Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/323830343a333030383a3230303a3a2f34302d3430203d3e20323637343137.roa
File:                     323830343a333030383a3230303a3a2f34302d3430203d3e20323637343137.roa (raw, json)
Hash identifier:          pcxjsLZdTsA9aZJZEZSNaE8O/ZqKgZhdMWzFcLOwrx8=
Subject key identifier:   07:86:5B:62:D7:0F:8B:A8:0C:B4:2D:1C:AB:A1:D5:66:77:A7:90:B9
Certificate issuer:       /CN=1D588865BA2C93FF0D8E1D1874514B202B50EEB1
Certificate serial:       7A1C5EB3DFA270596FD37ED541E7111DC59E4D51
Authority key identifier: 1D:58:88:65:BA:2C:93:FF:0D:8E:1D:18:74:51:4B:20:2B:50:EE:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/323830343a333030383a3230303a3a2f34302d3430203d3e20323637343137.roa
Signing time:             Wed 23 Oct 2024 17:58:07 +0000
ROA not before:           Wed 23 Oct 2024 17:53:07 +0000
ROA not after:            Wed 22 Oct 2025 17:58:07 +0000
asID:                     267417
IP address blocks:        2804:3008:200::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:1c:5e:b3:df:a2:70:59:6f:d3:7e:d5:41:e7:11:1d:c5:9e:4d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D588865BA2C93FF0D8E1D1874514B202B50EEB1
        Validity
            Not Before: Oct 23 17:53:07 2024 GMT
            Not After : Oct 22 17:58:07 2025 GMT
        Subject: CN=07865B62D70F8BA80CB42D1CABA1D56677A790B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:26:8c:6e:5f:76:e9:94:09:2d:71:0c:0e:92:
                    ba:75:f6:a5:ee:e1:48:77:0f:46:78:16:8b:65:d9:
                    ed:1e:05:a6:a6:ea:45:9b:e2:4b:b7:2d:49:b6:38:
                    4b:8b:dd:3c:5a:1d:fa:cc:8c:21:f2:97:64:b3:80:
                    d9:d0:96:7f:2f:01:42:a3:d6:8b:af:2f:08:cb:61:
                    fe:a9:02:6c:b2:70:43:e9:05:81:3a:eb:d8:76:52:
                    ad:50:64:d0:07:b4:6d:ec:15:c0:61:f8:02:5a:70:
                    96:c6:04:e3:f0:1a:5f:51:48:e7:3b:b5:84:6a:91:
                    2e:0e:80:15:f4:9b:96:81:97:15:91:fc:cc:eb:1a:
                    1d:c8:ce:95:ae:b2:57:db:ea:a0:d6:39:01:1d:1c:
                    ed:96:46:23:51:60:95:fa:eb:b5:cd:97:73:0e:9a:
                    ca:fc:a0:99:b9:a6:30:a8:86:f5:ea:f6:74:98:43:
                    d3:f0:1d:02:d2:13:57:d2:2d:3a:13:75:7b:94:4f:
                    d3:c6:91:40:91:49:ba:d3:e6:18:d4:0b:47:23:60:
                    bf:64:1c:98:c4:6a:a8:80:ad:93:41:0b:89:8a:79:
                    fa:e7:67:fc:4f:a4:96:cd:95:06:57:53:6a:90:ae:
                    2f:04:93:b9:4f:ac:58:82:81:0d:63:dc:1c:22:f4:
                    df:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:86:5B:62:D7:0F:8B:A8:0C:B4:2D:1C:AB:A1:D5:66:77:A7:90:B9
            X509v3 Authority Key Identifier:
                keyid:1D:58:88:65:BA:2C:93:FF:0D:8E:1D:18:74:51:4B:20:2B:50:EE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/323830343a333030383a3230303a3a2f34302d3430203d3e20323637343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3008:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         54:8c:38:17:ed:1e:f2:c5:05:50:b6:c9:c3:b7:c7:3d:8b:58:
         6b:60:b9:0a:2c:56:bf:a5:98:9d:ea:a1:7f:0a:6d:2b:3a:8e:
         3f:b0:04:78:53:6e:f7:0a:33:08:3d:af:1c:94:d5:ec:da:6f:
         c8:a1:5b:f7:35:94:55:7b:ff:7e:26:fb:cc:69:f5:f9:61:28:
         33:93:9b:ba:62:c5:84:33:89:57:50:f0:aa:10:c4:4a:fa:ce:
         a6:ae:60:b2:74:ac:75:cb:15:11:04:99:e7:cf:6f:fa:ee:15:
         9f:5b:5a:26:20:c1:10:66:e7:16:6f:1a:19:84:b4:1c:32:04:
         08:ff:25:3c:1c:29:f7:62:9d:7e:e3:a1:4b:83:8f:e3:75:b2:
         07:1c:59:77:4c:9f:12:ac:85:9b:ed:6b:fb:d8:07:ff:25:11:
         54:98:ae:99:2d:9d:10:78:2c:7a:95:d8:3a:ab:0d:49:fd:3c:
         72:25:fb:1f:37:1a:44:45:8a:bc:1b:10:3a:be:4f:3b:e6:eb:
         82:24:7f:f0:52:1b:8b:5c:ee:16:13:39:db:85:10:cd:51:8d:
         74:18:8a:41:45:5a:2f:74:d7:93:05:e7:04:b7:c9:a0:50:19:
         0d:e3:a0:d2:56:f4:0c:16:5d:68:bf:51:86:99:0a:0f:82:d4:
         f5:70:0f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 16:37:06 2024 by rpki-client on console-fra.rpki-client.org