Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/1/323830343a376164383a3a2f33322d3332203d3e20323731333935.roa
File:                     323830343a376164383a3a2f33322d3332203d3e20323731333935.roa (raw, json)
Hash identifier:          qLsX7Gm1EHB8+vdeH1MQd3pACyXQCEArt7CPO1h2wmg=
Subject key identifier:   7B:4A:AD:5A:BB:F7:C4:DF:0B:FA:53:FD:88:6D:F1:7F:AE:0F:0D:19
Certificate issuer:       /CN=F8077B9FBA152C29E14E548BF94CE8567559B1F1
Certificate serial:       4B5538D9681B554B4904C7954860F36892B87A2D
Authority key identifier: F8:07:7B:9F:BA:15:2C:29:E1:4E:54:8B:F9:4C:E8:56:75:59:B1:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8077B9FBA152C29E14E548BF94CE8567559B1F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/1/323830343a376164383a3a2f33322d3332203d3e20323731333935.roa
Signing time:             Thu 04 Apr 2024 17:43:57 +0000
ROA not before:           Thu 04 Apr 2024 17:38:57 +0000
ROA not after:            Thu 03 Apr 2025 17:43:57 +0000
asID:                     271395
IP address blocks:        2804:7ad8::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:55:38:d9:68:1b:55:4b:49:04:c7:95:48:60:f3:68:92:b8:7a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8077B9FBA152C29E14E548BF94CE8567559B1F1
        Validity
            Not Before: Apr  4 17:38:57 2024 GMT
            Not After : Apr  3 17:43:57 2025 GMT
        Subject: CN=7B4AAD5ABBF7C4DF0BFA53FD886DF17FAE0F0D19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:18:03:17:c8:1e:69:ab:ea:29:7d:6c:19:26:
                    37:a3:23:71:55:39:29:bb:b9:bf:5b:ed:ac:09:6a:
                    48:52:90:a5:72:2d:fa:ed:8d:4f:8d:d7:2c:a2:4b:
                    fa:47:7c:43:8f:91:f5:a9:3d:cb:1b:67:ba:95:66:
                    bf:f0:fb:f6:de:a2:d2:dd:00:b4:58:c2:eb:4b:0f:
                    ec:9c:93:39:59:0f:43:a7:f6:6c:11:14:74:76:f7:
                    d0:38:09:e0:0e:fc:b2:78:ad:84:fe:6f:35:2d:8b:
                    55:9d:75:3a:ba:53:bf:a3:e2:9e:0f:63:71:58:54:
                    a4:5e:72:08:c2:d8:76:9a:4c:fb:b2:7c:18:ae:06:
                    48:e3:1d:d8:6b:21:cd:a2:ed:51:94:62:ed:93:f7:
                    80:d0:13:46:3a:af:5f:e4:bc:21:b9:a6:a5:48:8d:
                    31:88:17:8f:97:f0:a8:b1:ed:d4:c3:6f:4a:52:20:
                    f4:fc:58:ae:99:9e:ac:67:7b:b6:20:e3:b7:f4:ba:
                    35:3f:7a:df:d5:d2:14:04:fe:42:92:b9:4d:b4:dc:
                    d6:ed:6d:fc:ec:df:05:ec:e2:bc:e0:e8:c7:d3:2a:
                    0e:18:7b:3f:d4:33:32:74:31:6a:43:38:89:a2:38:
                    64:44:0e:d9:b1:b6:cc:4e:be:0e:a0:37:bf:5a:9f:
                    c0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4A:AD:5A:BB:F7:C4:DF:0B:FA:53:FD:88:6D:F1:7F:AE:0F:0D:19
            X509v3 Authority Key Identifier:
                keyid:F8:07:7B:9F:BA:15:2C:29:E1:4E:54:8B:F9:4C:E8:56:75:59:B1:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/1/F8077B9FBA152C29E14E548BF94CE8567559B1F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8077B9FBA152C29E14E548BF94CE8567559B1F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/1/323830343a376164383a3a2f33322d3332203d3e20323731333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ad8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:4c:3e:da:f9:bb:bd:bb:cc:5d:b0:ed:96:53:77:48:78:c8:
         40:c8:f7:5d:c2:95:97:50:0c:d4:cb:f7:5c:a1:52:8f:aa:50:
         03:67:75:13:8d:16:ff:4c:32:3f:50:1d:04:25:d9:99:82:61:
         dc:d9:64:d4:be:d8:27:56:c5:f6:8e:69:d0:ca:28:0b:83:2e:
         e9:fe:25:3d:9a:87:b5:42:0e:ce:d8:b4:72:29:7c:75:79:40:
         e8:99:5a:1e:59:ee:ba:b3:1e:0c:34:8e:b9:f9:f1:fc:2e:4d:
         0f:70:e7:cd:3f:a6:d9:fe:3e:66:d1:a2:5e:13:41:df:85:6d:
         f6:6f:2c:67:29:4b:62:96:46:0d:16:b8:20:c2:e3:78:36:d4:
         34:84:d9:5e:85:7f:b3:aa:ed:a9:49:71:ba:0d:89:51:b6:e3:
         44:dc:41:f9:a9:05:b3:78:b2:0a:a6:79:f1:fa:d6:1f:fa:17:
         f8:c0:06:62:85:4b:1d:22:c1:83:88:86:0c:3e:50:d5:c4:dc:
         d3:94:b0:16:7a:79:39:45:3d:9b:54:b6:fd:13:e8:c5:b9:a3:
         0d:3f:95:7b:a9:18:11:aa:a0:1c:d2:a0:d9:fc:68:d7:7e:e8:
         2d:97:80:01:40:b5:2a:4d:12:2f:d3:23:56:07:36:d1:ab:9b:
         5d:89:92:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 05:48:13 2024 by rpki-client on console-fra.rpki-client.org