Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/323830343a363137633a383030303a3a2f33332d3333203d3e20323639323337.roa
File:                     323830343a363137633a383030303a3a2f33332d3333203d3e20323639323337.roa (raw, json)
Hash identifier:          7syaXhd+cXuhMGkWdcQc/398k4DENGfvvLZ2cJUkIv0=
Subject key identifier:   CC:16:61:48:18:41:B3:AF:20:FD:B9:01:FD:7F:E7:FB:AB:09:D4:77
Certificate issuer:       /CN=67070564D53ACB6604FA560F1E051D47A5C3F657
Certificate serial:       46A875E0C24FC2C0393BA5C5A71777A605BB010E
Authority key identifier: 67:07:05:64:D5:3A:CB:66:04:FA:56:0F:1E:05:1D:47:A5:C3:F6:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67070564D53ACB6604FA560F1E051D47A5C3F657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/323830343a363137633a383030303a3a2f33332d3333203d3e20323639323337.roa
Signing time:             Thu 04 Apr 2024 03:11:59 +0000
ROA not before:           Thu 04 Apr 2024 03:06:59 +0000
ROA not after:            Thu 03 Apr 2025 03:11:59 +0000
asID:                     269237
IP address blocks:        2804:617c:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a8:75:e0:c2:4f:c2:c0:39:3b:a5:c5:a7:17:77:a6:05:bb:01:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67070564D53ACB6604FA560F1E051D47A5C3F657
        Validity
            Not Before: Apr  4 03:06:59 2024 GMT
            Not After : Apr  3 03:11:59 2025 GMT
        Subject: CN=CC1661481841B3AF20FDB901FD7FE7FBAB09D477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0c:98:af:f9:98:66:4b:fe:bf:a2:f4:4c:49:
                    4d:ff:63:a6:da:46:8b:2d:dc:c2:a4:c8:b2:e9:0f:
                    36:e7:ae:5a:fc:8c:5f:5b:df:04:2e:bf:a6:cd:30:
                    4d:56:bd:60:f2:c0:08:fb:99:4f:98:8b:d5:04:f9:
                    10:d6:e9:45:5a:91:65:01:88:ce:c4:7d:7a:39:d5:
                    cf:f9:4a:f6:62:dd:c1:7f:cc:aa:2d:38:5e:a4:fa:
                    95:ea:d3:7c:4b:d8:74:f7:82:3e:c4:70:66:e0:c0:
                    4a:d8:fc:5a:2b:b0:8d:05:39:a3:2e:66:0f:83:c3:
                    d5:55:27:91:ae:ea:e3:00:63:c7:39:61:1c:c1:d4:
                    e9:c0:52:d9:5e:6c:5b:da:4a:55:20:50:2d:9c:c3:
                    a3:8d:eb:bc:a1:37:b4:e4:b1:5c:da:2a:1b:a9:f6:
                    5b:37:fd:3a:2a:7a:27:e6:06:f0:31:1d:2a:cc:cf:
                    e1:05:d9:ae:f5:ce:4a:97:57:3e:79:e2:eb:ea:bf:
                    35:19:9b:10:4d:d9:3a:17:a8:b6:48:2b:63:76:b5:
                    6b:75:ee:09:5a:20:e6:d0:52:e6:22:86:04:b6:bb:
                    b7:63:c0:a7:23:2c:98:33:5e:18:8a:90:ab:53:a4:
                    79:e4:f4:e5:7d:1f:e5:b1:47:c7:9c:d1:9f:29:6c:
                    69:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:16:61:48:18:41:B3:AF:20:FD:B9:01:FD:7F:E7:FB:AB:09:D4:77
            X509v3 Authority Key Identifier:
                keyid:67:07:05:64:D5:3A:CB:66:04:FA:56:0F:1E:05:1D:47:A5:C3:F6:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/67070564D53ACB6604FA560F1E051D47A5C3F657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67070564D53ACB6604FA560F1E051D47A5C3F657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/323830343a363137633a383030303a3a2f33332d3333203d3e20323639323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:617c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         61:6c:2a:b7:b7:fb:11:98:85:fc:a0:a0:e0:8b:ef:dc:81:b4:
         0f:7f:f6:8e:81:3f:9d:5b:ff:c6:3a:96:ec:ac:64:5e:f5:26:
         13:36:d5:30:50:ec:22:25:a6:e2:b4:b0:08:f9:5e:d0:cc:2b:
         a4:2b:0c:d1:56:25:d2:5a:5a:f2:dc:e3:2c:a0:1a:fc:f5:f8:
         28:e6:cd:21:70:b3:e9:35:b5:cc:4b:1b:da:23:8f:02:33:9b:
         a1:16:e4:b1:ba:b3:85:c2:88:ed:a8:18:dc:e9:6f:fb:0a:57:
         a5:ef:84:e4:e7:29:02:96:30:c1:86:b5:c3:c9:43:16:1c:c8:
         e6:e0:af:02:20:9c:2f:35:b7:eb:26:5b:99:38:ab:7f:2b:62:
         a4:71:67:7b:34:9c:fc:8b:62:9f:c2:3b:e8:eb:7e:43:19:f1:
         45:bf:70:b1:bb:bc:8e:9e:a8:ea:59:40:2e:45:70:d1:3c:8d:
         cf:9b:40:fb:08:4c:1e:8b:8c:25:2a:93:fe:d0:52:61:f3:af:
         76:f2:db:42:10:d1:f2:82:99:c5:7c:56:84:37:4a:df:ee:a6:
         45:8c:93:0f:b4:6d:01:9e:5d:cc:cd:3a:16:e5:33:79:cf:08:
         00:e8:b8:60:1b:df:23:4a:9e:95:69:af:1c:06:6a:b8:fb:d6:
         99:3b:b4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:55:19 2024 by rpki-client on console-fra.rpki-client.org