Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B2N7AoZmtbSnP4ZL7RVe5cp8hSDRs5NdGjpcnc1GyAWo/0/323830343a343139303a3a2f33322d313238203d3e20323637343431.roa
File:                     323830343a343139303a3a2f33322d313238203d3e20323637343431.roa (raw, json)
Hash identifier:          JiLlHURQI8+jwoC/x1gVdADWTamGXxaMJQBWbiC/nZQ=
Subject key identifier:   DD:D7:E3:2D:EC:C1:07:44:1D:3F:5D:C8:B9:FA:10:55:3C:E0:0F:33
Certificate issuer:       /CN=B02B87ED2E2F6030A1AE2791C49C0E0C889CC06B
Certificate serial:       0D7A1215AD6224EF7AFF66663C61926EFD981249
Authority key identifier: B0:2B:87:ED:2E:2F:60:30:A1:AE:27:91:C4:9C:0E:0C:88:9C:C0:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B02B87ED2E2F6030A1AE2791C49C0E0C889CC06B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B2N7AoZmtbSnP4ZL7RVe5cp8hSDRs5NdGjpcnc1GyAWo/0/323830343a343139303a3a2f33322d313238203d3e20323637343431.roa
Signing time:             Mon 13 May 2024 15:48:06 +0000
ROA not before:           Mon 13 May 2024 15:43:06 +0000
ROA not after:            Mon 12 May 2025 15:48:06 +0000
asID:                     267441
IP address blocks:        2804:4190::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:7a:12:15:ad:62:24:ef:7a:ff:66:66:3c:61:92:6e:fd:98:12:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B02B87ED2E2F6030A1AE2791C49C0E0C889CC06B
        Validity
            Not Before: May 13 15:43:06 2024 GMT
            Not After : May 12 15:48:06 2025 GMT
        Subject: CN=DDD7E32DECC107441D3F5DC8B9FA10553CE00F33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:11:14:3d:b3:79:6a:3d:74:26:c8:99:7d:42:
                    cc:19:4f:15:4f:af:a4:fd:fc:51:9e:41:1f:fe:8c:
                    6f:f5:b0:97:e8:14:81:59:b6:80:27:01:a9:0f:78:
                    0c:57:2a:21:cf:53:0f:71:26:82:9c:25:d8:b5:e5:
                    b2:f4:9b:b5:02:c8:8b:2e:4d:e1:c4:da:02:df:97:
                    e2:91:e2:02:d7:6a:a2:5b:a5:f0:6b:e7:4b:fb:97:
                    ae:4d:58:77:9d:12:60:3d:8e:87:ba:0e:54:78:1e:
                    1a:61:7f:b1:29:bc:80:fa:7c:a5:6c:81:81:2a:f8:
                    19:e3:72:b6:fe:a8:ea:c3:64:8d:a4:c5:6b:b6:8b:
                    b0:e5:06:a6:16:59:c0:e0:92:f5:4e:d4:eb:80:7e:
                    23:7c:cb:b0:1f:a9:0b:7d:f1:09:5b:93:af:ea:16:
                    65:4f:b8:f9:89:26:50:b5:54:41:d6:76:a6:92:05:
                    9d:46:40:a9:23:57:e0:55:5a:45:37:b0:44:bd:6c:
                    a7:7e:c5:44:f5:c5:9c:52:4d:62:64:80:32:2e:15:
                    44:b1:04:78:e0:97:61:d1:6d:c5:35:90:05:ad:64:
                    5a:5f:db:c2:a1:58:8a:c4:8f:1a:95:91:ee:51:f5:
                    d9:7a:b1:13:2e:b2:7d:37:06:b6:16:be:b0:c2:82:
                    15:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D7:E3:2D:EC:C1:07:44:1D:3F:5D:C8:B9:FA:10:55:3C:E0:0F:33
            X509v3 Authority Key Identifier:
                keyid:B0:2B:87:ED:2E:2F:60:30:A1:AE:27:91:C4:9C:0E:0C:88:9C:C0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B2N7AoZmtbSnP4ZL7RVe5cp8hSDRs5NdGjpcnc1GyAWo/0/B02B87ED2E2F6030A1AE2791C49C0E0C889CC06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B02B87ED2E2F6030A1AE2791C49C0E0C889CC06B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B2N7AoZmtbSnP4ZL7RVe5cp8hSDRs5NdGjpcnc1GyAWo/0/323830343a343139303a3a2f33322d313238203d3e20323637343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4190::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:91:22:7b:ed:53:a1:3b:50:73:44:db:b1:09:e9:6d:25:61:
         55:7f:de:ba:c8:e1:37:e8:3a:67:9c:a8:ad:e3:06:ea:a7:e0:
         31:ed:e3:65:0d:ab:fe:61:36:99:15:11:18:03:c5:68:be:2d:
         84:fd:45:15:0b:a8:97:f3:0e:83:bb:a8:d7:92:08:92:df:8d:
         f4:24:8d:1e:5b:3d:24:e7:65:e5:ca:86:84:8a:27:a1:7f:31:
         ec:4c:ef:fc:38:ed:cc:97:b0:67:a0:96:39:f2:09:72:8a:b1:
         33:61:a8:67:da:ca:f5:9a:02:90:4d:71:ea:80:29:f6:38:2a:
         4b:19:aa:e1:da:78:96:a6:ef:fc:22:d1:d6:48:33:c4:84:8e:
         14:15:f1:73:7a:a3:60:f7:28:be:64:22:61:24:9c:0b:80:af:
         0f:b0:12:5b:f3:73:d9:fc:f2:65:37:af:96:23:85:d1:ae:fa:
         40:db:cd:a5:52:8d:58:4b:7f:1a:56:d5:a0:74:b1:95:06:f3:
         6b:70:b3:77:68:b8:2c:33:c6:c7:6d:7b:70:2f:81:bf:e7:66:
         55:9b:9f:b4:29:5e:d2:78:ef:3d:94:d0:08:d1:ae:0b:ad:20:
         ce:2d:6d:eb:36:6f:1c:78:1e:32:17:1b:af:f5:00:3d:45:11:
         6d:08:67:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 24 08:50:29 2024 by rpki-client on console-ams.rpki-client.org