1d:
         1a:e0:ad:b4:db:34:95:32:c6:a8:43:0a:9b:78:b7:48:22:46:
         a8:5d:77:da:4b:32:ff:82:07:9f:d9:56:54:fe:4c:14:e0:45:
         f2:38:a7:b4:06:8b:80:2a:5e:fc:3b:86:ca:60:ac:e5:35:a4:
         28:0c:e4:30:fa:75:d9:67:34:6c:c6:9b:12:a4:39:ea:74:11:
         1e:20:9e:0f:23:d8:ca:01:4f:24:11:a6:df:d1:4b:16:84:9a:
         ea:a2:a1:ab:da:22:8c:ce:d2:10:08:60:5d:13:c0:43:6d:a4:
         62:ea:ae:74:09:dc:34:6b:0a:66:14:bc:b3:20:0f:b8:a7:2d:
         a5:74:52:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 16:10:32 2024 by rpki-client on console-fra.rpki-client.org