Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/323830343a366137383a383030303a3a2f33332d3333203d3e20323730333338.roa
File:                     323830343a366137383a383030303a3a2f33332d3333203d3e20323730333338.roa (raw, json)
Hash identifier:          wnhrzbe8fYxcLpdduW97wWVRFup2mT5W7V3wPjXGdEo=
Subject key identifier:   40:C2:7D:1C:3E:28:F3:2A:FC:86:C5:B2:88:BD:2B:77:C2:7A:42:C3
Certificate issuer:       /CN=198A6D21600CF2DD4E43C384F7379E891DD16986
Certificate serial:       17CD61306A52D0128C467C3554C3173C06039A92
Authority key identifier: 19:8A:6D:21:60:0C:F2:DD:4E:43:C3:84:F7:37:9E:89:1D:D1:69:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/198A6D21600CF2DD4E43C384F7379E891DD16986.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/323830343a366137383a383030303a3a2f33332d3333203d3e20323730333338.roa
Signing time:             Thu 04 Apr 2024 04:18:02 +0000
ROA not before:           Thu 04 Apr 2024 04:13:02 +0000
ROA not after:            Thu 03 Apr 2025 04:18:02 +0000
asID:                     270338
IP address blocks:        2804:6a78:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:cd:61:30:6a:52:d0:12:8c:46:7c:35:54:c3:17:3c:06:03:9a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=198A6D21600CF2DD4E43C384F7379E891DD16986
        Validity
            Not Before: Apr  4 04:13:02 2024 GMT
            Not After : Apr  3 04:18:02 2025 GMT
        Subject: CN=40C27D1C3E28F32AFC86C5B288BD2B77C27A42C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a0:b6:76:59:ba:f2:05:61:b3:10:88:86:2c:
                    f6:77:73:67:ae:7e:62:ae:b8:4b:36:6d:20:57:2c:
                    61:85:15:5e:b8:bb:20:3b:eb:06:fd:48:d6:27:30:
                    c4:0a:1f:30:b9:bc:99:19:82:7d:66:51:5a:bf:35:
                    43:a7:b5:81:10:6b:34:48:bb:a2:14:54:d1:97:8b:
                    9c:3d:73:c5:4d:06:67:7c:23:d9:db:98:ea:e8:b0:
                    16:35:8e:b3:65:13:b8:e5:91:6e:d5:d9:cb:24:0f:
                    e7:ea:70:0a:54:90:ae:d3:01:2f:b7:27:17:9c:cf:
                    7b:6f:da:27:8e:7c:35:50:93:b6:e3:42:37:35:e1:
                    f9:d4:a6:0e:03:22:48:f1:d6:68:1c:8a:19:73:7e:
                    e6:be:95:2f:1f:e5:ab:4a:f3:10:58:cb:8a:f0:b9:
                    87:67:12:41:da:9b:2f:68:19:0a:3f:25:46:3e:80:
                    36:4c:2e:77:13:49:a9:c0:94:e4:78:4b:04:3e:af:
                    30:d2:9e:94:94:a2:6f:80:6e:14:65:22:04:31:97:
                    33:bc:61:ad:5b:79:e8:c4:c1:ad:6c:03:86:0e:50:
                    07:4b:22:5f:87:ba:c0:74:c3:83:62:62:6e:b0:f3:
                    56:fe:19:7f:20:31:8f:20:d7:a0:10:67:6b:9b:75:
                    aa:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C2:7D:1C:3E:28:F3:2A:FC:86:C5:B2:88:BD:2B:77:C2:7A:42:C3
            X509v3 Authority Key Identifier:
                keyid:19:8A:6D:21:60:0C:F2:DD:4E:43:C3:84:F7:37:9E:89:1D:D1:69:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/198A6D21600CF2DD4E43C384F7379E891DD16986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/198A6D21600CF2DD4E43C384F7379E891DD16986.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/323830343a366137383a383030303a3a2f33332d3333203d3e20323730333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a78:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         16:74:b7:39:d6:23:93:e3:a7:a6:1b:5c:da:d4:ef:85:da:bb:
         5c:0a:79:3a:22:84:07:e7:d8:5d:e0:88:57:9e:a3:e2:d2:5c:
         4a:c1:a8:82:f3:7b:44:e9:8c:54:1f:9f:53:fe:c1:bd:3a:4f:
         49:fb:bd:89:33:0b:d3:b4:78:13:64:49:21:dc:15:d0:07:35:
         01:ed:6b:cc:3e:e9:cd:c1:7e:67:9f:d6:f1:76:3a:c1:71:79:
         36:fa:70:f1:1c:59:b4:e7:1b:ec:52:91:c1:8d:c5:7d:3e:6c:
         e3:11:08:2a:31:36:4e:42:15:3b:75:33:5b:bb:24:1f:0f:95:
         66:5d:44:33:31:96:25:4e:b5:de:6f:93:f5:cc:9b:1f:2d:c0:
         4c:0b:78:8d:b7:40:01:fd:1d:7f:10:eb:87:e4:00:ca:01:7b:
         3e:3d:80:4d:17:31:7e:ff:b0:89:cd:43:85:0f:17:c1:e6:bc:
         83:6f:25:01:36:71:c3:ba:d0:25:98:14:89:49:c5:8e:8a:8a:
         86:47:eb:fd:70:9a:45:fb:6c:79:99:61:a8:de:fa:a2:b7:cc:
         5b:b1:32:c9:fc:73:f5:88:b4:11:28:32:89:f1:41:a1:f5:f7:
         af:ca:e4:cb:ae:e2:9e:16:0c:00:d6:34:a4:f1:ea:d6:5e:1d:
         4f:e7:ef:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 09:41:00 2024 by rpki-client on console-fra.rpki-client.org