Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/323830343a373663383a343030303a3a2f33342d3334203d3e20323731313334.roa
File:                     323830343a373663383a343030303a3a2f33342d3334203d3e20323731313334.roa (raw, json)
Hash identifier:          juNn7FRo3sfqkFQs3M/U/+I+TNr7Ai3XV0r7T1xzYio=
Subject key identifier:   4F:83:7E:13:4F:6B:76:D2:03:93:7D:73:A7:DB:10:32:32:0E:E2:2A
Certificate issuer:       /CN=E19214E5CCA9EB0ED78183894DBE463913F7272A
Certificate serial:       24D1A37040E8E4AEF37D6FA3955444D4073271D6
Authority key identifier: E1:92:14:E5:CC:A9:EB:0E:D7:81:83:89:4D:BE:46:39:13:F7:27:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/323830343a373663383a343030303a3a2f33342d3334203d3e20323731313334.roa
Signing time:             Thu 04 Apr 2024 08:42:51 +0000
ROA not before:           Thu 04 Apr 2024 08:37:51 +0000
ROA not after:            Thu 03 Apr 2025 08:42:51 +0000
asID:                     271134
IP address blocks:        2804:76c8:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d1:a3:70:40:e8:e4:ae:f3:7d:6f:a3:95:54:44:d4:07:32:71:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19214E5CCA9EB0ED78183894DBE463913F7272A
        Validity
            Not Before: Apr  4 08:37:51 2024 GMT
            Not After : Apr  3 08:42:51 2025 GMT
        Subject: CN=4F837E134F6B76D203937D73A7DB1032320EE22A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:91:83:ec:64:00:c4:50:85:ab:89:d9:28:d4:
                    c0:b0:0a:56:2f:30:cd:91:7c:39:72:48:84:fb:d4:
                    57:c0:ea:cc:12:4a:4b:4b:24:29:17:42:53:ac:98:
                    56:31:d6:0d:df:7c:35:43:ad:10:8c:16:a6:52:fe:
                    73:45:ef:1b:3f:a7:7c:6f:82:80:db:8d:59:29:48:
                    bd:cd:b0:c6:99:1a:15:48:67:b5:4d:10:dc:01:8b:
                    cd:10:4c:80:2b:3f:ae:e8:fb:fe:65:11:7f:31:2e:
                    e6:86:91:94:a0:c9:1d:4e:e2:6e:04:7e:d7:5c:94:
                    08:86:ef:33:cc:00:b1:c9:15:b6:80:d1:f2:12:a0:
                    41:65:b5:f2:ef:45:ae:ef:fc:08:89:69:2f:4f:99:
                    de:9b:d0:21:30:47:36:5b:3a:69:f3:17:38:4f:e2:
                    7c:58:58:c3:e3:09:82:ca:8f:3e:68:b6:d3:74:c4:
                    da:fa:b7:9b:80:d6:ea:61:32:3d:c8:3b:ec:3e:df:
                    59:dd:71:ac:04:8b:a7:40:72:59:31:22:1e:bf:1d:
                    0c:50:68:a2:21:64:af:5c:81:0c:94:08:bf:da:3b:
                    b0:bf:56:70:be:12:9f:bf:16:40:8b:9d:8e:45:f2:
                    2a:14:73:5b:60:6c:da:41:a2:14:39:9c:dc:d6:53:
                    99:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:83:7E:13:4F:6B:76:D2:03:93:7D:73:A7:DB:10:32:32:0E:E2:2A
            X509v3 Authority Key Identifier:
                keyid:E1:92:14:E5:CC:A9:EB:0E:D7:81:83:89:4D:BE:46:39:13:F7:27:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/323830343a373663383a343030303a3a2f33342d3334203d3e20323731313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:76c8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         bc:13:b9:8e:03:1c:94:6f:1e:29:32:47:55:31:cc:50:40:90:
         49:50:bb:60:8d:89:20:99:48:81:19:a7:79:98:df:e8:bb:50:
         ce:d0:24:cb:df:d8:68:b7:ca:8a:a6:4b:29:e2:4d:c0:22:2c:
         dd:29:6a:89:e5:93:4b:70:0f:1b:de:c2:21:36:2d:7a:cc:aa:
         e2:07:d4:26:4a:bf:be:2c:cf:ec:11:2e:76:fb:3a:65:cb:99:
         dd:64:4a:64:b3:4d:98:18:99:68:00:a0:e1:56:91:35:22:9f:
         8d:2e:15:98:dc:0b:65:85:11:b8:95:83:35:cb:86:00:9f:56:
         1e:9a:73:01:af:bd:98:63:d0:d2:a2:f1:0a:1d:f5:7a:f1:80:
         06:aa:68:66:24:9d:85:75:64:10:b4:22:b0:e4:ff:f8:0a:1d:
         cc:9e:2c:23:bf:a0:d6:97:b8:f8:21:b0:cc:97:65:8d:21:f8:
         5d:63:a6:31:e0:40:50:93:e4:15:cc:ff:9b:35:c1:33:ac:16:
         01:9f:ba:39:b1:3b:23:aa:c3:00:62:63:c8:87:46:27:fc:0e:
         59:25:d5:f3:62:1e:f0:c4:2b:b0:74:f6:fb:f5:2b:cd:d5:9c:
         df:c8:20:f3:75:e5:00:66:3c:e4:e0:92:30:28:cb:b1:b2:33:
         49:79:07:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org