Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/1/323830343a353061383a3a2f33322d313238203d3e20323638343032.roa
File:                     323830343a353061383a3a2f33322d313238203d3e20323638343032.roa (raw, json)
Hash identifier:          /4Ojbsq2o+GcvMguOoNVv7wsR2I0CJGeoirsosoSaRg=
Subject key identifier:   9B:F4:91:8E:9F:11:59:A6:81:60:7C:4A:83:54:19:27:F0:08:C3:63
Certificate issuer:       /CN=8F7E8857A29A30F9D4640C59F873A9474CBD445B
Certificate serial:       7B12F6E9976645E12ECE6E87B134736E54C3731A
Authority key identifier: 8F:7E:88:57:A2:9A:30:F9:D4:64:0C:59:F8:73:A9:47:4C:BD:44:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F7E8857A29A30F9D4640C59F873A9474CBD445B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/1/323830343a353061383a3a2f33322d313238203d3e20323638343032.roa
Signing time:             Tue 09 Jul 2024 21:04:26 +0000
ROA not before:           Tue 09 Jul 2024 20:59:26 +0000
ROA not after:            Tue 08 Jul 2025 21:04:26 +0000
asID:                     268402
IP address blocks:        2804:50a8::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:12:f6:e9:97:66:45:e1:2e:ce:6e:87:b1:34:73:6e:54:c3:73:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F7E8857A29A30F9D4640C59F873A9474CBD445B
        Validity
            Not Before: Jul  9 20:59:26 2024 GMT
            Not After : Jul  8 21:04:26 2025 GMT
        Subject: CN=9BF4918E9F1159A681607C4A83541927F008C363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:38:d6:31:65:30:d4:d8:00:53:7d:45:87:ea:
                    1c:6b:28:c9:11:c1:f4:33:f9:40:31:3c:96:90:b4:
                    3f:9d:47:08:4c:a4:cb:d3:9b:86:e1:20:e5:1b:b6:
                    ae:e1:66:72:fa:92:36:0c:f9:ea:9e:fb:db:34:ba:
                    8d:20:fa:63:88:4d:7a:2c:09:fa:ec:cd:d2:e5:e7:
                    c2:1a:bf:df:74:7b:97:ea:c9:ac:df:bd:55:c3:c5:
                    66:3b:d9:8a:18:1c:79:56:17:3f:d5:7b:a9:bb:47:
                    fb:c2:36:4c:9e:b3:24:48:35:ef:4e:47:56:d1:82:
                    72:09:ef:65:78:c8:60:07:cd:fc:c4:6e:9b:89:8e:
                    8b:7d:4c:04:94:65:14:1c:86:d7:9e:3f:f5:15:7d:
                    19:88:0d:1a:10:b6:64:34:6b:08:2e:05:ca:5e:d6:
                    a7:22:b9:47:df:9a:f6:eb:7a:27:ac:1b:e0:91:08:
                    ad:f7:d5:46:d6:7f:ba:dc:7a:a1:ff:7c:7c:0d:66:
                    79:f4:35:0a:e0:f9:2d:93:84:76:6e:c1:37:14:b6:
                    af:d0:ae:39:80:30:2e:fc:4b:30:7c:95:ec:e4:05:
                    0e:9b:8c:d0:d1:83:c1:f9:be:d9:d5:76:61:fb:81:
                    7a:4b:dd:24:f0:26:00:72:55:74:3f:51:cf:c5:7b:
                    54:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F4:91:8E:9F:11:59:A6:81:60:7C:4A:83:54:19:27:F0:08:C3:63
            X509v3 Authority Key Identifier:
                keyid:8F:7E:88:57:A2:9A:30:F9:D4:64:0C:59:F8:73:A9:47:4C:BD:44:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/1/8F7E8857A29A30F9D4640C59F873A9474CBD445B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F7E8857A29A30F9D4640C59F873A9474CBD445B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/1/323830343a353061383a3a2f33322d313238203d3e20323638343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:50a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:f2:dc:10:56:4e:b6:1b:c6:26:26:b2:b4:65:f9:e6:cb:6f:
         0b:44:3f:8a:ae:f9:a5:36:97:06:d5:7b:16:77:30:a4:02:8d:
         46:70:d3:64:cc:47:af:b2:7c:56:fa:56:e9:dd:1b:a7:7a:10:
         18:36:90:6a:67:f1:61:17:3d:8f:a5:2a:88:2a:51:4e:63:f3:
         e1:d7:2a:81:7d:6d:98:05:71:5e:c1:79:06:9c:fe:ff:8f:bb:
         28:90:6d:91:2f:db:c6:ec:7c:d8:91:f3:ea:61:a1:e4:66:5d:
         10:75:f3:07:17:b6:1a:80:f2:8d:22:82:f3:11:f8:ec:8b:f7:
         15:64:ee:2c:05:38:19:da:6c:f1:34:69:ac:da:40:fd:77:b1:
         76:90:30:0d:08:67:13:60:9f:f1:69:e9:87:26:05:e5:3f:72:
         d0:fd:4e:1c:85:97:03:77:af:2f:c3:a1:94:d2:2f:39:0b:84:
         65:cf:e6:88:e8:e7:39:57:88:ca:bb:b2:78:37:bb:1c:c7:69:
         3d:34:07:5f:1b:fd:1c:74:7c:43:79:ad:99:10:19:48:b5:b1:
         73:be:36:57:93:4b:96:99:ec:5e:c6:de:ee:6e:c0:9d:06:38:
         42:c5:63:53:4d:f0:38:17:a3:19:a0:c0:79:86:16:99:46:2e:
         82:e4:01:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 20:23:12 2024 by rpki-client on console-fra.rpki-client.org