Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/323830343a363137633a3a2f33322d3332203d3e20323639323337.roa
File:                     323830343a363137633a3a2f33322d3332203d3e20323639323337.roa (raw, json)
Hash identifier:          5Kt6lI5oyqr6W1EIaFiXhH5ef11etS9Anue0/Q+oBW4=
Subject key identifier:   2B:F6:A6:2C:9D:F5:41:D6:83:38:BF:9A:33:D2:AC:9A:E3:3B:BE:6B
Certificate issuer:       /CN=67070564D53ACB6604FA560F1E051D47A5C3F657
Certificate serial:       5C8717C730BE7B0FE410454819038922A59C5286
Authority key identifier: 67:07:05:64:D5:3A:CB:66:04:FA:56:0F:1E:05:1D:47:A5:C3:F6:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67070564D53ACB6604FA560F1E051D47A5C3F657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/323830343a363137633a3a2f33322d3332203d3e20323639323337.roa
Signing time:             Thu 04 Apr 2024 03:11:58 +0000
ROA not before:           Thu 04 Apr 2024 03:06:58 +0000
ROA not after:            Thu 03 Apr 2025 03:11:58 +0000
asID:                     269237
IP address blocks:        2804:617c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:87:17:c7:30:be:7b:0f:e4:10:45:48:19:03:89:22:a5:9c:52:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67070564D53ACB6604FA560F1E051D47A5C3F657
        Validity
            Not Before: Apr  4 03:06:58 2024 GMT
            Not After : Apr  3 03:11:58 2025 GMT
        Subject: CN=2BF6A62C9DF541D68338BF9A33D2AC9AE33BBE6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7d:a8:d3:80:2d:7e:86:18:75:be:31:96:64:
                    50:32:8e:5a:c2:54:04:62:c4:8c:45:84:e5:2e:a5:
                    ac:f9:00:b3:27:48:75:3d:c4:95:56:61:2e:9f:41:
                    19:b8:0f:3c:6d:9e:93:20:b1:9c:42:75:b3:71:19:
                    ce:b8:76:ba:07:1b:b2:ba:0d:0c:a2:9c:a4:37:e7:
                    28:15:44:81:c3:ea:76:94:76:ca:cf:8d:b9:77:01:
                    f3:38:e3:b2:0a:db:94:9e:c7:6d:24:8c:6e:f3:dc:
                    e6:a9:94:d4:9c:e6:55:d4:68:f5:af:18:ff:89:30:
                    a8:d1:26:34:f9:22:c7:ff:d6:38:9d:28:1f:8d:ff:
                    10:36:be:24:7d:12:f7:72:e6:83:65:eb:01:bf:4b:
                    22:81:d7:a7:5c:83:09:fc:6e:58:2c:f1:89:4c:86:
                    9a:58:d9:c2:b5:9d:8a:db:46:8c:66:30:54:48:2a:
                    49:fc:1a:11:4e:a0:ee:af:8a:a9:9e:7d:92:72:cb:
                    76:64:42:21:fe:ab:77:47:27:7a:db:9e:c7:c3:d8:
                    e2:15:57:f2:81:96:58:99:b7:77:ec:f9:aa:2f:aa:
                    43:6a:1a:17:8d:6d:9e:67:7a:d9:60:6e:82:e7:03:
                    44:cf:2d:1e:b2:a4:a1:c6:fd:75:51:d4:21:07:f0:
                    b8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F6:A6:2C:9D:F5:41:D6:83:38:BF:9A:33:D2:AC:9A:E3:3B:BE:6B
            X509v3 Authority Key Identifier:
                keyid:67:07:05:64:D5:3A:CB:66:04:FA:56:0F:1E:05:1D:47:A5:C3:F6:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/67070564D53ACB6604FA560F1E051D47A5C3F657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67070564D53ACB6604FA560F1E051D47A5C3F657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/323830343a363137633a3a2f33322d3332203d3e20323639323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:617c::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:41:4e:18:66:91:a2:d6:2e:de:73:ba:b9:82:6a:0c:f0:d1:
         da:78:02:cd:af:ee:78:bd:1a:20:6b:c0:29:3f:50:c7:d9:ab:
         f5:14:12:23:12:e0:1a:b3:1d:ac:40:54:1c:5b:4e:50:54:e1:
         31:47:3e:e1:1a:5b:ba:13:1b:28:e2:fe:4e:be:fb:5c:25:c0:
         82:2f:b7:92:45:09:d9:53:7f:44:6c:b4:71:5a:4d:d3:d7:44:
         ea:00:0f:65:4f:7d:66:db:f6:94:ac:bc:73:a3:77:33:40:67:
         15:05:72:30:a0:b1:2e:ae:ea:c6:f7:29:72:8d:b9:59:a8:ee:
         18:d3:46:c5:71:a0:46:d7:a3:8d:2c:c3:6b:21:7b:12:9f:4d:
         3f:85:e8:5c:70:40:f2:b0:7d:a8:5e:a5:77:09:f2:61:af:94:
         1a:3e:f0:3c:3e:75:63:16:e1:8a:36:73:80:1e:e9:b9:33:39:
         15:9c:52:79:e6:ab:6d:0d:9c:9f:ed:17:dd:70:9c:ae:74:05:
         de:b2:50:d5:5d:67:4e:d0:b1:c9:29:70:52:5c:0d:38:79:8a:
         bf:ae:94:63:6b:e7:d6:72:a0:a6:e1:69:fb:9e:43:81:6a:48:
         57:01:8b:28:06:68:5c:ba:47:d3:e5:fb:d8:91:85:be:35:96:
         a1:81:13:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:35:10 2024 by rpki-client on console-ams.rpki-client.org