Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/323830343a363137633a3a2f33342d3334203d3e20323639323337.roa
File:                     323830343a363137633a3a2f33342d3334203d3e20323639323337.roa (raw, json)
Hash identifier:          kPb8qvG2YppGZ6hl6w2dKoONfgphjn37TdY2n5+v3hE=
Subject key identifier:   82:AD:42:09:F4:DE:B9:35:E9:2C:CC:B8:1B:A0:79:30:4B:0B:A2:85
Certificate issuer:       /CN=67070564D53ACB6604FA560F1E051D47A5C3F657
Certificate serial:       6CFBD59B282177175EB783E8EF9342EC51AB7CB5
Authority key identifier: 67:07:05:64:D5:3A:CB:66:04:FA:56:0F:1E:05:1D:47:A5:C3:F6:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67070564D53ACB6604FA560F1E051D47A5C3F657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/323830343a363137633a3a2f33342d3334203d3e20323639323337.roa
Signing time:             Thu 04 Apr 2024 03:11:58 +0000
ROA not before:           Thu 04 Apr 2024 03:06:58 +0000
ROA not after:            Thu 03 Apr 2025 03:11:58 +0000
asID:                     269237
IP address blocks:        2804:617c::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:fb:d5:9b:28:21:77:17:5e:b7:83:e8:ef:93:42:ec:51:ab:7c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67070564D53ACB6604FA560F1E051D47A5C3F657
        Validity
            Not Before: Apr  4 03:06:58 2024 GMT
            Not After : Apr  3 03:11:58 2025 GMT
        Subject: CN=82AD4209F4DEB935E92CCCB81BA079304B0BA285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:74:9c:9c:3f:4c:68:93:fd:1c:9f:41:7c:b2:
                    3d:8d:7f:b4:24:4a:81:79:bb:30:7a:97:29:4b:2c:
                    f1:e7:c0:2e:76:0a:94:94:4f:1d:35:5e:e4:d4:c9:
                    44:ac:a8:ec:52:90:c9:4e:d1:59:f2:5b:a7:b8:f2:
                    6f:f1:14:ed:0f:82:2b:ff:42:aa:dc:03:54:62:d8:
                    b4:f2:6a:26:09:9d:6a:5c:4b:2e:07:c8:06:c1:1b:
                    66:ca:81:5f:7b:c5:00:b2:e6:24:5d:b4:b0:c2:38:
                    01:b2:b4:37:a9:8f:8a:54:fa:02:27:a8:09:17:80:
                    bc:ea:69:6f:5b:23:1e:a0:17:1f:6a:38:c9:b3:c0:
                    8d:f1:0b:1b:e1:76:dc:f5:5d:a1:33:4e:7a:3c:07:
                    26:ca:6f:6c:d2:b6:9c:36:42:9e:80:06:6a:fb:c4:
                    a0:e2:e7:bb:17:cc:9c:d8:cb:c2:cc:c6:c7:87:b4:
                    ee:ff:47:23:46:6b:63:a3:72:48:22:03:65:92:63:
                    27:77:56:a5:33:cd:08:96:b2:94:ba:a5:9b:3a:f1:
                    66:43:9e:88:13:06:59:0f:46:f3:a4:98:3c:8d:2b:
                    3b:3d:06:90:c5:de:29:d0:ae:41:68:be:d8:b2:86:
                    1e:b6:bb:a0:b9:c1:a6:54:20:5d:66:e3:8d:1c:76:
                    7b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AD:42:09:F4:DE:B9:35:E9:2C:CC:B8:1B:A0:79:30:4B:0B:A2:85
            X509v3 Authority Key Identifier:
                keyid:67:07:05:64:D5:3A:CB:66:04:FA:56:0F:1E:05:1D:47:A5:C3:F6:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/67070564D53ACB6604FA560F1E051D47A5C3F657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67070564D53ACB6604FA560F1E051D47A5C3F657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/323830343a363137633a3a2f33342d3334203d3e20323639323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:617c::/34

    Signature Algorithm: sha256WithRSAEncryption
         0d:d2:ea:22:fc:ae:4a:d6:80:fd:ca:23:ae:48:a0:d4:55:95:
         fa:d3:fa:0e:c3:8d:e3:85:35:ad:ce:ce:5e:1a:4f:b5:9a:99:
         17:67:a2:b8:ac:ed:b6:1b:01:b3:ae:b0:56:de:a3:99:99:bf:
         3b:7b:5a:c8:67:ee:a7:12:8c:6f:1f:bd:e7:c7:96:13:4f:ff:
         1c:ff:05:7b:1f:08:3f:52:38:20:d2:a7:67:5e:99:28:13:33:
         70:3c:f7:9d:94:70:49:d9:66:70:cb:7a:3e:e5:82:d2:ac:4e:
         c0:84:f0:ab:bc:99:35:e1:e9:10:d5:6c:40:e0:17:7a:ae:cd:
         b5:06:a7:b0:64:2e:4a:95:82:e1:1c:d1:3b:78:f5:65:53:4c:
         41:98:d9:6c:3e:a7:24:81:3e:f5:00:38:1e:33:d3:b2:7a:15:
         b2:65:ed:6d:c5:c2:b1:dd:7d:2e:14:5c:79:ff:7a:c6:05:29:
         f5:f8:c4:97:91:d8:1e:7e:c6:e4:f1:82:32:1c:91:31:5d:3a:
         e7:3d:a8:79:8d:d0:9a:84:ba:77:df:aa:11:29:71:fb:89:80:
         71:60:a0:ea:ff:fb:9f:1b:e4:5b:7a:7f:34:f6:12:a8:3a:86:
         6c:96:aa:3c:74:c4:e4:99:37:64:13:b2:92:57:7b:2b:67:75:
         c0:b4:d9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:55:19 2024 by rpki-client on console-fra.rpki-client.org