Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/323830343a313064343a383030303a3a2f33332d3333203d3e20323632333736.roa
File:                     323830343a313064343a383030303a3a2f33332d3333203d3e20323632333736.roa (raw, json)
Hash identifier:          S5HaB3f4uxv8M1+wAO0mS532xnWcFuFrC4vp/hpCxRE=
Subject key identifier:   2F:EA:F2:03:77:7C:D4:14:F5:CD:9C:8E:8D:B3:F7:C5:65:86:E0:40
Certificate issuer:       /CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
Certificate serial:       39BC429E5ACDD8AC9355D996CCDD1B7549783E82
Authority key identifier: C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/323830343a313064343a383030303a3a2f33332d3333203d3e20323632333736.roa
Signing time:             Tue 04 Jun 2024 17:35:02 +0000
ROA not before:           Tue 04 Jun 2024 17:30:02 +0000
ROA not after:            Tue 03 Jun 2025 17:35:02 +0000
asID:                     262376
IP address blocks:        2804:10d4:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:bc:42:9e:5a:cd:d8:ac:93:55:d9:96:cc:dd:1b:75:49:78:3e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
        Validity
            Not Before: Jun  4 17:30:02 2024 GMT
            Not After : Jun  3 17:35:02 2025 GMT
        Subject: CN=2FEAF203777CD414F5CD9C8E8DB3F7C56586E040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:47:e5:50:4b:db:d2:9f:f6:d3:6b:bd:af:68:
                    94:5f:ad:4b:78:a5:52:05:b4:8f:9e:48:b2:00:c0:
                    69:96:b9:7b:c0:b0:61:41:0b:c4:bb:71:7c:9a:52:
                    05:5a:60:22:43:04:4d:dd:82:9d:1b:db:a4:c6:cb:
                    74:b3:63:5f:84:2a:53:90:4a:20:8f:4b:0b:a4:02:
                    70:3a:f0:db:f5:3b:65:94:e5:89:2f:6d:c7:d9:c0:
                    2c:51:5f:63:e6:2f:77:73:c5:2f:60:59:c8:b1:6c:
                    7c:b6:37:2e:5d:0f:e9:49:21:2b:a2:4d:24:db:1a:
                    71:b7:09:95:7c:4a:50:9a:de:19:42:f6:5d:c4:61:
                    65:5b:8e:28:5b:ad:3d:e2:c7:d8:f8:00:f8:51:2b:
                    35:d2:16:96:b1:7e:64:15:8f:0c:5d:d5:d8:ee:b8:
                    10:ab:cf:62:5e:5e:5c:99:41:19:46:67:89:bc:03:
                    3f:00:d9:a6:00:cb:4d:a7:3d:ff:22:b7:cf:e8:8c:
                    d3:59:14:3e:ae:eb:06:aa:54:de:54:ea:52:f1:b3:
                    a6:03:58:24:4a:83:84:51:0d:d2:1b:41:00:e3:f7:
                    23:58:c1:89:f7:fc:99:a5:11:fd:2b:3d:25:ad:d4:
                    23:cb:c7:2e:7e:7b:c4:71:d9:28:cf:9d:b8:5d:c4:
                    3a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EA:F2:03:77:7C:D4:14:F5:CD:9C:8E:8D:B3:F7:C5:65:86:E0:40
            X509v3 Authority Key Identifier:
                keyid:C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/C47C4419F3B0301460D71A68A39D35E25A0926C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/323830343a313064343a383030303a3a2f33332d3333203d3e20323632333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10d4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         25:85:a4:a6:cc:d4:8d:83:f9:20:1b:85:84:34:5a:ee:d1:a2:
         9d:61:d0:67:11:9d:17:90:2b:28:47:f7:32:00:1b:f7:5d:2e:
         c4:d6:5e:92:21:f7:f9:d1:2f:55:96:36:56:b6:08:3a:a1:2b:
         4f:c3:eb:bd:29:2f:4d:5c:5a:cc:fc:0e:21:7b:40:50:08:df:
         c9:c2:8c:5e:0f:2b:59:ec:22:c8:15:16:0f:a3:dd:81:82:4b:
         6b:19:fe:69:25:76:8f:9a:47:2a:4a:d5:1e:ed:44:01:0b:fa:
         6d:34:0b:f0:68:bc:b3:86:b7:58:2c:35:72:3f:4a:06:1a:77:
         57:57:ff:55:5f:f9:13:d6:18:47:b5:1b:ae:c1:f6:4e:8d:b4:
         e2:5b:5b:88:cd:7e:9f:60:2d:c1:53:6d:32:01:d4:ae:ea:d6:
         42:a8:f6:24:19:f4:39:41:03:f4:45:00:74:97:0e:11:aa:a3:
         5e:94:c0:ea:14:dc:2d:72:0d:7e:a7:3a:11:a2:67:27:ea:ef:
         fb:2c:f9:be:44:61:c8:90:a7:29:57:66:cb:5e:b5:f6:5a:c0:
         53:7b:af:43:fc:39:47:7b:d4:87:a0:ec:df:c4:06:3a:a8:73:
         34:8e:21:99:d7:b4:bb:53:e0:e7:88:fc:b9:aa:29:45:15:2d:
         bf:a7:e2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 04:19:05 2024 by rpki-client on console-fra.rpki-client.org