Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/323830343a3366343a3a2f33322d3430203d3e20323632343037.roa
File:                     323830343a3366343a3a2f33322d3430203d3e20323632343037.roa (raw, json)
Hash identifier:          fO0gCvZl0Gu+4IM24KThqACGh+iD+sbgCI7HvLNFAA0=
Subject key identifier:   26:7F:02:99:B0:E2:FB:C2:75:1C:9F:96:E7:62:CF:AF:D8:0E:13:87
Certificate issuer:       /CN=0D7987DA06771261C796972D93929F1FCBE3D218
Certificate serial:       514F722087BC9A72B6DC458AC5C757E1854D536B
Authority key identifier: 0D:79:87:DA:06:77:12:61:C7:96:97:2D:93:92:9F:1F:CB:E3:D2:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7987DA06771261C796972D93929F1FCBE3D218.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/323830343a3366343a3a2f33322d3430203d3e20323632343037.roa
Signing time:             Wed 22 May 2024 15:21:39 +0000
ROA not before:           Wed 22 May 2024 15:16:39 +0000
ROA not after:            Wed 21 May 2025 15:21:39 +0000
asID:                     262407
IP address blocks:        2804:3f4::/32 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:4f:72:20:87:bc:9a:72:b6:dc:45:8a:c5:c7:57:e1:85:4d:53:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7987DA06771261C796972D93929F1FCBE3D218
        Validity
            Not Before: May 22 15:16:39 2024 GMT
            Not After : May 21 15:21:39 2025 GMT
        Subject: CN=267F0299B0E2FBC2751C9F96E762CFAFD80E1387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6d:77:85:f4:62:ca:10:ce:bb:5f:bd:fe:c2:
                    41:7e:26:03:0d:8c:0a:bd:49:1b:ca:a6:99:f0:ac:
                    ef:66:56:4c:3c:30:3e:38:83:ee:8d:a5:16:2c:c1:
                    ab:9f:16:59:cd:cb:36:12:77:28:1d:6d:86:58:5a:
                    98:55:03:f4:33:9b:56:a2:19:8a:62:fb:a3:66:60:
                    29:23:8c:0d:67:6a:23:ec:84:6f:ef:70:09:9a:b2:
                    41:be:cc:cf:10:2e:8e:72:45:3a:36:0d:a1:ba:8b:
                    e4:e9:74:26:78:4a:ab:ba:64:e5:a7:2e:26:c9:d6:
                    94:b4:19:45:b6:c5:de:c2:c8:72:6a:f0:f6:f6:98:
                    24:c2:52:9e:8b:b0:ae:65:b1:cb:82:65:7c:49:6a:
                    3c:65:e7:2b:3c:50:ff:08:f9:06:fb:75:16:c6:6d:
                    c9:fd:43:10:89:62:0b:cc:ce:b3:a1:17:3c:ab:ff:
                    22:f8:f6:d8:a8:ac:d3:b2:ba:c9:ed:b7:a5:56:14:
                    70:9a:7f:41:01:fa:5e:ad:d0:45:1a:8b:13:62:2e:
                    66:f2:af:e1:48:26:e0:bd:75:2e:4a:3d:fb:04:fb:
                    2b:47:76:0d:f7:8d:95:22:7e:ea:a5:b2:89:f5:0f:
                    23:82:df:9d:26:4a:a4:8e:00:5a:93:e0:49:6d:05:
                    ef:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7F:02:99:B0:E2:FB:C2:75:1C:9F:96:E7:62:CF:AF:D8:0E:13:87
            X509v3 Authority Key Identifier:
                keyid:0D:79:87:DA:06:77:12:61:C7:96:97:2D:93:92:9F:1F:CB:E3:D2:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/0D7987DA06771261C796972D93929F1FCBE3D218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7987DA06771261C796972D93929F1FCBE3D218.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/323830343a3366343a3a2f33322d3430203d3e20323632343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:c8:d8:01:80:eb:fa:f7:89:32:15:d4:8f:eb:5d:64:a9:8c:
         66:e7:9b:55:60:9b:00:d2:f0:8d:5c:c7:19:ea:e5:e1:e3:c1:
         a0:3c:97:72:56:66:a3:c9:8c:15:cd:03:fb:4e:a1:4a:e3:85:
         09:b9:d8:e4:80:82:bb:03:59:a9:7e:19:56:1e:d1:65:6d:fa:
         1d:26:26:90:f0:7c:84:0b:25:4e:51:7b:04:53:1c:3b:5d:8a:
         5f:78:b4:8c:3b:00:c6:7b:b4:e3:7f:2d:0f:39:51:c4:b1:93:
         87:4d:ba:e6:f1:44:fb:f9:03:83:0d:4b:a1:c0:bd:32:47:40:
         31:89:75:14:29:d3:d0:d7:7c:c0:0d:14:a1:1d:2f:ff:55:cd:
         f7:44:c2:51:79:b4:fb:1b:9a:4a:4b:44:94:a9:85:c5:72:43:
         1a:6a:41:24:36:32:43:46:6a:c8:e6:76:4c:26:e9:23:1a:3f:
         ba:7c:48:d4:e9:d5:9f:86:6f:c9:79:c7:7a:13:51:f1:6a:0e:
         5d:60:8b:b1:98:88:41:29:83:79:3b:6c:c2:ce:3e:32:5c:06:
         7f:57:fa:c3:d9:e8:1a:21:85:d7:13:da:df:7c:11:3e:db:27:
         ee:ae:8d:58:bc:3a:f2:4e:15:5f:48:ce:17:62:30:ca:cd:43:
         20:34:26:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 16:07:24 2024 by rpki-client on console-ams.rpki-client.org