Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/1/323830343a376164383a31303a3a2f34382d3438203d3e20323731333935.roa
File:                     323830343a376164383a31303a3a2f34382d3438203d3e20323731333935.roa (raw, json)
Hash identifier:          u+CpqCevvsOeOgiJ83PhhR49BJPAZ+S2FgWzlIG6AUo=
Subject key identifier:   99:09:2D:60:DD:C8:43:DD:0B:CC:FE:66:06:6C:05:04:4D:88:A8:C0
Certificate issuer:       /CN=F8077B9FBA152C29E14E548BF94CE8567559B1F1
Certificate serial:       758C4DEDF7E30103EB18A8D955D066A20EFD0697
Authority key identifier: F8:07:7B:9F:BA:15:2C:29:E1:4E:54:8B:F9:4C:E8:56:75:59:B1:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8077B9FBA152C29E14E548BF94CE8567559B1F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/1/323830343a376164383a31303a3a2f34382d3438203d3e20323731333935.roa
Signing time:             Thu 04 Apr 2024 17:43:56 +0000
ROA not before:           Thu 04 Apr 2024 17:38:56 +0000
ROA not after:            Thu 03 Apr 2025 17:43:56 +0000
asID:                     271395
IP address blocks:        2804:7ad8:10::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8c:4d:ed:f7:e3:01:03:eb:18:a8:d9:55:d0:66:a2:0e:fd:06:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8077B9FBA152C29E14E548BF94CE8567559B1F1
        Validity
            Not Before: Apr  4 17:38:56 2024 GMT
            Not After : Apr  3 17:43:56 2025 GMT
        Subject: CN=99092D60DDC843DD0BCCFE66066C05044D88A8C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8d:81:e9:85:46:22:9c:5f:0e:22:43:43:e8:
                    2e:4a:41:26:c7:89:ed:70:aa:a3:29:a1:31:64:b9:
                    70:40:70:0e:09:07:03:8b:1b:60:7b:04:82:57:bb:
                    d8:1f:73:4b:90:91:8a:71:e8:b0:5c:2c:d0:79:1a:
                    5f:b3:0d:cb:f4:f6:29:f8:57:46:c8:64:16:6b:16:
                    5c:dd:96:ba:c7:06:f9:45:72:6e:42:92:e3:56:fe:
                    59:b0:dc:fc:e5:66:65:b5:a2:c4:43:2f:71:7b:2c:
                    6a:70:5e:3d:73:42:c2:7b:66:66:5a:c6:38:5a:8e:
                    59:7a:8e:a0:1e:09:84:ec:6d:00:e8:db:12:5a:73:
                    5e:b8:99:5b:e0:b7:08:16:23:b1:40:a0:f6:fd:b8:
                    c0:e0:b1:46:e1:ae:c7:0c:a4:b6:47:5e:af:93:0f:
                    74:73:3d:74:8f:7b:51:8f:f9:65:23:36:1d:e2:11:
                    e5:ce:0c:ee:b6:bb:4f:d6:c8:d9:05:e8:e4:da:43:
                    00:7b:7d:4f:93:d8:ec:e1:8f:d3:22:a1:88:7b:45:
                    21:cb:a8:bc:02:65:76:19:bb:89:da:96:d6:a3:fe:
                    2d:1f:37:2f:91:58:6c:a8:0c:5a:b3:89:0f:7f:59:
                    43:a5:db:f2:d7:89:2b:53:df:63:99:b1:e3:9f:03:
                    5d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:09:2D:60:DD:C8:43:DD:0B:CC:FE:66:06:6C:05:04:4D:88:A8:C0
            X509v3 Authority Key Identifier:
                keyid:F8:07:7B:9F:BA:15:2C:29:E1:4E:54:8B:F9:4C:E8:56:75:59:B1:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/1/F8077B9FBA152C29E14E548BF94CE8567559B1F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8077B9FBA152C29E14E548BF94CE8567559B1F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/1/323830343a376164383a31303a3a2f34382d3438203d3e20323731333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ad8:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:a3:0b:80:08:3e:dd:20:c2:23:21:14:2f:d9:96:c9:9d:e6:
         be:fa:6d:8c:e0:dd:1a:2c:d2:ba:1d:b9:18:01:01:5e:16:79:
         cb:7c:52:fe:9a:ab:98:99:01:08:9c:cb:cc:07:f8:82:dd:51:
         e8:6c:f2:4a:d4:b1:41:ff:17:72:88:41:11:23:e8:b9:20:f2:
         65:65:a0:76:cd:5d:76:74:fb:19:5a:1a:4e:90:a1:89:2a:3b:
         8a:d4:a1:d3:a3:1d:cd:a0:59:77:0c:9e:8d:dd:0b:12:0c:fb:
         8f:68:71:ce:ba:49:34:be:ae:f1:07:db:df:da:f4:a2:3f:f6:
         ff:9f:96:5b:3e:2c:83:00:16:fd:be:41:69:ab:26:9b:28:e0:
         60:84:4f:78:a5:5c:74:89:bb:33:21:1f:54:6f:ab:9f:03:dd:
         36:c3:dd:34:6a:2e:f8:d9:2c:d5:3a:9a:41:a7:b2:4e:f7:68:
         a5:e0:e8:0c:2e:a2:29:87:f1:03:89:82:c7:a2:96:fa:a7:bf:
         16:bd:74:cf:ff:38:e8:40:af:0e:af:1d:ef:6d:97:ef:ba:d2:
         97:7f:e7:3b:01:9a:6f:60:50:be:f8:a5:53:b5:cb:11:e6:54:
         90:42:ff:9d:dd:b9:eb:6b:20:c0:79:0f:8d:10:2b:6f:19:9a:
         98:a7:e8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 06:53:59 2024 by rpki-client on console-ams.rpki-client.org