Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/323830343a313064343a3a2f33322d3332203d3e20323632333736.roa
File:                     323830343a313064343a3a2f33322d3332203d3e20323632333736.roa (raw, json)
Hash identifier:          ZpXdGhPbFB0bY6dBT3prX4YYRCstEzHHJz+thNA0kTY=
Subject key identifier:   8B:A8:32:B7:7C:C0:18:F3:E7:DA:E4:55:17:2F:2F:19:6A:44:E8:7A
Certificate issuer:       /CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
Certificate serial:       2BF493CB2B9FFA0E9D54E5E31E76EAB86D4642C4
Authority key identifier: C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/323830343a313064343a3a2f33322d3332203d3e20323632333736.roa
Signing time:             Tue 04 Jun 2024 17:34:18 +0000
ROA not before:           Tue 04 Jun 2024 17:29:18 +0000
ROA not after:            Tue 03 Jun 2025 17:34:18 +0000
asID:                     262376
IP address blocks:        2804:10d4::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f4:93:cb:2b:9f:fa:0e:9d:54:e5:e3:1e:76:ea:b8:6d:46:42:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
        Validity
            Not Before: Jun  4 17:29:18 2024 GMT
            Not After : Jun  3 17:34:18 2025 GMT
        Subject: CN=8BA832B77CC018F3E7DAE455172F2F196A44E87A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bf:60:0d:93:7f:b3:ef:23:72:71:5d:92:c1:
                    ba:ad:c1:59:0e:f4:d8:b3:73:32:21:59:cd:90:a6:
                    c3:80:c7:24:73:7f:51:31:6f:d8:29:8b:f5:e3:18:
                    1a:f9:74:be:83:52:51:ce:44:0d:10:63:cd:ea:81:
                    9a:12:1b:9c:6d:33:d8:47:34:49:aa:f0:03:31:88:
                    96:49:84:44:6a:76:dc:73:71:8d:4f:6b:3d:e7:13:
                    5f:f5:c9:b9:28:25:89:a2:03:9b:b5:6b:7f:f8:05:
                    6f:97:a9:7e:92:b4:00:8a:1c:fb:67:ab:4b:9c:69:
                    69:49:0f:aa:49:fb:ad:eb:e2:cf:1f:57:f0:47:07:
                    16:bf:5a:6c:cb:04:ea:41:ee:53:cd:ea:25:7b:f4:
                    c7:56:dd:96:90:33:97:f6:cc:5f:69:75:22:a5:6d:
                    e2:57:ec:c2:e1:b1:e4:dc:df:e6:6d:ab:65:bb:f6:
                    7b:8a:cf:ab:7f:df:11:1b:44:bf:d0:0a:30:34:a1:
                    17:9d:51:d3:69:fd:04:95:1c:68:dd:a2:7e:de:c3:
                    34:eb:69:07:88:fa:76:8f:62:e2:da:7c:75:9c:54:
                    cb:54:01:af:ff:89:ab:cf:70:17:d3:1c:7e:26:3e:
                    59:c9:cb:3c:93:58:46:dc:c6:ab:ae:dc:5a:98:22:
                    20:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A8:32:B7:7C:C0:18:F3:E7:DA:E4:55:17:2F:2F:19:6A:44:E8:7A
            X509v3 Authority Key Identifier:
                keyid:C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/C47C4419F3B0301460D71A68A39D35E25A0926C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/323830343a313064343a3a2f33322d3332203d3e20323632333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:ea:cf:f6:3f:bb:52:35:2c:a5:a8:42:ec:d2:37:40:ad:37:
         6b:4c:28:14:99:75:c5:97:45:30:dd:df:61:49:a6:df:0f:64:
         2a:8e:be:c2:b3:2f:24:20:a9:c0:55:b6:3a:16:72:ce:27:4d:
         c9:a3:87:5a:96:cf:b3:20:ff:5f:aa:72:7b:cf:e9:d4:ac:2f:
         d3:d3:49:ee:7d:a4:5d:69:a6:70:a8:b2:1c:7e:c7:9d:59:3c:
         e2:79:89:c1:03:06:95:ba:87:1b:2d:c6:07:1b:f8:3e:e0:f7:
         21:c1:d8:63:68:f3:00:ce:39:4a:fe:26:c9:f1:57:68:9f:1a:
         21:66:34:24:9b:bd:0a:c1:54:a7:a3:85:3c:33:cf:55:c5:01:
         b7:cb:98:3d:aa:d5:ae:c7:39:e3:72:b0:02:1b:75:24:8c:19:
         1f:f2:d6:29:62:e5:f2:22:94:d4:bc:9b:c2:8b:10:ce:c8:2c:
         aa:8b:a4:68:e7:58:e1:fb:fa:4a:4d:a0:31:d4:89:fd:c5:18:
         a6:b5:dd:c6:5c:7c:7f:6b:53:e9:34:bd:1a:a3:8a:c2:17:b9:
         2f:7e:86:63:34:23:8a:08:69:5a:fd:04:88:0d:42:26:38:03:
         68:de:33:d8:de:18:14:ad:ad:11:da:7b:12:ec:fe:bc:fb:ff:
         2b:02:0b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 04:19:05 2024 by rpki-client on console-fra.rpki-client.org